last executing test programs:

1m48.208847221s ago: executing program 0 (id=119):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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")
openat(r0, &(0x7f0000000180)='./file1\x00', 0x13780, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x101080, 0x0, 0x20}, 0x18)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000000000010000ffffffe00003"])

1m46.762070791s ago: executing program 0 (id=121):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x883, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x138, 0xffffffffffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x1488, 0x0, 0x98, 'crypt\x00', {'aes-cbc-null', 0x20, @hex16=[0x37, 0x38, 0x32, 0x31, 0x34, 0x38, 0x35, 0x34, 0x31, 0x37, 0x62, 0x62, 0x65, 0x39, 0x33, 0x62, 0x61, 0x36, 0x61, 0x34, 0x62, 0x38, 0x36, 0x31, 0x38, 0x64, 0x65, 0x38, 0x66, 0x30, 0x35, 0x64], 0x20, '128', 0x20, {@ram_num={'1:', 0x1}, 0x20, '8'}, ' 2 sector_size:4096 iv_large_sectors'}}]})

1m46.438758724s ago: executing program 0 (id=124):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000100), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/104, 0x68}, {0x0}, {&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x6}, 0x12003)
recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000e00))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r6, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0xffff, 0x7}, {0xb, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)
close(r7)

1m45.038666289s ago: executing program 0 (id=131):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f00000089c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x201861, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m41.833972561s ago: executing program 0 (id=138):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0)

1m38.451085691s ago: executing program 0 (id=147):
r0 = io_uring_setup(0x2df1, &(0x7f0000000340)={0x0, 0x446c, 0x1000, 0x1, 0x188})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000400)={0x1, 0x1, 0x7, 0x7})
fcntl$lock(r1, 0x26, &(0x7f0000000440)={0x0, 0x2, 0x6, 0x9})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

1m37.752059814s ago: executing program 32 (id=147):
r0 = io_uring_setup(0x2df1, &(0x7f0000000340)={0x0, 0x446c, 0x1000, 0x1, 0x188})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000400)={0x1, 0x1, 0x7, 0x7})
fcntl$lock(r1, 0x26, &(0x7f0000000440)={0x0, 0x2, 0x6, 0x9})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

7.722246149s ago: executing program 3 (id=487):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[], 0x0)

7.667716574s ago: executing program 1 (id=488):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c3)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f000000a3c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xb8, 0x0, 0x3, [{{0x3, 0x2, 0x4, 0x1b000000, 0x0, 0x80000000, {0x1, 0xfffffffffffffff7, 0x4, 0x9, 0x53d2, 0x2, 0x4, 0x800, 0xffffffff, 0x6000, 0x100005, r2, r3, 0x0, 0x40}}, {0x3, 0x8000, 0xd, 0x7f, '.\x0f\t\x00\"\xa7\xfe\x1f\xebE\xfb\x9b\x01'}}]}, 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)

7.528269408s ago: executing program 3 (id=490):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000540)={0x0, 0x7fffffff, 0x0, 'queue1\x00', 0x3})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000600))
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000006c0)={{0x0, 0x2}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x3, 0x0, 0x3}, 0xfffffffb})

7.238030888s ago: executing program 3 (id=491):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x224002, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x80007}]})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000600)={'rose0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'rose0\x00', 0x112})

5.944909821s ago: executing program 1 (id=493):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
ppoll(&(0x7f0000000300)=[{r0, 0x4804}], 0x1, &(0x7f0000000340)={0x77359400}, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x200)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xff)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x92)

5.876907707s ago: executing program 4 (id=494):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f00000011c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000600)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000002380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/156, 0x9c}], 0x1}, 0x8000}], 0x1, 0x2102, 0x0)
write$binfmt_misc(r0, &(0x7f0000001380), 0x2000011a)

5.598228436s ago: executing program 2 (id=495):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.26772552s ago: executing program 4 (id=496):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f79c6b82c008ec0f7ee66b98100004066b87bf9000066ba000000000f300f22c72e0f01760e0f01c966f2f265f081a90000e51200000f009f00a066b8010000000f01d9", 0x45}], 0x1, 0x6, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000200)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000, {}, 0x1}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.984822959s ago: executing program 1 (id=497):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0x5, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440e0}, 0x4890)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28040010)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @random="2abcd265829d"}, 0x14)

4.951102732s ago: executing program 4 (id=498):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000680)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000700)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f0000000780)=ANY=[], 0x32600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000900)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000940)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc)

4.543250954s ago: executing program 4 (id=499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0)

4.528344456s ago: executing program 2 (id=500):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={0x0}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xb, 0xa, 0xfff5, 0x3, 0xa, "96ca676bc0d8a891"})
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x41, 0x4, 0x5, 0x17, "a75d000000000000008105d34c113b6800"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=""/21, 0x15}], 0x1)
read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020)

4.236429106s ago: executing program 2 (id=501):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000380)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x40814}, 0xc080)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0xe9, 0x9, 0x7}]}, 0x10)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000500)={0x0, 0x0, 0x1}, 0x8)
mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x40, 0x22001, 0xfffffffffffffffa)

4.007942549s ago: executing program 2 (id=502):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x102, 0x7ff, 0x1000000002, 0x0, 0x8, 0x0, 0x6, 0x0, 0x8000], 0x1, 0x3c4210})
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x930, 0x1, 0x4f833, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x54000, 0xdddd1000, 0xe, 0x8, 0x7f, 0x5, 0x8, 0x7c, 0x10, 0x2, 0x1, 0xfa}, {0x7000, 0x70000, 0xc, 0xc3, 0x8, 0xfc, 0x5, 0x3, 0x7f, 0x3, 0x2, 0x6}, {0x1000, 0x26000, 0xb, 0xc, 0x40, 0x80, 0xf7, 0xfc, 0x7f, 0xa, 0xff, 0xdb}, {0x7000, 0x16000, 0x8, 0x31, 0x6, 0x3, 0x10, 0x5, 0xfe, 0x3, 0xf3, 0x9c}, {0xeeef0000, 0x25000, 0x10, 0x7, 0x8, 0x4, 0x80, 0x2, 0xf9, 0x6, 0x4, 0x6d}, {0x50000, 0xeeea9000, 0xf, 0x6, 0xb, 0x80, 0xf7, 0x6, 0x2, 0x15, 0xff, 0x1}, {0xf000, 0x51000, 0xd, 0x1, 0x3, 0x5, 0x7, 0x3, 0x10, 0xaf, 0x6}, {0x0, 0x25000, 0xc, 0x6, 0xa, 0x4, 0x4, 0x0, 0x5, 0x4, 0x65, 0x30}, {0xeeef5002, 0x101}, {0x4000, 0xa}, 0x5000a, 0x0, 0x60000, 0x80, 0xa, 0x2000, 0x8000000, [0x8, 0xfffffffffffffff9, 0xe47, 0x2]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.5068858s ago: executing program 2 (id=503):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000100), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/104, 0x68}, {0x0}, {&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x6}, 0x12003)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000dc0)={{0x8, 0x2, &(0x7f0000000d80)=[{0x1, 0x0, 0xc0000}, {0x74, 0x0, 0x6e35}]}, 0x1, 0x81, 0x2, 0x2, 0x0, 0x1, 0x2, 0x232c, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000e00)={r7})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r6, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0xffff, 0x7}, {0xb, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)
close(r8)

1.886854407s ago: executing program 1 (id=504):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x60000000004, 0x1000000003, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004ce, 0xec63, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x1, 0x2, 0xfffffffffffffffd], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000400)=@arm64={0x7, 0xd, 0x1, '\x00', 0x4})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x8080000, 0x0, 0x0, 0x88, 0x0, 0xf8, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x7, 0xfd}, {0x41000, 0x5000, 0x1f, 0xfd, 0x4, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0xfec43000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0xfc, 0x7, 0xf}, {0xeeee8000, 0xe6ee9ffc, 0x8, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x3, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0x3000, 0xf, 0x0, 0x0, 0xaf, 0x0, 0xca, 0x4, 0x3, 0x0, 0x3}, {0x80a0000}, {0x50000}, 0xddf8fff3, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x80000000, 0x0, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.85341109s ago: executing program 3 (id=505):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "9b75f8279d03466f", "18c19be745b431a1b7a6907600", "7d6a63a1", "d749c52a7fa8d9fb"}, 0x28)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000380)="2e4c6fd4fb0094d48e2c0c1827", 0xd}], 0x1)
pipe(&(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)

1.624841883s ago: executing program 4 (id=506):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x14, 0x76, 0x1, 0x6, 0x25dfdbfc, {0x0, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0xc880}, 0x40000)
r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
add_key(0x0, 0x0, 0x0, 0x0, r0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./debug\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='1', 0x1)

1.496795256s ago: executing program 1 (id=507):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000100), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/104, 0x68}, {0x0}, {&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x6}, 0x12003)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000dc0)={{0x8, 0x2, &(0x7f0000000d80)=[{0x1, 0x0, 0xc0000}, {0x74, 0x0, 0x6e35}]}, 0x1, 0x81, 0x2, 0x2, 0x0, 0x1, 0x2, 0x232c, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000e00)={r7})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r6, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0xffff, 0x7}, {0xb, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)
close(r8)

503.255638ms ago: executing program 2 (id=508):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e2793f10d10501200028000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyUSB0\x00', 0x2, 0x0)

502.095338ms ago: executing program 4 (id=516):
socket$netlink(0x10, 0x3, 0x14)
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
ptrace$getregs(0xffffffffffffffff, r1, 0x7, &(0x7f0000000000)=""/100)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(&(0x7f00000001c0), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000300), 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
fanotify_init(0xef0, 0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000500)=[{0x6, 0xff, 0x0, 0x7fff0026}]})
r5 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0007}]})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000780)={0x20004, <r8=>r6, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000007c0)={<r9=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000800)={r9})
close_range(r4, 0xffffffffffffffff, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})

323.581187ms ago: executing program 3 (id=509):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000006c0)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x56202325, @empty, 0x4000005}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000740)=0x20a, 0x4)
sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000a40)="ea012351ddc58332fdb2081dbbbe1e347aaa8ec7d8c9738c1a2ab4412ce01f0daf2fcd367a783443fa96baaa893d0666dd21482a2485ef23bfb8a14c917b4ffb8f694566151da0ae7b401ece8598e6cd7b97a58991c0725cee218df6ea0c73adfc6de77514dc15c7c834daa97759b1e88ef28881bbac8495721a6745117b43feb4932a959acc49cf1b5175a73d2c94bfbd01e7f72c0b2874ffec8bc1c342e5708e8b04696139f245560d3cdf772a0d50e7427f81afb0c6ada2794406f91f5f4cc4217324f2c839fdc5bcc59eef0d", 0xce}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)="a71294e71ccfa74413067413c3d82b3117224f1170bde5ec5878d84c15e2c76371ad6671d8b553bbb75617d605087eae569d55b652c3c323a53d78ca4ceac331ca37dfb81b021fdab96f832b11f7b850cdce2e23112292f0164c", 0x5a}], 0x3}}], 0x2, 0x4000001)
r1 = dup(r0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0)

100.290539ms ago: executing program 3 (id=510):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
unshare(0x22020400)
tee(r0, r3, 0xfffffffffffffc01, 0x0)
r4 = io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef})
close_range(r4, 0xffffffffffffffff, 0x0)
tee(r0, r3, 0x60000000000, 0x0)
read$FUSE(r2, &(0x7f0000002f80)={0x2020}, 0x2020)

0s ago: executing program 1 (id=511):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083f7c8585af679581ab62438f23ef4adeb4629413e0cf6101d3afb1e8c1", @ANYRESHEX, @ANYRES16=r0, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x1, 0x55e, &(0x7f0000001080)="$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")
r1 = fanotify_init(0x40, 0x80000)
readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
getdents64(r2, &(0x7f0000000140)=""/38, 0x26)

kernel console output (not intermixed with test programs):

ing ep0 maxpacket: 32
[   97.948292][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.966475][ T5112] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.988272][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[   97.995605][ T5112] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   98.016123][ T5112] usb 4-1: config 0 interface 0 has no altsetting 0
[   98.023986][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.033666][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   98.044841][ T5112] usb 4-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00
[   98.054503][ T5112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.063010][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[   98.079329][    T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   98.096500][    T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   98.110090][ T5112] usb 4-1: config 0 descriptor??
[   98.133748][    T8] usb 2-1: Product: syz
[   98.142442][    T8] usb 2-1: Manufacturer: syz
[   98.147142][    T8] usb 2-1: SerialNumber: syz
[   98.184958][    T8] usb 2-1: config 0 descriptor??
[   98.217419][    T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[   98.511019][ T5859] usb 2-1: USB disconnect, device number 3
[   98.537182][ T5859] yurex 2-1:0.0: USB YUREX #0 now disconnected
[   98.594679][ T5112] asus 0003:0B05:1807.0002: No inputs registered, leaving
[   98.646637][ T5112] asus 0003:0B05:1807.0002: hiddev0,hidraw0: USB HID vff.ff Device [HID 0b05:1807] on usb-dummy_hcd.3-1/input0
[   98.847136][ T5112] usb 4-1: USB disconnect, device number 2
[   99.178721][ T5859] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   99.416782][ T5859] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[   99.438633][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   99.460318][ T5859] usb 3-1: Product: syz
[   99.464583][ T5859] usb 3-1: Manufacturer: syz
[   99.573535][ T6121] device-mapper: verity: sha512 using implementation "sha512-avx2"
[   99.659594][ T6121] device-mapper: table: 248:7: verity: Hash device is too small (-E2BIG)
[   99.668178][ T6121] device-mapper: ioctl: error adding target to table
[   99.888953][ T5881] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  100.595836][ T5798] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10
[  100.596724][ T5798] Bluetooth: unknown link type 255
[  100.620427][ T5798] Bluetooth: hci3: connection err: -111
[  100.820093][ T5881] usb 4-1: not running at top speed; connect to a high speed hub
[  100.829895][ T5881] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  100.842678][ T5881] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  100.855951][ T5881] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  100.865729][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.874574][ T5881] usb 4-1: Product: syz
[  100.878962][ T5881] usb 4-1: Manufacturer: syz
[  100.884942][ T5881] usb 4-1: SerialNumber: syz
[  100.893823][ T5859] scsi host1: uas
[  100.914592][ T5881] oti6858 4-1:1.0: oti6858 converter detected
[  100.924101][    C1] scsi 1:0:0:0: tag#24 bogus IU 61 uas-tag 1 inflight: CMD 
[  100.932208][    C1] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00
[  100.954735][ T5881] usb 4-1: oti6858 converter now attached to ttyUSB0
[  101.141766][    C1] usb 3-1: cmd cmplt err -71
[  101.145365][ T5881] usb 3-1: USB disconnect, device number 2
[  101.162207][ T5881] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[  101.170530][ T5881] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00
[  101.239264][ T6125] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90
[  101.252321][    T8] usb 4-1: USB disconnect, device number 3
[  101.267614][    T8] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  101.280205][    T8] oti6858 4-1:1.0: device disconnected
[  101.457126][ T6139] loop0: detected capacity change from 0 to 16
[  101.493588][ T6139] erofs: (device loop0): mounted with root inode @ nid 36.
[  101.520779][   T28] audit: type=1800 audit(1794590103.306:3): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.71" name="file1" dev="loop0" ino=86 res=0 errno=0
[  101.888965][ T6130] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  101.925130][ T6144] loop3: detected capacity change from 0 to 256
[  101.936865][ T6144] =======================================================
[  101.936865][ T6144] WARNING: The mand mount option has been deprecated and
[  101.936865][ T6144]          and is ignored by this kernel. Remove the mand
[  101.936865][ T6144]          option from the mount to silence this warning.
[  101.936865][ T6144] =======================================================
[  101.988031][ T6145] tipc: Started in network mode
[  102.022603][ T6145] tipc: Node identity 7f000001, cluster identity 4711
[  102.038229][ T6144] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  102.052574][ T6145] tipc: Enabled bearer <udp:syz1>, priority 10
[  102.267374][ T6149] loop3: detected capacity change from 0 to 512
[  102.766955][ T6154] pim6reg: entered allmulticast mode
[  102.872800][ T6154] pim6reg: left allmulticast mode
[  102.987129][ T6153] loop2: detected capacity change from 0 to 33280
[  103.267897][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'.
[  103.326652][ T6153] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.77: corrupted in-inode xattr: invalid ea_ino
[  103.346317][ T6160] loop1: detected capacity change from 0 to 33280
[  103.358675][ T6160] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  103.374257][ T6160] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  103.421395][ T6153] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.77: couldn't read orphan inode 15 (err -117)
[  103.421431][ T6160] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.78: invalid indirect mapped block 9 (level 0)
[  103.503641][ T6153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.547758][ T6160] EXT4-fs (loop1): 1 truncate cleaned up
[  103.596094][ T6160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.641235][ T6155] hsr_slave_1 (unregistering): left promiscuous mode
[  103.692719][    T8] tipc: Node number set to 2130706433
[  103.769593][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.817547][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.309094][ T5859] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  104.388228][ T6186] loop2: detected capacity change from 0 to 33280
[  104.409949][ T6186] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  104.443683][ T6186] EXT4-fs (loop2): 1 truncate cleaned up
[  104.454768][ T6186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.498755][ T5862] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  104.508157][ T5859] usb 2-1: Using ep0 maxpacket: 32
[  104.529074][ T5859] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  104.548446][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.561502][ T5859] usb 2-1: config 0 descriptor??
[  104.587982][ T5859] as10x_usb: device has been detected
[  104.599805][ T5859] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  104.632016][ T5859] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  104.689107][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  104.698129][ T5862] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.718256][ T5862] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.747034][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0
[  104.754220][ T5862] usb 4-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00
[  104.779660][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.790794][ T5859] as10x_usb: error during firmware upload part1
[  104.797835][ T5859] Registered device nBox DVB-T Dongle
[  104.799338][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.830578][ T5862] usb 4-1: config 0 descriptor??
[  104.845089][ T5859] usb 2-1: USB disconnect, device number 4
[  104.956709][ T5859] Unregistered device nBox DVB-T Dongle
[  104.963760][ T5859] as10x_usb: device has been disconnected
[  105.583682][ T6192] pim6reg: entered allmulticast mode
[  105.593759][ T6184] loop0: detected capacity change from 0 to 32768
[  105.661871][ T6194] pim6reg: left allmulticast mode
[  106.022810][ T5862] microsoft 0003:045E:00DC.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.3-1/input0
[  106.062860][ T5862] microsoft 0003:045E:00DC.0003: no inputs found
[  106.072791][ T5862] microsoft 0003:045E:00DC.0003: could not initialize ff, continuing anyway
[  106.093300][ T5862] usb 4-1: USB disconnect, device number 4
[  106.102653][ T6184] JBD2: Ignoring recovery information on journal
[  106.195189][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'.
[  106.251514][ T6184] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  106.277168][ T6198] fido_id[6198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  106.483307][ T6195] hsr_slave_1 (unregistering): left promiscuous mode
[  106.520187][ T6184] overlayfs: upper fs does not support tmpfile.
[  106.538465][ T6184] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  106.556720][ T6184] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  106.590248][ T6184] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  106.609379][ T6184] OCFS2: File system is now read-only.
[  106.622190][ T6184] (syz.0.88,6184,0):ocfs2_search_chain:1783 ERROR: status = -30
[  106.631092][ T6184] (syz.0.88,6184,0):ocfs2_search_chain:1893 ERROR: status = -30
[  106.668673][ T6184] (syz.0.88,6184,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  106.687433][ T6184] (syz.0.88,6184,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  106.716846][ T6184] (syz.0.88,6184,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  106.768472][ T6184] (syz.0.88,6184,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  106.784804][ T6184] (syz.0.88,6184,0):ocfs2_block_group_alloc_contig:455 ERROR: status = -30
[  106.808920][ T6184] (syz.0.88,6184,0):ocfs2_block_group_alloc:727 ERROR: status = -30
[  106.817393][ T6184] (syz.0.88,6184,0):ocfs2_block_group_alloc:780 ERROR: status = -30
[  106.848646][ T6184] (syz.0.88,6184,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30
[  106.868677][ T6184] (syz.0.88,6184,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30
[  106.878043][ T6184] (syz.0.88,6184,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30
[  106.908989][ T6184] (syz.0.88,6184,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30
[  106.930441][ T6184] (syz.0.88,6184,0):ocfs2_init_xattr_set_ctxt:3510 ERROR: status = -30
[  106.948681][ T6184] (syz.0.88,6184,0):ocfs2_xattr_set:3865 ERROR: status = -30
[  106.964549][ T6184] overlayfs: failed to set xattr on upper
[  106.980700][ T6184] overlayfs: ...falling back to redirect_dir=nofollow.
[  106.987645][ T6184] overlayfs: ...falling back to index=off.
[  107.008757][ T6184] overlayfs: ...falling back to uuid=null.
[  107.019963][ T6184] overlayfs: upper fs missing required features.
[  107.087314][ T6213] loop1: detected capacity change from 0 to 164
[  107.175136][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  107.211029][ T6213] Unable to read rock-ridge attributes
[  107.495940][ T6217] loop2: detected capacity change from 0 to 32896
[  107.631085][ T6217] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  107.787093][ T6217] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.851179][ T6205] loop3: detected capacity change from 0 to 32768
[  108.019273][ T6205] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.95 (6205)
[  108.584195][ T6225] pim6reg: entered allmulticast mode
[  108.590175][ T6227] pim6reg: left allmulticast mode
[  108.882412][ T6205] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  108.908645][ T6205] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  108.918179][ T6205] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  108.990760][ T6205] BTRFS info (device loop3): use zstd compression, level 3
[  108.998081][ T6205] BTRFS info (device loop3): using free space tree
[  109.046293][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.073704][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'.
[  109.118147][ T6219] loop1: detected capacity change from 0 to 32768
[  109.209171][ T6219] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.100 (6219)
[  109.338641][ T6205] BTRFS info (device loop3): enabling ssd optimizations
[  109.376226][ T6205] BTRFS info (device loop3): auto enabling async discard
[  109.721322][ T6253] pim6reg: entered allmulticast mode
[  109.817066][ T6252] pim6reg: left allmulticast mode
[  110.449297][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'.
[  110.469142][ T5791] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5791)
[  110.489232][ T5787] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  110.622925][ T6261] loop0: detected capacity change from 0 to 32896
[  110.688797][ T6261] EXT4-fs (loop0): Test dummy encryption mode enabled
[  110.738738][ T5794] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop3 scanned by udevd (5794)
[  110.743817][ T6261] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.882732][ T6261] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  111.516585][ T6277] pim6reg: entered allmulticast mode
[  111.618021][ T6274] pim6reg: left allmulticast mode
[  112.154306][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'.
[  112.211735][   T52] Bluetooth: hci2: unexpected event 0x04 length: 12 > 10
[  112.211775][   T52] Bluetooth: unknown link type 255
[  112.224767][   T52] Bluetooth: hci2: connection err: -111
[  112.395069][ T6279] hsr_slave_1 (unregistering): left promiscuous mode
[  112.431244][ T6261] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  112.596500][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.828658][ T5859] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  113.212518][ T6305] pim6reg: entered allmulticast mode
[  113.310775][ T6305] pim6reg: left allmulticast mode
[  113.954829][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.976896][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'.
[  113.990044][ T5859] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  114.007060][ T5859] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  114.038448][ T6301] pim6reg: entered allmulticast mode
[  114.065912][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'.
[  114.086342][ T5859] usb 2-1: Product: syz
[  114.112824][ T5859] usb 2-1: Manufacturer: syz
[  114.131410][ T5859] usb 2-1: SerialNumber: syz
[  114.165838][ T5859] usb 2-1: config 0 descriptor??
[  114.184879][ T5859] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected
[  114.195036][ T5859] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  114.225264][ T5859] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88
[  114.271463][ T5859] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  114.300143][ T5859] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  114.316346][ T5859] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  114.340803][ T5859] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  114.379259][ T5859] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  114.429115][ T5859] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  114.451163][ T5859] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  114.489811][ T5859] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  114.762395][ T5112] usb 2-1: USB disconnect, device number 5
[  114.789038][ T5112] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  114.807301][ T6328] loop0: detected capacity change from 0 to 33280
[  114.825677][ T6328] EXT4-fs: Ignoring removed nobh option
[  114.839554][ T5112] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  114.918878][ T5112] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  114.994533][ T5112] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  115.170093][ T6328] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.119: invalid indirect mapped block 256 (level 2)
[  115.248264][ T5112] keyspan 2-1:0.0: device disconnected
[  115.448823][ T6332] pim6reg: left allmulticast mode
[  115.631415][ T6328] EXT4-fs (loop0): 2 truncates cleaned up
[  115.696013][ T6328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.973376][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'.
[  116.027848][   T52] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  116.027890][   T52] Bluetooth: unknown link type 255
[  116.040776][   T52] Bluetooth: hci1: connection err: -111
[  116.193034][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.608746][ T6355] Illegal XDP return value 4294967294 on prog  (id 14) dev N/A, expect packet loss!
[  117.058477][ T6356] pim6reg: entered allmulticast mode
[  117.130386][ T6357] pim6reg: left allmulticast mode
[  117.576729][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'.
[  118.206269][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  118.375036][ T6378] pim6reg: entered allmulticast mode
[  118.467112][ T6375] pim6reg: left allmulticast mode
[  119.137409][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'.
[  119.146394][ T5881] usb 3-1: Using ep0 maxpacket: 32
[  119.156388][ T5881] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  119.165472][ T5881] usb 3-1: config 0 has no interface number 0
[  119.172239][ T5881] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  119.195162][ T5881] usb 3-1: config 0 interface 85 has no altsetting 0
[  119.206871][ T6385] pim6reg: entered allmulticast mode
[  119.215306][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  119.225852][ T6388] pim6reg: left allmulticast mode
[  119.234681][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.254944][ T5881] usb 3-1: Product: syz
[  119.276606][ T5881] usb 3-1: Manufacturer: syz
[  119.285339][ T5881] usb 3-1: SerialNumber: syz
[  119.299748][ T5881] usb 3-1: config 0 descriptor??
[  119.329328][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'.
[  119.601220][ T6385] hsr_slave_1 (unregistering): left promiscuous mode
[  119.948912][ T5881] appletouch 3-1:0.85: Geyser mode initialized.
[  119.975197][ T5881] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6
[  119.999858][ T6387] loop0: detected capacity change from 0 to 40427
[  120.071527][ T6387] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  120.122817][ T6387] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  120.132779][ T6387] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  120.149384][ T6387] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  120.157879][ T6387] F2FS-fs (loop0): Image doesn't support compression
[  120.185706][ T6387] F2FS-fs (loop0): invalid crc value
[  120.342065][ T6395] tty tty2: ldisc open failed (-12), clearing slot 1
[  120.371793][   T23] usb 3-1: USB disconnect, device number 3
[  120.433173][ T6387] F2FS-fs (loop0): Found nat_bits in checkpoint
[  120.475714][   T23] appletouch 3-1:0.85: input: appletouch disconnected
[  120.709620][ T6387] F2FS-fs (loop0): Start checkpoint disabled!
[  120.756032][ T6387] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  120.776593][ T6387] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  120.855675][ T6387] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of f2fs_mkdir+0x44b/0x530
[  120.868227][ T6387] F2FS-fs (loop0): Stopped filesystem due to reason: 1
[  120.892689][ T6387] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  120.912945][ T6387] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[  121.119098][ T5789] syz-executor: attempt to access beyond end of device
[  121.119098][ T5789] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  121.157038][ T5789] syz-executor: attempt to access beyond end of device
[  121.157038][ T5789] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  122.151973][ T6403] loop3: detected capacity change from 0 to 32768
[  123.393381][ T6403] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  123.451093][ T6403] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  123.498784][ T6403] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  123.546810][ T6403] BTRFS info (device loop3): use zstd compression, level 3
[  123.582631][ T6403] BTRFS info (device loop3): using free space tree
[  123.603301][   T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.644267][ T6416] pim6reg: entered allmulticast mode
[  123.658897][ T6417] pim6reg: left allmulticast mode
[  123.739671][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'.
[  123.790186][ T6403] BTRFS info (device loop3): enabling ssd optimizations
[  123.797367][ T6403] BTRFS info (device loop3): auto enabling async discard
[  123.956220][   T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.083707][ T5787] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  124.132801][   T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.274256][   T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.438391][ T6455] loop2: detected capacity change from 0 to 33792
[  124.596569][ T6455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.041054][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.321414][ T6472] loop1: detected capacity change from 0 to 33280
[  125.383946][ T6472] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  125.437040][ T6472] EXT4-fs (loop1): 1 truncate cleaned up
[  125.450149][ T6472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.499477][ T6472] EXT4-fs (loop1): shut down requested (1)
[  125.576142][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.018647][ T5112] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  126.076770][ T6488] loop2: detected capacity change from 0 to 1024
[  127.104678][ T6489] pim6reg: entered allmulticast mode
[  127.162175][ T6492] pim6reg: left allmulticast mode
[  127.181430][ T5112] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.246858][ T5112] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  127.289266][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'.
[  127.304162][ T5112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.343851][ T5112] usb 4-1: config 0 descriptor??
[  127.382744][ T5112] pwc: Askey VC010 type 2 USB webcam detected.
[  127.440140][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.451057][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.467326][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.476370][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.490436][   T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  127.507941][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.541731][ T2913] hfsplus: bad catalog file entry
[  127.588891][ T2913] hfsplus: b-tree write err: -5, ino 3
[  127.851473][ T5112] pwc: recv_control_msg error -32 req 02 val 2b00
[  128.371301][ T6502] rxe_eth0 speed is unknown, defaulting to 1000
[  128.442416][ T6510] pim6reg: entered allmulticast mode
[  128.514743][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'.
[  128.897761][ T6516] loop1: detected capacity change from 0 to 33280
[  128.950373][ T6516] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[  128.974739][ T6516] System zones: 0-2, 18-18, 34-34
[  129.101903][ T5112] pwc: recv_control_msg error -71 req 02 val 2c00
[  129.148423][ T6516] EXT4-fs (loop1): 1 orphan inode deleted
[  129.164652][ T5112] pwc: recv_control_msg error -71 req 04 val 1000
[  129.184608][  T171] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  129.202804][ T6516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.218670][ T5112] pwc: recv_control_msg error -71 req 04 val 1300
[  129.237364][ T5112] pwc: recv_control_msg error -71 req 04 val 1400
[  129.244923][  T171] EXT4-fs error (device loop1): ext4_release_dquot:6994: comm kworker/u4:5: Failed to release dquot type 1
[  129.280203][ T5112] pwc: recv_control_msg error -71 req 02 val 2000
[  129.297391][ T5112] pwc: recv_control_msg error -71 req 02 val 2100
[  129.316312][ T6516] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.347085][ T5112] pwc: recv_control_msg error -71 req 04 val 1500
[  129.379676][ T5112] pwc: recv_control_msg error -71 req 02 val 2500
[  129.403283][ T5112] pwc: recv_control_msg error -71 req 02 val 2400
[  129.440519][ T5112] pwc: recv_control_msg error -71 req 02 val 2600
[  129.458725][ T5112] pwc: recv_control_msg error -71 req 02 val 2900
[  129.478707][ T5112] pwc: recv_control_msg error -71 req 02 val 2800
[  129.495612][ T5112] pwc: recv_control_msg error -71 req 04 val 1100
[  129.503252][ T5112] pwc: recv_control_msg error -71 req 04 val 1200
[  129.530905][ T5112] pwc: Registered as video103.
[  129.542546][ T5112] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[  129.569517][ T5798] Bluetooth: hci3: command tx timeout
[  129.638307][ T5112] usb 4-1: USB disconnect, device number 5
[  129.798412][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.089812][ T6541] jffs2: notice: (6541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  130.245991][ T6547] loop2: detected capacity change from 0 to 33792
[  130.316558][ T6547] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  130.329847][ T6549] syz.1.165 uses obsolete (PF_INET,SOCK_PACKET)
[  130.408760][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  130.602653][ T6553] loop2: detected capacity change from 0 to 1024
[  130.639374][   T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  130.668664][   T27] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  130.689877][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.775519][ T5798] Bluetooth: hci0: unexpected event 0x04 length: 12 > 10
[  130.775589][ T5798] Bluetooth: unknown link type 255
[  130.788392][ T5798] Bluetooth: hci0: connection err: -111
[  130.988075][   T27] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device
[  131.074818][   T27] wwan wwan0: port wwan0qmi0 attached
[  131.121277][   T60] hsr_slave_0: left promiscuous mode
[  131.132666][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.143043][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.181486][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.202161][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.215843][   T60] bridge_slave_1: left allmulticast mode
[  131.228711][   T60] bridge_slave_1: left promiscuous mode
[  131.236569][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.261417][   T60] bridge_slave_0: left allmulticast mode
[  131.267143][   T60] bridge_slave_0: left promiscuous mode
[  131.275235][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.345618][   T60] veth1_macvtap: left promiscuous mode
[  131.354432][   T60] veth0_macvtap: left promiscuous mode
[  131.360820][   T60] veth1_vlan: left promiscuous mode
[  131.366602][   T60] veth0_vlan: left promiscuous mode
[  131.558810][ T5112] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  131.658575][ T5798] Bluetooth: hci3: command tx timeout
[  131.754688][ T5112] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  131.779081][ T5112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.787264][ T5112] usb 3-1: Product: syz
[  131.806475][ T5112] usb 3-1: Manufacturer: syz
[  131.829818][ T5112] usb 3-1: SerialNumber: syz
[  131.926600][    T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  132.163362][ T6580] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  132.680603][   T60] team0 (unregistering): Port device team_slave_1 removed
[  132.772304][   T60] team0 (unregistering): Port device team_slave_0 removed
[  132.826281][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.835302][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.856771][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.930573][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.009397][    T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  133.017934][    T8] ath9k_htc: Failed to initialize the device
[  133.021874][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.032555][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  133.114825][    T8] usb 3-1: ath9k_htc: USB layer deinitialized
[  133.146872][ T5863] usb 3-1: USB disconnect, device number 4
[  133.729356][ T5798] Bluetooth: hci3: command tx timeout
[  134.226075][   T60] bond0 (unregistering): Released all slaves
[  134.329248][ T6603] loop2: detected capacity change from 0 to 33280
[  134.381822][ T6603] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  134.409947][ T6603] EXT4-fs (loop2): orphan cleanup on readonly fs
[  134.429397][ T6603] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[  134.447708][ T6603] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  134.459171][ T6603] EXT4-fs error (device loop2): ext4_acquire_dquot:6958: comm syz.2.176: Failed to acquire dquot type 1
[  134.475919][ T6603] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.176: bg 0: block 40: padding at end of block bitmap is not set
[  134.496386][ T6603] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6660: Corrupt filesystem
[  134.556402][ T6603] EXT4-fs (loop2): 1 truncate cleaned up
[  134.595369][ T6603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  134.603549][   T27] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 26:16:a0:91:ba:b4
[  134.652921][ T6603] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.176: bad symlink.
[  134.748859][   T27] usb 4-1: USB disconnect, device number 6
[  134.756961][   T27] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device
[  134.864534][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.990405][   T27] wwan wwan0: port wwan0qmi0 disconnected
[  135.084474][ T6619] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  135.116165][ T6502] chnl_net:caif_netlink_parms(): no params data found
[  135.281573][ T6502] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.305846][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.314935][ T6502] bridge_slave_0: entered allmulticast mode
[  135.330869][ T6502] bridge_slave_0: entered promiscuous mode
[  135.350147][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.359920][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.367195][ T6502] bridge_slave_1: entered allmulticast mode
[  135.407455][ T6627] loop1: detected capacity change from 0 to 2048
[  135.415155][ T6502] bridge_slave_1: entered promiscuous mode
[  135.477825][ T6627]  loop1: p2 < > p3 < > p4 < >
[  135.486585][ T6627] loop1: partition table partially beyond EOD, truncated
[  135.516786][ T6502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.517725][ T6627] loop1: p2 start 4278190080 is beyond EOD, truncated
[  135.568361][ T6502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.581622][ T6627] loop1: p3 start 720896 is beyond EOD, truncated
[  135.724582][ T6502] team0: Port device team_slave_0 added
[  135.768007][ T6502] team0: Port device team_slave_1 added
[  135.809335][ T5798] Bluetooth: hci3: command tx timeout
[  135.853715][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.867573][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.893587][    C1] vkms_vblank_simulate: vblank timer overrun
[  135.902740][ T6502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.917525][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.069842][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.333764][ T6502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.771609][ T6641] pim6reg: entered allmulticast mode
[  136.778104][ T6642] pim6reg: left allmulticast mode
[  137.323984][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'.
[  137.457596][ T6502] hsr_slave_0: entered promiscuous mode
[  137.479243][ T6502] hsr_slave_1: entered promiscuous mode
[  137.492194][ T6502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.508676][ T6502] Cannot create hsr debugfs directory
[  137.714241][ T6661] FAULT_INJECTION: forcing a failure.
[  137.714241][ T6661] name failslab, interval 1, probability 0, space 0, times 0
[  137.756725][ T6661] CPU: 0 PID: 6661 Comm: syz.3.185 Not tainted syzkaller #0
[  137.764129][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  137.774338][ T6661] Call Trace:
[  137.777698][ T6661]  <TASK>
[  137.780681][ T6661]  dump_stack_lvl+0x18c/0x250
[  137.785431][ T6661]  ? show_regs_print_info+0x20/0x20
[  137.790721][ T6661]  ? load_image+0x420/0x420
[  137.795286][ T6661]  ? __might_sleep+0xe0/0xe0
[  137.799943][ T6661]  ? __lock_acquire+0x7eb0/0x7eb0
[  137.805050][ T6661]  should_fail_ex+0x394/0x4c0
[  137.809783][ T6661]  should_failslab+0x9/0x20
[  137.814319][ T6661]  slab_pre_alloc_hook+0x59/0x300
[  137.819380][ T6661]  ? alloc_fdtable+0xca/0x2c0
[  137.824122][ T6661]  __kmem_cache_alloc_node+0x53/0x260
[  137.829609][ T6661]  ? __lock_acquire+0x7eb0/0x7eb0
[  137.834671][ T6661]  ? alloc_fdtable+0xca/0x2c0
[  137.839387][ T6661]  kmalloc_trace+0x2a/0xe0
[  137.843842][ T6661]  alloc_fdtable+0xca/0x2c0
[  137.848381][ T6661]  dup_fd+0x747/0xa20
[  137.852412][ T6661]  __close_range+0x19d/0x690
[  137.857042][ T6661]  ? pick_file+0x1e0/0x1e0
[  137.861501][ T6661]  __x64_sys_close_range+0x7a/0x90
[  137.866657][ T6661]  do_syscall_64+0x55/0xb0
[  137.871109][ T6661]  ? clear_bhb_loop+0x40/0x90
[  137.875823][ T6661]  ? clear_bhb_loop+0x40/0x90
[  137.880534][ T6661]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  137.886468][ T6661] RIP: 0033:0x7f7112ba94d9
[  137.890949][ T6661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.910584][ T6661] RSP: 002b:00007f7113a61028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  137.919067][ T6661] RAX: ffffffffffffffda RBX: 00007f7112e25fa0 RCX: 00007f7112ba94d9
[  137.927066][ T6661] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff
[  137.935066][ T6661] RBP: 00007f7112c3804e R08: 0000000000000000 R09: 0000000000000000
[  137.943071][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.951064][ T6661] R13: 00007f7112e26038 R14: 00007f7112e25fa0 R15: 00007ffe696d7de8
[  137.959080][ T6661]  </TASK>
[  138.414755][ T5798] Bluetooth: hci0: unexpected event 0x04 length: 12 > 10
[  138.414901][ T5798] Bluetooth: unknown link type 255
[  138.428044][ T5798] Bluetooth: hci0: connection err: -111
[  139.243949][ T6502] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  139.263622][ T6502] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  139.275427][ T6502] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  139.322402][ T6502] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  139.574396][ T6502] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.632183][ T6502] 8021q: adding VLAN 0 to HW filter on device team0
[  139.647022][ T6689] FAULT_INJECTION: forcing a failure.
[  139.647022][ T6689] name failslab, interval 1, probability 0, space 0, times 0
[  139.672665][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.679877][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.688155][ T6689] CPU: 1 PID: 6689 Comm: syz.3.191 Not tainted syzkaller #0
[  139.695506][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  139.705615][ T6689] Call Trace:
[  139.708930][ T6689]  <TASK>
[  139.711910][ T6689]  dump_stack_lvl+0x18c/0x250
[  139.716658][ T6689]  ? show_regs_print_info+0x20/0x20
[  139.721922][ T6689]  ? load_image+0x420/0x420
[  139.726485][ T6689]  ? __lock_acquire+0x7eb0/0x7eb0
[  139.731567][ T6689]  should_fail_ex+0x394/0x4c0
[  139.736299][ T6689]  should_failslab+0x9/0x20
[  139.740838][ T6689]  slab_pre_alloc_hook+0x59/0x300
[  139.745914][ T6689]  ? sctp_endpoint_new+0x86/0xa10
[  139.750997][ T6689]  __kmem_cache_alloc_node+0x53/0x260
[  139.756439][ T6689]  ? sctp_endpoint_new+0x86/0xa10
[  139.761522][ T6689]  kmalloc_trace+0x2a/0xe0
[  139.766004][ T6689]  sctp_endpoint_new+0x86/0xa10
[  139.770910][ T6689]  ? __raw_spin_lock_init+0x45/0x100
[  139.776236][ T6689]  sctp_init_sock+0x95f/0x11f0
[  139.781075][ T6689]  sctp_v6_init_sock+0x16/0x70
[  139.785885][ T6689]  inet6_create+0xdf9/0x1160
[  139.790521][ T6689]  __sock_create+0x49e/0x940
[  139.795164][ T6689]  __sys_socket+0xd7/0x1b0
[  139.799620][ T6689]  __x64_sys_socket+0x7a/0x90
[  139.804327][ T6689]  do_syscall_64+0x55/0xb0
[  139.808783][ T6689]  ? clear_bhb_loop+0x40/0x90
[  139.813497][ T6689]  ? clear_bhb_loop+0x40/0x90
[  139.818205][ T6689]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.824132][ T6689] RIP: 0033:0x7f7112ba94d9
[  139.828591][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.848229][ T6689] RSP: 002b:00007f7113a61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  139.856678][ T6689] RAX: ffffffffffffffda RBX: 00007f7112e25fa0 RCX: 00007f7112ba94d9
[  139.864688][ T6689] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a
[  139.872682][ T6689] RBP: 00007f7112c3804e R08: 0000000000000000 R09: 0000000000000000
[  139.880691][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.888692][ T6689] R13: 00007f7112e26038 R14: 00007f7112e25fa0 R15: 00007ffe696d7de8
[  139.896747][ T6689]  </TASK>
[  139.965385][  T171] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.972620][  T171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.087600][ T5798] Bluetooth: hci0: unexpected event 0x04 length: 12 > 10
[  140.087873][ T5798] Bluetooth: unknown link type 255
[  140.109627][ T5798] Bluetooth: hci0: connection err: -111
[  140.185263][ T6502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.839472][ T6706] pim6reg: entered allmulticast mode
[  140.943664][ T6705] pim6reg: left allmulticast mode
[  141.573474][ T6716] FAULT_INJECTION: forcing a failure.
[  141.573474][ T6716] name failslab, interval 1, probability 0, space 0, times 0
[  141.622554][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'.
[  141.637856][ T6716] CPU: 0 PID: 6716 Comm: syz.1.194 Not tainted syzkaller #0
[  141.645224][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  141.655352][ T6716] Call Trace:
[  141.658685][ T6716]  <TASK>
[  141.661663][ T6716]  dump_stack_lvl+0x18c/0x250
[  141.666417][ T6716]  ? show_regs_print_info+0x20/0x20
[  141.671756][ T6716]  ? load_image+0x420/0x420
[  141.676325][ T6716]  ? __might_sleep+0xe0/0xe0
[  141.680987][ T6716]  ? __lock_acquire+0x7eb0/0x7eb0
[  141.686067][ T6716]  should_fail_ex+0x394/0x4c0
[  141.690811][ T6716]  should_failslab+0x9/0x20
[  141.695374][ T6716]  slab_pre_alloc_hook+0x59/0x300
[  141.700468][ T6716]  ? ctinfo_init_net+0x65/0x190
[  141.705390][ T6716]  __kmem_cache_alloc_node+0x53/0x260
[  141.710816][ T6716]  ? ctinfo_init_net+0x65/0x190
[  141.715721][ T6716]  kmalloc_trace+0x2a/0xe0
[  141.720204][ T6716]  ctinfo_init_net+0x65/0x190
[  141.724961][ T6716]  ops_init+0x391/0x640
[  141.729178][ T6716]  setup_net+0x3b6/0xa20
[  141.733504][ T6716]  ? copy_net_ns+0x530/0x530
[  141.738143][ T6716]  ? copy_net_ns+0x347/0x530
[  141.742785][ T6716]  ? down_read_killable+0x1d0/0x340
[  141.748036][ T6716]  copy_net_ns+0x361/0x530
[  141.752502][ T6716]  create_new_namespaces+0x3ce/0x700
[  141.752747][ T6719] sctp: [Deprecated]: syz.2.197 (pid 6719) Use of int in max_burst socket option.
[  141.752747][ T6719] Use struct sctp_assoc_value instead
[  141.757825][ T6716]  unshare_nsproxy_namespaces+0x11a/0x160
[  141.778495][ T6716]  ksys_unshare+0x4fa/0x8f0
[  141.783065][ T6716]  ? sighand_ctor+0x50/0x50
[  141.787628][ T6716]  ? lock_chain_count+0x20/0x20
[  141.792543][ T6716]  ? syscall_enter_from_user_mode+0x25/0x80
[  141.798498][ T6716]  __x64_sys_unshare+0x38/0x40
[  141.803321][ T6716]  do_syscall_64+0x55/0xb0
[  141.807796][ T6716]  ? clear_bhb_loop+0x40/0x90
[  141.812532][ T6716]  ? clear_bhb_loop+0x40/0x90
[  141.817280][ T6716]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.823248][ T6716] RIP: 0033:0x7f5dbb5a94d9
[  141.827712][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.847368][ T6716] RSP: 002b:00007f5dbc518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  141.855842][ T6716] RAX: ffffffffffffffda RBX: 00007f5dbb825fa0 RCX: 00007f5dbb5a94d9
[  141.863896][ T6716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  141.871946][ T6716] RBP: 00007f5dbb63804e R08: 0000000000000000 R09: 0000000000000000
[  141.879969][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.887989][ T6716] R13: 00007f5dbb826038 R14: 00007f5dbb825fa0 R15: 00007ffef8a8e9c8
[  141.896029][ T6716]  </TASK>
[  142.126569][ T6502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.358115][ T6733] loop2: detected capacity change from 0 to 33280
[  142.380414][ T6733] ext4: Bad value for 'init_itable'
[  142.437273][ T5794] I/O error, dev loop2, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  142.998053][ T6502] veth0_vlan: entered promiscuous mode
[  143.075414][ T6755] device-mapper: ioctl: Target type does not support messages
[  143.109862][ T6502] veth1_vlan: entered promiscuous mode
[  143.235910][ T6502] veth0_macvtap: entered promiscuous mode
[  143.301700][ T6502] veth1_macvtap: entered promiscuous mode
[  143.324820][ T6762] loop2: detected capacity change from 0 to 4096
[  143.366346][ T6762] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  143.428231][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.470280][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.514347][ T6762] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  143.515125][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.550417][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.589675][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.623473][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.653459][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.713897][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.751670][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.788614][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.814061][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.840047][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.869048][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.896746][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.993822][ T6502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.028731][ T6502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.037512][ T6502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.068925][ T6502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.289185][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.297094][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.427748][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.446243][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.858462][ T6787] jffs2: notice: (6787) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  144.957987][ T6791] block device autoloading is deprecated and will be removed.
[  145.881482][ T6812] pim6reg: entered allmulticast mode
[  145.984872][ T6811] pim6reg: left allmulticast mode
[  146.187542][ T5859] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  146.377194][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'.
[  146.470653][ T5859] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  146.568775][ T5859] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  146.604515][ T6822] loop3: detected capacity change from 0 to 33280
[  146.641467][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.754237][ T6822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.800285][ T6822] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.977949][ T5859] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device
[  147.038439][ T6822] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  147.054623][ T5859] wwan wwan0: port wwan0qmi0 attached
[  147.083807][ T6822] EXT4-fs (loop3): Remounting filesystem read-only
[  147.183710][ T5859] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 2a:87:3c:8a:06:56
[  147.244990][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.298733][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  147.498708][    T8] usb 5-1: Using ep0 maxpacket: 8
[  147.509169][ T5862] usb 3-1: USB disconnect, device number 5
[  147.520863][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  147.533570][ T5862] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device
[  147.553052][    T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  147.579035][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.617019][    T8] usb 5-1: config 0 descriptor??
[  147.722318][ T5862] wwan wwan0: port wwan0qmi0 disconnected
[  148.013249][    T8] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  148.903335][ T6847] pim6reg: entered allmulticast mode
[  148.910408][ T6848] pim6reg: left allmulticast mode
[  149.311022][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'.
[  149.913123][ T5798] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  149.913178][ T5798] Bluetooth: unknown link type 255
[  149.925984][ T5798] Bluetooth: hci1: connection err: -111
[  150.176925][ T5862] usb 5-1: USB disconnect, device number 2
[  150.221010][ T6858] loop2: detected capacity change from 0 to 32768
[  150.516686][ T6858] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  151.181475][ T6886] pim6reg: entered allmulticast mode
[  151.228886][ T6858] XFS (loop2): Ending clean mount
[  151.282548][ T6885] pim6reg: left allmulticast mode
[  151.849928][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'.
[  151.921114][ T5785] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  152.032503][ T6892] FAULT_INJECTION: forcing a failure.
[  152.032503][ T6892] name failslab, interval 1, probability 0, space 0, times 0
[  152.075578][ T6892] CPU: 0 PID: 6892 Comm: syz.3.228 Not tainted syzkaller #0
[  152.082979][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  152.093080][ T6892] Call Trace:
[  152.096458][ T6892]  <TASK>
[  152.099448][ T6892]  dump_stack_lvl+0x18c/0x250
[  152.104207][ T6892]  ? show_regs_print_info+0x20/0x20
[  152.109480][ T6892]  ? load_image+0x420/0x420
[  152.114073][ T6892]  ? __might_sleep+0xe0/0xe0
[  152.118739][ T6892]  ? __lock_acquire+0x7eb0/0x7eb0
[  152.123835][ T6892]  should_fail_ex+0x394/0x4c0
[  152.128583][ T6892]  should_failslab+0x9/0x20
[  152.133185][ T6892]  slab_pre_alloc_hook+0x59/0x300
[  152.138272][ T6892]  ? tunnel_key_init_net+0x65/0x190
[  152.143537][ T6892]  __kmem_cache_alloc_node+0x53/0x260
[  152.148968][ T6892]  ? tunnel_key_init_net+0x65/0x190
[  152.154229][ T6892]  kmalloc_trace+0x2a/0xe0
[  152.158729][ T6892]  tunnel_key_init_net+0x65/0x190
[  152.163816][ T6892]  ops_init+0x391/0x640
[  152.168033][ T6892]  setup_net+0x3b6/0xa20
[  152.172319][ T6892]  ? copy_net_ns+0x530/0x530
[  152.177055][ T6892]  ? copy_net_ns+0x347/0x530
[  152.181672][ T6892]  ? down_read_killable+0x1d0/0x340
[  152.186929][ T6892]  copy_net_ns+0x361/0x530
[  152.191364][ T6892]  create_new_namespaces+0x3ce/0x700
[  152.196683][ T6892]  unshare_nsproxy_namespaces+0x11a/0x160
[  152.202427][ T6892]  ksys_unshare+0x4fa/0x8f0
[  152.206955][ T6892]  ? sighand_ctor+0x50/0x50
[  152.211503][ T6892]  ? lock_chain_count+0x20/0x20
[  152.216374][ T6892]  ? syscall_enter_from_user_mode+0x25/0x80
[  152.222284][ T6892]  __x64_sys_unshare+0x38/0x40
[  152.227062][ T6892]  do_syscall_64+0x55/0xb0
[  152.231591][ T6892]  ? clear_bhb_loop+0x40/0x90
[  152.236293][ T6892]  ? clear_bhb_loop+0x40/0x90
[  152.241003][ T6892]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  152.246941][ T6892] RIP: 0033:0x7f7112ba94d9
[  152.251377][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.270994][ T6892] RSP: 002b:00007f7113a61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  152.279428][ T6892] RAX: ffffffffffffffda RBX: 00007f7112e25fa0 RCX: 00007f7112ba94d9
[  152.287412][ T6892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  152.295403][ T6892] RBP: 00007f7112c3804e R08: 0000000000000000 R09: 0000000000000000
[  152.303577][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.311564][ T6892] R13: 00007f7112e26038 R14: 00007f7112e25fa0 R15: 00007ffe696d7de8
[  152.319563][ T6892]  </TASK>
[  152.870278][ T6913] block device autoloading is deprecated and will be removed.
[  152.958589][ T5863] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  152.992672][ T6920] warning: `syz.3.235' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  153.143706][ T6913] md: could not open device unknown-block(0,0).
[  153.158970][ T6913] md: md_import_device returned -6
[  153.169883][ T6921] md4: using deprecated bitmap file support
[  153.178645][ T5863] usb 2-1: Using ep0 maxpacket: 32
[  153.183989][ T6921] md4: error: bitmap file must be a regular file
[  153.202088][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.230967][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.260845][ T5863] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  153.291517][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.321558][ T5863] usb 2-1: config 0 descriptor??
[  153.779053][ T6934] loop2: detected capacity change from 0 to 33280
[  153.823801][ T1197] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  154.174524][ T6937] pim6reg: entered allmulticast mode
[  154.195336][ T6937] pim6reg: left allmulticast mode
[  154.280031][ T1197] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  154.377146][ T5863] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  154.465698][ T5863] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  154.473007][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.546647][ T5863] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  154.570417][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.587894][ T5863] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  154.637179][ T1197] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  154.660495][ T5863] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  154.694533][ T5863] savu 0003:1E7D:2D5A.0004: unbalanced collection at end of report description
[  154.712092][ T5863] savu 0003:1E7D:2D5A.0004: parse failed
[  154.722483][ T5863] savu: probe of 0003:1E7D:2D5A.0004 failed with error -22
[  154.731890][ T1197] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  154.753931][ T1197] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  154.762283][ T6934] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[  154.779880][ T6934] System zones: 0-2, 18-18, 34-34
[  154.793528][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'.
[  154.804058][ T1197] usb 4-1: Manufacturer: syz
[  154.809059][ T5863] usb 2-1: USB disconnect, device number 6
[  154.847698][ T6934] EXT4-fs (loop2): 1 orphan inode deleted
[  154.854416][ T1197] usb 4-1: config 0 descriptor??
[  154.879937][   T60] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  154.898787][ T6934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.929129][   T60] EXT4-fs error (device loop2): ext4_release_dquot:6994: comm kworker/u4:4: Failed to release dquot type 1
[  154.961123][ T6934] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.312883][ T1197] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  155.361993][ T1197] appleir 0003:05AC:8243.0005: No inputs registered, leaving
[  155.376605][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.389367][ T1197] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  155.638271][ T1197] usb 4-1: USB disconnect, device number 7
[  156.190355][ T6955] fido_id[6955]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  156.223786][ T6962] pim6reg: left allmulticast mode
[  156.855532][ T6973] FAULT_INJECTION: forcing a failure.
[  156.855532][ T6973] name failslab, interval 1, probability 0, space 0, times 0
[  156.877515][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'.
[  156.942936][ T6973] CPU: 0 PID: 6973 Comm: syz.4.243 Not tainted syzkaller #0
[  156.950314][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  156.960425][ T6973] Call Trace:
[  156.963721][ T6973]  <TASK>
[  156.966668][ T6973]  dump_stack_lvl+0x18c/0x250
[  156.971373][ T6973]  ? show_regs_print_info+0x20/0x20
[  156.976592][ T6973]  ? load_image+0x420/0x420
[  156.981129][ T6973]  ? __might_sleep+0xe0/0xe0
[  156.985767][ T6973]  ? __lock_acquire+0x7eb0/0x7eb0
[  156.990807][ T6973]  ? verify_lock_unused+0x140/0x140
[  156.996018][ T6973]  should_fail_ex+0x394/0x4c0
[  157.000734][ T6973]  should_failslab+0x9/0x20
[  157.005289][ T6973]  slab_pre_alloc_hook+0x59/0x300
[  157.010385][ T6973]  ? __stack_depot_save+0x1f/0x660
[  157.015600][ T6973]  kmem_cache_alloc_lru+0x4d/0x2c0
[  157.020761][ T6973]  ? sock_alloc_inode+0x28/0xc0
[  157.025673][ T6973]  sock_alloc_inode+0x28/0xc0
[  157.030437][ T6973]  ? sockfs_init_fs_context+0xb0/0xb0
[  157.035884][ T6973]  new_inode_pseudo+0x63/0x1d0
[  157.040710][ T6973]  sock_create_lite+0x8b/0x500
[  157.045540][ T6973]  __netlink_kernel_create+0xfb/0x7b0
[  157.050995][ T6973]  ? netlink_set_err+0x3b0/0x3b0
[  157.056016][ T6973]  ? nfnl_pernet+0x23/0x230
[  157.060583][ T6973]  ? nfnl_pernet+0x23/0x230
[  157.065162][ T6973]  ? nfnetlink_net_init+0xb2/0x150
[  157.070340][ T6973]  nfnetlink_net_init+0xc9/0x150
[  157.075348][ T6973]  ? nfnetlink_broadcast+0x70/0x70
[  157.080519][ T6973]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  157.086145][ T6973]  ? nfnetlink_rcv+0x2490/0x2490
[  157.091143][ T6973]  ? nfnetlink_bind+0x3c0/0x3c0
[  157.096085][ T6973]  ops_init+0x391/0x640
[  157.100308][ T6973]  setup_net+0x3b6/0xa20
[  157.104598][ T6973]  ? copy_net_ns+0x530/0x530
[  157.109244][ T6973]  ? copy_net_ns+0x347/0x530
[  157.113906][ T6973]  ? down_read_killable+0x1d0/0x340
[  157.119161][ T6973]  copy_net_ns+0x361/0x530
[  157.123651][ T6973]  create_new_namespaces+0x3ce/0x700
[  157.129096][ T6973]  unshare_nsproxy_namespaces+0x11a/0x160
[  157.134885][ T6973]  ksys_unshare+0x4fa/0x8f0
[  157.139453][ T6973]  ? sighand_ctor+0x50/0x50
[  157.144009][ T6973]  ? lock_chain_count+0x20/0x20
[  157.148919][ T6973]  ? syscall_enter_from_user_mode+0x25/0x80
[  157.154868][ T6973]  __x64_sys_unshare+0x38/0x40
[  157.159769][ T6973]  do_syscall_64+0x55/0xb0
[  157.164247][ T6973]  ? clear_bhb_loop+0x40/0x90
[  157.168993][ T6973]  ? clear_bhb_loop+0x40/0x90
[  157.173758][ T6973]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.179711][ T6973] RIP: 0033:0x7fada3da94d9
[  157.184184][ T6973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.203853][ T6973] RSP: 002b:00007fada4cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  157.212333][ T6973] RAX: ffffffffffffffda RBX: 00007fada4025fa0 RCX: 00007fada3da94d9
[  157.220359][ T6973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  157.228390][ T6973] RBP: 00007fada3e3804e R08: 0000000000000000 R09: 0000000000000000
[  157.236504][ T6973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.244504][ T6973] R13: 00007fada4026038 R14: 00007fada4025fa0 R15: 00007ffe211301c8
[  157.252526][ T6973]  </TASK>
[  157.521144][ T6983] FAULT_INJECTION: forcing a failure.
[  157.521144][ T6983] name failslab, interval 1, probability 0, space 0, times 0
[  157.548305][ T6983] CPU: 0 PID: 6983 Comm: syz.2.248 Not tainted syzkaller #0
[  157.555687][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  157.565806][ T6983] Call Trace:
[  157.569155][ T6983]  <TASK>
[  157.572131][ T6983]  dump_stack_lvl+0x18c/0x250
[  157.576900][ T6983]  ? show_regs_print_info+0x20/0x20
[  157.582158][ T6983]  ? load_image+0x420/0x420
[  157.586715][ T6983]  ? __might_sleep+0xe0/0xe0
[  157.591362][ T6983]  ? __lock_acquire+0x7eb0/0x7eb0
[  157.596443][ T6983]  should_fail_ex+0x394/0x4c0
[  157.601185][ T6983]  should_failslab+0x9/0x20
[  157.605739][ T6983]  slab_pre_alloc_hook+0x59/0x300
[  157.610825][ T6983]  ? fuse_init_fs_context+0x55/0x200
[  157.616162][ T6983]  __kmem_cache_alloc_node+0x53/0x260
[  157.621581][ T6983]  ? fuse_init_fs_context+0x55/0x200
[  157.626940][ T6983]  kmalloc_trace+0x2a/0xe0
[  157.631430][ T6983]  fuse_init_fs_context+0x55/0x200
[  157.636612][ T6983]  ? fuse_get_dentry+0x500/0x500
[  157.641615][ T6983]  alloc_fs_context+0x618/0x7a0
[  157.646571][ T6983]  __se_sys_fsopen+0xa0/0x2c0
[  157.651324][ T6983]  do_syscall_64+0x55/0xb0
[  157.655796][ T6983]  ? clear_bhb_loop+0x40/0x90
[  157.660536][ T6983]  ? clear_bhb_loop+0x40/0x90
[  157.665304][ T6983]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.671271][ T6983] RIP: 0033:0x7fbf14ba94d9
[  157.675741][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.695409][ T6983] RSP: 002b:00007fbf159f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  157.703881][ T6983] RAX: ffffffffffffffda RBX: 00007fbf14e25fa0 RCX: 00007fbf14ba94d9
[  157.711899][ T6983] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0
[  157.719915][ T6983] RBP: 00007fbf14c3804e R08: 0000000000000000 R09: 0000000000000000
[  157.727933][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.735980][ T6983] R13: 00007fbf14e26038 R14: 00007fbf14e25fa0 R15: 00007ffdfbb59058
[  157.744039][ T6983]  </TASK>
[  157.865211][ T1197] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  158.121499][ T6986] loop4: detected capacity change from 0 to 256
[  158.794968][ T1197] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.856328][ T1197] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  158.889227][ T1197] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  158.906571][ T1197] usb 4-1: Product: syz
[  158.932660][ T1197] usb 4-1: Manufacturer: syz
[  158.937356][ T1197] usb 4-1: SerialNumber: syz
[  158.953046][ T6984] pim6reg: entered allmulticast mode
[  158.958923][ T6988] pim6reg: left allmulticast mode
[  159.015863][ T1197] usb 4-1: config 0 descriptor??
[  159.062540][ T1197] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected
[  159.082583][ T1197] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  159.092225][ T1197] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88
[  159.106745][ T1197] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  159.117658][ T1197] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  159.132484][ T1197] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  159.167221][ T1197] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  159.182604][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'.
[  159.197317][ T1197] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[  159.216770][ T1197] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  159.265361][ T1197] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[  159.313371][ T1197] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  159.706065][   T27] usb 4-1: USB disconnect, device number 8
[  159.738139][   T27] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  159.789280][ T7008] netlink: 'syz.4.253': attribute type 29 has an invalid length.
[  159.789318][   T27] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  159.827778][ T7008] netlink: 'syz.4.253': attribute type 29 has an invalid length.
[  159.843018][ T7008] netlink: 'syz.4.253': attribute type 29 has an invalid length.
[  159.852666][ T7008] netlink: 'syz.4.253': attribute type 29 has an invalid length.
[  159.861395][   T27] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  159.875117][ T7008] netlink: 'syz.4.253': attribute type 29 has an invalid length.
[  159.898134][   T27] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  159.928448][   T27] keyspan 4-1:0.0: device disconnected
[  160.468363][ T7018] pim6reg: entered allmulticast mode
[  160.568892][ T7016] pim6reg: left allmulticast mode
[  161.062303][ T7026] loop1: detected capacity change from 0 to 33792
[  161.115220][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'.
[  161.125857][ T7026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  161.142720][ T5798] Bluetooth: hci2: unexpected event 0x04 length: 12 > 10
[  161.142760][ T5798] Bluetooth: unknown link type 255
[  161.158899][ T5798] Bluetooth: hci2: connection err: -111
[  161.166363][ T7026] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.246714][ T7026] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.257: lblock 0 mapped to illegal pblock 0 (length 6)
[  161.298974][ T7021] hsr_slave_1 (unregistering): left promiscuous mode
[  161.344678][ T7026] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.257: lblock 0 mapped to illegal pblock 0 (length 1)
[  161.365819][ T7026] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  161.393418][ T7026] EXT4-fs (loop1): This should not happen!! Data will be lost
[  161.393418][ T7026] 
[  161.574035][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  162.760997][ T7053] loop4: detected capacity change from 0 to 256
[  162.867405][ T7057] FAULT_INJECTION: forcing a failure.
[  162.867405][ T7057] name failslab, interval 1, probability 0, space 0, times 0
[  163.013224][ T7057] CPU: 1 PID: 7057 Comm: syz.2.259 Not tainted syzkaller #0
[  163.020806][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  163.030906][ T7057] Call Trace:
[  163.034233][ T7057]  <TASK>
[  163.037205][ T7057]  dump_stack_lvl+0x18c/0x250
[  163.041942][ T7057]  ? show_regs_print_info+0x20/0x20
[  163.047216][ T7057]  ? load_image+0x420/0x420
[  163.051774][ T7057]  ? __might_sleep+0xe0/0xe0
[  163.056429][ T7057]  ? __lock_acquire+0x7eb0/0x7eb0
[  163.061503][ T7057]  ? mark_lock+0x94/0x320
[  163.065885][ T7057]  should_fail_ex+0x394/0x4c0
[  163.070641][ T7057]  should_failslab+0x9/0x20
[  163.075202][ T7057]  slab_pre_alloc_hook+0x59/0x300
[  163.080297][ T7057]  kmem_cache_alloc_lru+0x4d/0x2c0
[  163.085485][ T7057]  ? sock_alloc_inode+0x28/0xc0
[  163.090423][ T7057]  sock_alloc_inode+0x28/0xc0
[  163.095165][ T7057]  ? sockfs_init_fs_context+0xb0/0xb0
[  163.100685][ T7057]  new_inode_pseudo+0x63/0x1d0
[  163.105512][ T7057]  sock_create_lite+0x8b/0x500
[  163.110363][ T7057]  __netlink_kernel_create+0xfb/0x7b0
[  163.115890][ T7057]  ? nfnetlink_net_init+0xb2/0x150
[  163.121072][ T7057]  ? netlink_set_err+0x3b0/0x3b0
[  163.126064][ T7057]  ? kasan_check_range+0x89/0x290
[  163.131159][ T7057]  ? nfnetlink_net_init+0xb2/0x150
[  163.136328][ T7057]  nfnetlink_net_init+0xc9/0x150
[  163.141359][ T7057]  ? nfnetlink_broadcast+0x70/0x70
[  163.146523][ T7057]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  163.152124][ T7057]  ? nfnetlink_rcv+0x2490/0x2490
[  163.157108][ T7057]  ? nfnetlink_bind+0x3c0/0x3c0
[  163.162037][ T7057]  ops_init+0x391/0x640
[  163.166267][ T7057]  setup_net+0x3b6/0xa20
[  163.170570][ T7057]  ? copy_net_ns+0x530/0x530
[  163.175203][ T7057]  ? copy_net_ns+0x347/0x530
[  163.179834][ T7057]  ? down_read_killable+0x1d0/0x340
[  163.185115][ T7057]  copy_net_ns+0x361/0x530
[  163.189583][ T7057]  create_new_namespaces+0x3ce/0x700
[  163.194941][ T7057]  unshare_nsproxy_namespaces+0x11a/0x160
[  163.200807][ T7057]  ksys_unshare+0x4fa/0x8f0
[  163.205388][ T7057]  ? sighand_ctor+0x50/0x50
[  163.209947][ T7057]  ? lock_chain_count+0x20/0x20
[  163.214854][ T7057]  ? syscall_enter_from_user_mode+0x25/0x80
[  163.220800][ T7057]  __x64_sys_unshare+0x38/0x40
[  163.225618][ T7057]  do_syscall_64+0x55/0xb0
[  163.230095][ T7057]  ? clear_bhb_loop+0x40/0x90
[  163.234834][ T7057]  ? clear_bhb_loop+0x40/0x90
[  163.239569][ T7057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.245512][ T7057] RIP: 0033:0x7fbf14ba94d9
[  163.249995][ T7057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.269652][ T7057] RSP: 002b:00007fbf159f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  163.278121][ T7057] RAX: ffffffffffffffda RBX: 00007fbf14e25fa0 RCX: 00007fbf14ba94d9
[  163.286144][ T7057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  163.294154][ T7057] RBP: 00007fbf14c3804e R08: 0000000000000000 R09: 0000000000000000
[  163.302174][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.310214][ T7057] R13: 00007fbf14e26038 R14: 00007fbf14e25fa0 R15: 00007ffdfbb59058
[  163.318253][ T7057]  </TASK>
[  163.597258][ T7060] pim6reg: entered allmulticast mode
[  163.695815][ T7058] pim6reg: left allmulticast mode
[  165.172835][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'.
[  165.281869][ T7068] pim6reg: entered allmulticast mode
[  165.347937][ T7070] pim6reg: left allmulticast mode
[  165.409709][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'.
[  165.763770][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'.
[  166.178928][ T7108] loop2: detected capacity change from 0 to 34816
[  166.237203][ T7108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.272793][ T7108] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.407235][ T7108] fs-verity: sha512 using implementation "sha512-avx2"
[  166.514786][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.131105][ T7128] pim6reg: entered allmulticast mode
[  167.234654][ T7128] pim6reg: left allmulticast mode
[  167.720769][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'.
[  168.970791][ T7140] pim6reg: entered allmulticast mode
[  169.007571][ T7141] pim6reg: left allmulticast mode
[  169.100459][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'.
[  169.136939][ T7129] pim6reg: entered allmulticast mode
[  169.144539][ T7153] pim6reg: left allmulticast mode
[  169.279733][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[  169.846023][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'.
[  169.931987][ T7182] FAULT_INJECTION: forcing a failure.
[  169.931987][ T7182] name failslab, interval 1, probability 0, space 0, times 0
[  169.978594][ T7182] CPU: 0 PID: 7182 Comm: syz.2.285 Not tainted syzkaller #0
[  169.985974][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  169.996084][ T7182] Call Trace:
[  169.999404][ T7182]  <TASK>
[  170.002380][ T7182]  dump_stack_lvl+0x18c/0x250
[  170.007141][ T7182]  ? show_regs_print_info+0x20/0x20
[  170.012401][ T7182]  ? load_image+0x420/0x420
[  170.016962][ T7182]  ? __might_sleep+0xe0/0xe0
[  170.021605][ T7182]  ? __lock_acquire+0x7eb0/0x7eb0
[  170.026716][ T7182]  should_fail_ex+0x394/0x4c0
[  170.031462][ T7182]  should_failslab+0x9/0x20
[  170.036050][ T7182]  slab_pre_alloc_hook+0x59/0x300
[  170.041133][ T7182]  ? ops_init+0x8b/0x640
[  170.045422][ T7182]  ? ops_init+0x8b/0x640
[  170.049716][ T7182]  __kmem_cache_alloc_node+0x53/0x260
[  170.055142][ T7182]  ? ops_init+0x8b/0x640
[  170.059431][ T7182]  __kmalloc+0xa7/0x240
[  170.063667][ T7182]  ? gate_init_net+0x15a/0x190
[  170.068483][ T7182]  ops_init+0x8b/0x640
[  170.072604][ T7182]  setup_net+0x3b6/0xa20
[  170.076877][ T7182]  ? copy_net_ns+0x530/0x530
[  170.081498][ T7182]  ? copy_net_ns+0x347/0x530
[  170.086118][ T7182]  ? down_read_killable+0x1d0/0x340
[  170.091353][ T7182]  copy_net_ns+0x361/0x530
[  170.095825][ T7182]  create_new_namespaces+0x3ce/0x700
[  170.101155][ T7182]  unshare_nsproxy_namespaces+0x11a/0x160
[  170.106925][ T7182]  ksys_unshare+0x4fa/0x8f0
[  170.111467][ T7182]  ? sighand_ctor+0x50/0x50
[  170.116033][ T7182]  ? lock_chain_count+0x20/0x20
[  170.120922][ T7182]  ? syscall_enter_from_user_mode+0x25/0x80
[  170.126849][ T7182]  __x64_sys_unshare+0x38/0x40
[  170.131645][ T7182]  do_syscall_64+0x55/0xb0
[  170.136098][ T7182]  ? clear_bhb_loop+0x40/0x90
[  170.140825][ T7182]  ? clear_bhb_loop+0x40/0x90
[  170.145544][ T7182]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.151493][ T7182] RIP: 0033:0x7fbf14ba94d9
[  170.155939][ T7182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.175681][ T7182] RSP: 002b:00007fbf159f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  170.184181][ T7182] RAX: ffffffffffffffda RBX: 00007fbf14e25fa0 RCX: 00007fbf14ba94d9
[  170.192233][ T7182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  170.200227][ T7182] RBP: 00007fbf14c3804e R08: 0000000000000000 R09: 0000000000000000
[  170.208229][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.216232][ T7182] R13: 00007fbf14e26038 R14: 00007fbf14e25fa0 R15: 00007ffdfbb59058
[  170.224264][ T7182]  </TASK>
[  170.502425][ T5798] Bluetooth: hci0: unexpected event 0x04 length: 12 > 10
[  170.502540][ T5798] Bluetooth: unknown link type 255
[  170.515474][ T5798] Bluetooth: hci0: connection err: -111
[  171.820276][ T5798] Bluetooth: hci2: unexpected event 0x04 length: 12 > 10
[  171.820334][ T5798] Bluetooth: unknown link type 255
[  171.833196][ T5798] Bluetooth: hci2: connection err: -111
[  172.266332][ T7228] loop1: detected capacity change from 0 to 4096
[  172.382402][ T7228] ntfs3: loop1: Failed to load $Extend (-22).
[  172.409865][ T7228] ntfs3: loop1: Failed to initialize $Extend.
[  172.829767][ T7243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.551118][ T7271] FAULT_INJECTION: forcing a failure.
[  173.551118][ T7271] name fail_futex, interval 1, probability 0, space 0, times 1
[  173.601941][ T7271] CPU: 0 PID: 7271 Comm: syz.1.301 Not tainted syzkaller #0
[  173.609328][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  173.619473][ T7271] Call Trace:
[  173.622801][ T7271]  <TASK>
[  173.625778][ T7271]  dump_stack_lvl+0x18c/0x250
[  173.630549][ T7271]  ? show_regs_print_info+0x20/0x20
[  173.635838][ T7271]  ? load_image+0x420/0x420
[  173.640410][ T7271]  ? __lock_acquire+0x135d/0x7eb0
[  173.645532][ T7271]  should_fail_ex+0x394/0x4c0
[  173.650302][ T7271]  get_futex_key+0x134/0xf40
[  173.654960][ T7271]  ? futex_setup_timer+0xc0/0xc0
[  173.659954][ T7271]  futex_wake+0x127/0x4f0
[  173.664348][ T7271]  ? futex_wake_mark+0x150/0x150
[  173.669369][ T7271]  do_futex+0x35d/0x3e0
[  173.673585][ T7271]  ? __ia32_sys_get_robust_list+0x110/0x110
[  173.679567][ T7271]  ? native_tss_update_io_bitmap+0x2b4/0x610
[  173.685613][ T7271]  __se_sys_futex+0x3a9/0x440
[  173.690356][ T7271]  ? speculation_ctrl_update+0x740/0x740
[  173.696047][ T7271]  ? __x64_sys_futex+0xf0/0xf0
[  173.700858][ T7271]  ? __bitmap_clear+0x128/0x170
[  173.705782][ T7271]  ? __x64_sys_futex+0x21/0xf0
[  173.710616][ T7271]  do_syscall_64+0x55/0xb0
[  173.715086][ T7271]  ? clear_bhb_loop+0x40/0x90
[  173.719814][ T7271]  ? clear_bhb_loop+0x40/0x90
[  173.724566][ T7271]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.730528][ T7271] RIP: 0033:0x7f5dbb5a94d9
[  173.734987][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.754635][ T7271] RSP: 002b:00007f5dbc5180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  173.763094][ T7271] RAX: ffffffffffffffda RBX: 00007f5dbb825fa8 RCX: 00007f5dbb5a94d9
[  173.771112][ T7271] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5dbb825fac
[  173.779140][ T7271] RBP: 00007f5dbb825fa0 R08: 0000000000745d1e R09: 0000000000000000
[  173.787164][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.795182][ T7271] R13: 00007f5dbb826038 R14: 00007ffef8a8e8e0 R15: 00007ffef8a8e9c8
[  173.803223][ T7271]  </TASK>
[  173.920884][ T7276] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  174.651448][ T7307] loop1: detected capacity change from 0 to 33280
[  174.752086][ T7307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.806829][ T7307] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.008282][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.691566][ T7347] FAULT_INJECTION: forcing a failure.
[  175.691566][ T7347] name failslab, interval 1, probability 0, space 0, times 0
[  175.724513][ T7347] CPU: 1 PID: 7347 Comm: syz.2.318 Not tainted syzkaller #0
[  175.731889][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  175.742009][ T7347] Call Trace:
[  175.745335][ T7347]  <TASK>
[  175.748306][ T7347]  dump_stack_lvl+0x18c/0x250
[  175.753186][ T7347]  ? show_regs_print_info+0x20/0x20
[  175.758445][ T7347]  ? load_image+0x420/0x420
[  175.763039][ T7347]  ? __might_sleep+0xe0/0xe0
[  175.767711][ T7347]  ? __lock_acquire+0x7eb0/0x7eb0
[  175.772805][ T7347]  ? percpu_ref_put+0x12/0x100
[  175.777629][ T7347]  should_fail_ex+0x394/0x4c0
[  175.782375][ T7347]  should_failslab+0x9/0x20
[  175.786929][ T7347]  slab_pre_alloc_hook+0x59/0x300
[  175.792009][ T7347]  kmem_cache_alloc+0x5a/0x2d0
[  175.796854][ T7347]  ? vm_area_dup+0x61/0x270
[  175.801437][ T7347]  vm_area_dup+0x61/0x270
[  175.805823][ T7347]  __split_vma+0x1a8/0xc20
[  175.810311][ T7347]  ? init_vma_prep+0x160/0x160
[  175.815168][ T7347]  ? mmap_write_unlock+0x160/0x160
[  175.820354][ T7347]  ? split_vma+0x8f/0x110
[  175.824758][ T7347]  mbind_range+0x4b0/0x710
[  175.829240][ T7347]  __se_sys_mbind+0x5ca/0x7c0
[  175.833991][ T7347]  ? __ia32_sys_get_robust_list+0x110/0x110
[  175.839967][ T7347]  ? __x64_sys_mbind+0xf0/0xf0
[  175.844803][ T7347]  ? lock_chain_count+0x20/0x20
[  175.849714][ T7347]  ? __x64_sys_mbind+0x21/0xf0
[  175.854536][ T7347]  do_syscall_64+0x55/0xb0
[  175.859020][ T7347]  ? clear_bhb_loop+0x40/0x90
[  175.863754][ T7347]  ? clear_bhb_loop+0x40/0x90
[  175.868496][ T7347]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.874457][ T7347] RIP: 0033:0x7fbf14ba94d9
[  175.878965][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.898644][ T7347] RSP: 002b:00007fbf159f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  175.907130][ T7347] RAX: ffffffffffffffda RBX: 00007fbf14e25fa0 RCX: 00007fbf14ba94d9
[  175.915161][ T7347] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000
[  175.923190][ T7347] RBP: 00007fbf14c3804e R08: 0000000000000008 R09: 0000000000000000
[  175.931207][ T7347] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000
[  175.939264][ T7347] R13: 00007fbf14e26038 R14: 00007fbf14e25fa0 R15: 00007ffdfbb59058
[  175.947306][ T7347]  </TASK>
[  176.113103][ T7352] block device autoloading is deprecated and will be removed.
[  176.272555][ T7360] loop2: detected capacity change from 0 to 33280
[  176.313012][ T7360] EXT4-fs: Ignoring removed bh option
[  176.333963][ T7360] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  176.353381][ T7360] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  176.373758][ T7363] FAULT_INJECTION: forcing a failure.
[  176.373758][ T7363] name failslab, interval 1, probability 0, space 0, times 0
[  176.422742][ T7360] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.322: Corrupt directory, running e2fsck is recommended
[  176.498591][ T7363] CPU: 0 PID: 7363 Comm: syz.3.323 Not tainted syzkaller #0
[  176.505992][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  176.516125][ T7363] Call Trace:
[  176.519468][ T7363]  <TASK>
[  176.522445][ T7363]  dump_stack_lvl+0x18c/0x250
[  176.527212][ T7363]  ? show_regs_print_info+0x20/0x20
[  176.532468][ T7363]  ? load_image+0x420/0x420
[  176.537027][ T7363]  ? __might_sleep+0xe0/0xe0
[  176.541675][ T7363]  ? __lock_acquire+0x7eb0/0x7eb0
[  176.546750][ T7363]  ? verify_lock_unused+0x140/0x140
[  176.552089][ T7363]  should_fail_ex+0x394/0x4c0
[  176.556846][ T7363]  should_failslab+0x9/0x20
[  176.561403][ T7363]  slab_pre_alloc_hook+0x59/0x300
[  176.566477][ T7363]  ? __stack_depot_save+0x1f/0x660
[  176.571651][ T7363]  kmem_cache_alloc_lru+0x4d/0x2c0
[  176.576809][ T7363]  ? sock_alloc_inode+0x28/0xc0
[  176.581730][ T7363]  sock_alloc_inode+0x28/0xc0
[  176.586470][ T7363]  ? sockfs_init_fs_context+0xb0/0xb0
[  176.591890][ T7363]  new_inode_pseudo+0x63/0x1d0
[  176.596711][ T7363]  sock_create_lite+0x8b/0x500
[  176.601558][ T7363]  __netlink_kernel_create+0xfb/0x7b0
[  176.607012][ T7363]  ? netlink_set_err+0x3b0/0x3b0
[  176.612032][ T7363]  ? nfnl_pernet+0x23/0x230
[  176.616611][ T7363]  ? nfnl_pernet+0x23/0x230
[  176.621198][ T7363]  ? nfnetlink_net_init+0xb2/0x150
[  176.626386][ T7363]  nfnetlink_net_init+0xc9/0x150
[  176.631383][ T7363]  ? nfnetlink_broadcast+0x70/0x70
[  176.636566][ T7363]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  176.642178][ T7363]  ? nfnetlink_rcv+0x2490/0x2490
[  176.647177][ T7363]  ? nfnetlink_bind+0x3c0/0x3c0
[  176.652106][ T7363]  ops_init+0x391/0x640
[  176.656339][ T7363]  setup_net+0x3b6/0xa20
[  176.660643][ T7363]  ? copy_net_ns+0x530/0x530
[  176.665284][ T7363]  ? copy_net_ns+0x347/0x530
[  176.669946][ T7363]  ? down_read_killable+0x1d0/0x340
[  176.674961][ T7360] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  176.675184][ T7363]  copy_net_ns+0x361/0x530
[  176.687861][ T7363]  create_new_namespaces+0x3ce/0x700
[  176.693235][ T7363]  unshare_nsproxy_namespaces+0x11a/0x160
[  176.699031][ T7363]  ksys_unshare+0x4fa/0x8f0
[  176.702371][ T7360] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.322: corrupted in-inode xattr: e_name out of bounds
[  176.703700][ T7363]  ? sighand_ctor+0x50/0x50
[  176.721971][ T7363]  ? lock_chain_count+0x20/0x20
[  176.726888][ T7363]  ? syscall_enter_from_user_mode+0x25/0x80
[  176.732844][ T7363]  __x64_sys_unshare+0x38/0x40
[  176.737672][ T7363]  do_syscall_64+0x55/0xb0
[  176.742144][ T7363]  ? clear_bhb_loop+0x40/0x90
[  176.746885][ T7363]  ? clear_bhb_loop+0x40/0x90
[  176.751633][ T7363]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.757584][ T7363] RIP: 0033:0x7f7112ba94d9
[  176.762048][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.781707][ T7363] RSP: 002b:00007f7113a61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  176.790191][ T7363] RAX: ffffffffffffffda RBX: 00007f7112e25fa0 RCX: 00007f7112ba94d9
[  176.795601][ T7360] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.322: couldn't read orphan inode 15 (err -117)
[  176.798196][ T7363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  176.817958][ T7363] RBP: 00007f7112c3804e R08: 0000000000000000 R09: 0000000000000000
[  176.825995][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.834025][ T7363] R13: 00007f7112e26038 R14: 00007f7112e25fa0 R15: 00007ffe696d7de8
[  176.842075][ T7363]  </TASK>
[  176.864445][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.913632][ T7360] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  176.946855][ T7360] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  176.979083][ T7360] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.322: Corrupt directory, running e2fsck is recommended
[  177.010109][ T7373] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  177.040882][ T7373] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  177.051391][ T7373] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.322: Corrupt directory, running e2fsck is recommended
[  177.110625][ T7372] vxcan1: tx drop: invalid da for name 0xfffffffffffffffd
[  177.136476][ T7360] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  177.163286][ T7360] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  177.188852][ T7360] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.322: Corrupt directory, running e2fsck is recommended
[  177.215815][ T7373] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  177.397512][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.474567][ T7389] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  177.596489][ T2986] Bluetooth: hci4: Frame reassembly failed (-84)
[  177.646312][ T7394] dccp_invalid_packet: invalid packet type
[  178.206347][ T7392] loop2: detected capacity change from 0 to 32768
[  178.252156][ T7392] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.329 (7392)
[  178.293609][ T7392] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.316536][ T7392] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  178.328245][ T7392] BTRFS info (device loop2): setting nodatasum
[  178.338651][ T7392] BTRFS info (device loop2): force zlib compression, level 3
[  178.353969][ T7392] BTRFS info (device loop2): turning on flush-on-commit
[  178.374083][ T7392] BTRFS info (device loop2): max_inline at 4096
[  178.398740][ T7392] BTRFS info (device loop2): using free space tree
[  178.486215][ T7392] BTRFS info (device loop2): enabling ssd optimizations
[  178.839406][ T7425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.335'.
[  178.934129][ T7427] FAULT_INJECTION: forcing a failure.
[  178.934129][ T7427] name failslab, interval 1, probability 0, space 0, times 0
[  178.959013][ T7427] CPU: 0 PID: 7427 Comm: syz.4.334 Not tainted syzkaller #0
[  178.966389][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  178.976489][ T7427] Call Trace:
[  178.979814][ T7427]  <TASK>
[  178.982802][ T7427]  dump_stack_lvl+0x18c/0x250
[  178.987560][ T7427]  ? show_regs_print_info+0x20/0x20
[  178.992841][ T7427]  ? load_image+0x420/0x420
[  178.997495][ T7427]  ? __might_sleep+0xe0/0xe0
[  179.002140][ T7427]  ? __lock_acquire+0x7eb0/0x7eb0
[  179.007230][ T7427]  should_fail_ex+0x394/0x4c0
[  179.011978][ T7427]  should_failslab+0x9/0x20
[  179.016531][ T7427]  slab_pre_alloc_hook+0x59/0x300
[  179.021607][ T7427]  ? __register_sysctl_table+0x71/0x1210
[  179.027280][ T7427]  ? __register_sysctl_table+0x71/0x1210
[  179.032956][ T7427]  __kmem_cache_alloc_node+0x53/0x260
[  179.038373][ T7427]  ? __register_sysctl_table+0x71/0x1210
[  179.044044][ T7427]  __kmalloc+0xa7/0x240
[  179.048233][ T7427]  __register_sysctl_table+0x71/0x1210
[  179.053738][ T7427]  ? kmemdup+0x55/0x70
[  179.057868][ T7427]  ? __asan_memcpy+0x40/0x70
[  179.062501][ T7427]  setup_ipc_sysctls+0x247/0x2e0
[  179.067475][ T7427]  copy_ipcs+0x333/0x500
[  179.071759][ T7427]  create_new_namespaces+0x212/0x700
[  179.077095][ T7427]  unshare_nsproxy_namespaces+0x11a/0x160
[  179.082882][ T7427]  ksys_unshare+0x4fa/0x8f0
[  179.087430][ T7427]  ? sighand_ctor+0x50/0x50
[  179.091969][ T7427]  ? lock_chain_count+0x20/0x20
[  179.096863][ T7427]  ? syscall_enter_from_user_mode+0x25/0x80
[  179.102813][ T7427]  __x64_sys_unshare+0x38/0x40
[  179.107609][ T7427]  do_syscall_64+0x55/0xb0
[  179.112055][ T7427]  ? clear_bhb_loop+0x40/0x90
[  179.116761][ T7427]  ? clear_bhb_loop+0x40/0x90
[  179.121480][ T7427]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  179.127401][ T7427] RIP: 0033:0x7fada3da94d9
[  179.131840][ T7427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.151488][ T7427] RSP: 002b:00007fada4cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  179.159944][ T7427] RAX: ffffffffffffffda RBX: 00007fada4025fa0 RCX: 00007fada3da94d9
[  179.167942][ T7427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000
[  179.175939][ T7427] RBP: 00007fada3e3804e R08: 0000000000000000 R09: 0000000000000000
[  179.183963][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.191991][ T7427] R13: 00007fada4026038 R14: 00007fada4025fa0 R15: 00007ffe211301c8
[  179.200005][ T7427]  </TASK>
[  179.350226][ T5785] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.496007][ T5798] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  179.502750][   T52] Bluetooth: hci4: command 0x1003 tx timeout
[  179.563932][ T7432] block device autoloading is deprecated and will be removed.
[  179.694499][ T5798] Bluetooth: hci2: unexpected event 0x04 length: 12 > 10
[  179.694568][ T5798] Bluetooth: unknown link type 255
[  179.710987][ T5798] Bluetooth: hci2: connection err: -111
[  180.384809][ T7441] pim6reg: entered allmulticast mode
[  180.390796][ T7442] pim6reg: left allmulticast mode
[  180.404808][ T7432] md/raid:md4: not clean -- starting background reconstruction
[  180.553969][ T7432] md/raid:md4: device ram9 operational as raid disk 1
[  180.650863][ T7432] md/raid:md4: device ram8 operational as raid disk 0
[  180.762016][ T7432] md/raid:md4: couldn't allocate thread.
[  180.889043][ T7432] md: pers->run() failed ...
[  180.895569][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[  181.063496][ T7453] FAULT_INJECTION: forcing a failure.
[  181.063496][ T7453] name failslab, interval 1, probability 0, space 0, times 0
[  181.079768][ T7453] CPU: 0 PID: 7453 Comm: syz.4.341 Not tainted syzkaller #0
[  181.087223][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  181.097322][ T7453] Call Trace:
[  181.100650][ T7453]  <TASK>
[  181.103598][ T7453]  dump_stack_lvl+0x18c/0x250
[  181.108297][ T7453]  ? show_regs_print_info+0x20/0x20
[  181.113513][ T7453]  ? load_image+0x420/0x420
[  181.118066][ T7453]  ? __might_sleep+0xe0/0xe0
[  181.122696][ T7453]  ? __lock_acquire+0x7eb0/0x7eb0
[  181.127738][ T7453]  should_fail_ex+0x394/0x4c0
[  181.132435][ T7453]  should_failslab+0x9/0x20
[  181.136948][ T7453]  slab_pre_alloc_hook+0x59/0x300
[  181.141992][ T7453]  kmem_cache_alloc+0x5a/0x2d0
[  181.146767][ T7453]  ? sk_prot_alloc+0x57/0x210
[  181.151469][ T7453]  sk_prot_alloc+0x57/0x210
[  181.155999][ T7453]  ? sk_alloc+0x24/0x350
[  181.160276][ T7453]  sk_alloc+0x3a/0x350
[  181.164389][ T7453]  inet_create+0x7a9/0xfe0
[  181.168828][ T7453]  ? inet_create+0x9d/0xfe0
[  181.173352][ T7453]  __sock_create+0x49e/0x940
[  181.177969][ T7453]  __sys_socket+0xd7/0x1b0
[  181.182398][ T7453]  __x64_sys_socket+0x7a/0x90
[  181.187086][ T7453]  do_syscall_64+0x55/0xb0
[  181.191516][ T7453]  ? clear_bhb_loop+0x40/0x90
[  181.196218][ T7453]  ? clear_bhb_loop+0x40/0x90
[  181.200918][ T7453]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  181.206828][ T7453] RIP: 0033:0x7fada3da94d9
[  181.211250][ T7453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.230892][ T7453] RSP: 002b:00007fada4cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  181.239324][ T7453] RAX: ffffffffffffffda RBX: 00007fada4025fa0 RCX: 00007fada3da94d9
[  181.247312][ T7453] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000002
[  181.255294][ T7453] RBP: 00007fada3e3804e R08: 0000000000000000 R09: 0000000000000000
[  181.263291][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.271294][ T7453] R13: 00007fada4026038 R14: 00007fada4025fa0 R15: 00007ffe211301c8
[  181.279289][ T7453]  </TASK>
[  181.469341][   T28] audit: type=1326 audit(1794590183.246:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  181.551235][   T28] audit: type=1326 audit(1794590183.256:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  181.590440][   T28] audit: type=1326 audit(1794590183.256:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  181.617650][   T28] audit: type=1326 audit(1794590183.256:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  181.655576][   T28] audit: type=1326 audit(1794590183.256:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  181.711118][   T28] audit: type=1326 audit(1794590183.256:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  181.745788][   T28] audit: type=1326 audit(1794590183.256:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  181.779521][   T28] audit: type=1326 audit(1794590183.256:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  181.806216][   T28] audit: type=1326 audit(1794590183.256:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  181.848591][   T28] audit: type=1326 audit(1794590183.256:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fada3da94d9 code=0x7ffc0000
[  182.170116][ T7474] loop3: detected capacity change from 0 to 32896
[  182.204533][ T7474] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  182.222570][ T7474] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.368808][ T5863] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  182.592714][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.612348][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  182.649651][ T5863] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.804827][ T5863] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  182.877694][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.947675][ T5863] usb 2-1: Product: syz
[  182.989776][ T5863] usb 2-1: Manufacturer: syz
[  183.031122][ T5863] usb 2-1: SerialNumber: syz
[  183.137418][ T7486] pim6reg: entered allmulticast mode
[  183.237524][ T7485] pim6reg: left allmulticast mode
[  183.819611][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'.
[  183.914409][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  184.168901][ T5863] usb 2-1: Cannot retrieve CPort count: -110
[  184.175043][ T5863] usb 2-1: Cannot retrieve CPort count: -110
[  184.446377][ T7498] pim6reg: entered allmulticast mode
[  184.538276][ T7496] pim6reg: left allmulticast mode
[  184.778151][ T5863] es2_ap_driver: probe of 2-1:1.0 failed with error -110
[  185.008535][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  185.196323][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'.
[  185.579030][ T7518] sit1: entered allmulticast mode
[  186.179008][ T5112] usb 2-1: USB disconnect, device number 7
[  187.368600][   T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  187.585103][ T7553] loop2: detected capacity change from 0 to 32768
[  187.611330][   T27] usb 2-1: config 0 has no interfaces?
[  187.617020][   T27] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  187.689607][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.710866][   T27] usb 2-1: config 0 descriptor??
[  187.717454][ T7553] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  187.756526][ T7586] netlink: 'syz.4.376': attribute type 27 has an invalid length.
[  187.796757][ T7586] lo: entered promiscuous mode
[  187.820773][ T7586] lo: entered allmulticast mode
[  187.857588][ T7586] tunl0: entered promiscuous mode
[  187.890951][ T7586] tunl0: entered allmulticast mode
[  187.897412][ T7586] gre0: entered promiscuous mode
[  187.903306][ T7586] gre0: entered allmulticast mode
[  187.909534][ T7586] gretap0: entered promiscuous mode
[  187.947421][ T7586] gretap0: entered allmulticast mode
[  187.977071][   T27] usb 2-1: USB disconnect, device number 8
[  188.004536][ T7586] erspan0: entered promiscuous mode
[  188.019786][ T7553] XFS (loop2): Ending clean mount
[  188.030038][ T7586] erspan0: entered allmulticast mode
[  188.051714][ T7586] ip_vti0: entered promiscuous mode
[  188.066123][ T7586] ip_vti0: entered allmulticast mode
[  188.096367][ T7586] ip6_vti0: entered promiscuous mode
[  188.117438][ T7586] ip6_vti0: entered allmulticast mode
[  188.140137][ T7586] sit0: entered promiscuous mode
[  188.159746][ T7586] sit0: entered allmulticast mode
[  188.174402][ T7586] ip6tnl0: entered promiscuous mode
[  188.199823][ T7586] ip6tnl0: entered allmulticast mode
[  188.225457][ T7586] ip6gre0: entered promiscuous mode
[  188.244230][ T7586] ip6gre0: entered allmulticast mode
[  188.260784][ T7586] syz_tun: entered promiscuous mode
[  188.273452][ T7586] syz_tun: entered allmulticast mode
[  188.292058][ T7586] ip6gretap0: entered promiscuous mode
[  188.304979][ T7586] ip6gretap0: entered allmulticast mode
[  188.332163][ T5785] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  188.344768][ T7586] bridge0: entered promiscuous mode
[  188.357474][ T7586] bridge0: entered allmulticast mode
[  188.376913][ T7586] vcan0: entered promiscuous mode
[  188.387998][ T7586] vcan0: entered allmulticast mode
[  188.397342][ T7586] bond0: entered promiscuous mode
[  188.410490][ T7586] bond_slave_0: entered promiscuous mode
[  188.441093][ T7586] bond_slave_1: entered promiscuous mode
[  188.456392][ T7586] bond0: entered allmulticast mode
[  188.468720][ T7586] bond_slave_0: entered allmulticast mode
[  188.503864][ T7586] bond_slave_1: entered allmulticast mode
[  188.550639][ T7586] team0: entered promiscuous mode
[  188.611420][ T7586] team_slave_0: entered promiscuous mode
[  188.642289][ T7586] team_slave_1: entered promiscuous mode
[  188.685731][ T7586] team0: entered allmulticast mode
[  188.728812][ T7586] team_slave_0: entered allmulticast mode
[  188.734685][ T7586] team_slave_1: entered allmulticast mode
[  188.758094][ T7586] dummy0: entered promiscuous mode
[  188.781250][ T7586] dummy0: entered allmulticast mode
[  188.804189][ T7586] nlmon0: entered promiscuous mode
[  188.823352][ T7586] nlmon0: entered allmulticast mode
[  188.843150][ T7586] caif0: entered promiscuous mode
[  188.848338][ T7586] caif0: entered allmulticast mode
[  188.862214][ T7586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.090079][ T5798] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10
[  189.090117][ T5798] Bluetooth: unknown link type 255
[  189.103278][ T5798] Bluetooth: hci3: connection err: -111
[  189.807148][ T7629] erspan1: entered promiscuous mode
[  190.127130][ T7640] gretap0: entered promiscuous mode
[  190.134102][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[  190.134308][ T7640] gretap0: left promiscuous mode
[  190.348570][ T5112] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  190.702595][ T5112] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  190.702630][ T5112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.702655][ T5112] usb 4-1: Product: syz
[  190.702671][ T5112] usb 4-1: Manufacturer: syz
[  190.702688][ T5112] usb 4-1: SerialNumber: syz
[  190.734369][ T7646] pim6reg: entered allmulticast mode
[  190.774697][ T7645] pim6reg: left allmulticast mode
[  191.313448][ T5112] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  191.462393][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[  191.788912][ T5863] usb 4-1: USB disconnect, device number 9
[  192.309650][ T7659] pim6reg: entered allmulticast mode
[  192.373488][ T7660] pim6reg: left allmulticast mode
[  192.378662][ T5112] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  192.378825][ T5112] ath9k_htc: Failed to initialize the device
[  192.739942][ T5863] usb 4-1: ath9k_htc: USB layer deinitialized
[  193.107923][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'.
[  193.166647][ T7668] rxe_eth0 speed is unknown, defaulting to 1000
[  193.231484][ T7670] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  193.338611][   T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  193.563544][   T27] usb 4-1: Using ep0 maxpacket: 8
[  193.581359][   T27] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  193.600824][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  193.631904][   T27] usb 4-1: Product: syz
[  193.651895][   T27] usb 4-1: Manufacturer: syz
[  193.662692][   T27] usb 4-1: SerialNumber: syz
[  193.687481][   T27] usb 4-1: config 0 descriptor??
[  193.723221][ T7677] loop4: detected capacity change from 0 to 164
[  193.793194][ T7679] kernel read not supported for file /blkio.bfq.io_merged (pid: 7679 comm: syz.2.396)
[  193.811048][ T7677] ISOFS: unable to read i-node block
[  193.822018][ T7677] isofs_fill_super: get root inode failed
[  193.828155][   T28] kauditd_printk_skb: 257 callbacks suppressed
[  193.828169][   T28] audit: type=1800 audit(1794590195.606:271): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.396" name="blkio.bfq.io_merged" dev="mqueue" ino=15437 res=0 errno=0
[  193.968063][   T27] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  194.001451][   T27] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  194.106451][   T28] audit: type=1804 audit(1794590195.886:272): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.397" name="/newroot/116/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1173 res=1 errno=0
[  194.170335][   T27] radio-si470x 4-1:0.0: software version 0, hardware version 0
[  194.180359][   T27] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  194.208156][   T27] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  194.452418][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.462413][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.671775][ T5863] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  194.738901][   T27] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110
[  194.748452][   T27] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32
[  194.757806][   T27] radio-si470x: probe of 4-1:0.0 failed with error -22
[  194.885386][ T5863] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  194.902026][ T5863] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.916963][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0
[  194.927888][ T5863] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  194.939706][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.024264][    T8] usb 4-1: USB disconnect, device number 10
[  195.031974][ T5863] usb 3-1: config 0 descriptor??
[  195.041418][ T7685] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  195.268572][ T5863] usbhid 3-1:0.0: can't add hid device: -71
[  195.723907][ T7694] pim6reg: entered allmulticast mode
[  195.934455][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'.
[  196.089161][ T5863] usbhid: probe of 3-1:0.0 failed with error -71
[  196.129077][ T5863] usb 3-1: USB disconnect, device number 6
[  196.453437][ T7699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2167134160 (277393172480 ns) > initial count (234584773888 ns). Using initial count to start timer.
[  197.153448][ T7713] pim6reg: entered allmulticast mode
[  197.352100][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'.
[  197.833517][ T7725] pim6reg: left allmulticast mode
[  198.019724][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'.
[  198.528964][ T7745] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2167134160 (277393172480 ns) > initial count (234584773888 ns). Using initial count to start timer.
[  198.566493][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'.
[  199.231356][ T7764] netlink: 'syz.3.421': attribute type 27 has an invalid length.
[  199.239326][ T7764] lo: entered promiscuous mode
[  199.244972][ T7764] lo: entered allmulticast mode
[  199.251941][ T7764] tunl0: entered promiscuous mode
[  199.267756][ T7764] tunl0: entered allmulticast mode
[  199.274292][ T7764] gre0: entered promiscuous mode
[  199.303654][ T7764] gre0: entered allmulticast mode
[  199.328228][ T7764] gretap0: entered promiscuous mode
[  199.337998][ T7764] gretap0: entered allmulticast mode
[  199.349911][ T7764] erspan0: entered promiscuous mode
[  199.363618][ T7764] erspan0: entered allmulticast mode
[  199.374810][ T7764] ip_vti0: entered promiscuous mode
[  199.382223][ T7764] ip_vti0: entered allmulticast mode
[  199.397833][ T7764] ip6_vti0: entered promiscuous mode
[  199.442379][ T7764] ip6_vti0: entered allmulticast mode
[  199.500455][ T7764] sit0: entered promiscuous mode
[  199.552591][ T7764] sit0: entered allmulticast mode
[  199.620445][ T7764] ip6tnl0: entered promiscuous mode
[  199.670537][ T7764] ip6tnl0: entered allmulticast mode
[  199.720599][ T7764] ip6gre0: entered promiscuous mode
[  199.757957][ T7764] ip6gre0: entered allmulticast mode
[  199.817586][ T7764] syz_tun: entered promiscuous mode
[  199.862665][ T7764] syz_tun: entered allmulticast mode
[  199.929879][ T7764] ip6gretap0: entered promiscuous mode
[  199.977130][ T7764] ip6gretap0: entered allmulticast mode
[  200.041620][ T7764] bridge0: entered promiscuous mode
[  200.098650][ T7764] bridge0: entered allmulticast mode
[  200.192094][ T7764] vcan0: entered promiscuous mode
[  200.316393][ T7764] vcan0: entered allmulticast mode
[  200.509691][ T7764] bond0: entered promiscuous mode
[  200.514804][ T7764] bond_slave_0: entered promiscuous mode
[  200.545302][ T7764] bond_slave_1: entered promiscuous mode
[  200.564416][ T7764] bond0: entered allmulticast mode
[  200.571561][ T7764] bond_slave_0: entered allmulticast mode
[  200.578895][ T7764] bond_slave_1: entered allmulticast mode
[  200.586404][ T7764] team0: entered promiscuous mode
[  200.591881][ T7764] team_slave_0: entered promiscuous mode
[  200.597948][ T7764] team_slave_1: entered promiscuous mode
[  200.604278][ T7764] team0: entered allmulticast mode
[  200.619613][ T7764] team_slave_0: entered allmulticast mode
[  200.625532][ T7764] team_slave_1: entered allmulticast mode
[  200.633179][ T7764] dummy0: entered promiscuous mode
[  200.638856][ T7764] dummy0: entered allmulticast mode
[  200.644946][ T7764] nlmon0: entered promiscuous mode
[  200.651867][ T7764] nlmon0: entered allmulticast mode
[  200.663416][ T7764] caif0: entered promiscuous mode
[  200.671301][ T7764] caif0: entered allmulticast mode
[  200.689076][ T7764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.747931][ T7778] pim6reg: entered allmulticast mode
[  200.773928][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[  201.167982][ T7791] pim6reg: entered allmulticast mode
[  201.369740][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'.
[  201.858002][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[  202.231635][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'.
[  202.264758][ T7792] pim6reg: left allmulticast mode
[  202.488595][ T5863] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  202.688790][ T5863] usb 3-1: Using ep0 maxpacket: 16
[  202.712905][ T5863] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.733333][ T5863] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.744176][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0
[  202.754363][ T5863] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  202.767950][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.793075][ T5863] usb 3-1: config 0 descriptor??
[  203.233523][ T5863] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  203.260775][ T5863] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  203.279368][ T5863] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  203.286633][ T5863] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  203.298792][ T5863] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  203.313925][ T5863] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  203.519090][   T27] usb 3-1: USB disconnect, device number 7
[  203.607028][ T7824] FAULT_INJECTION: forcing a failure.
[  203.607028][ T7824] name failslab, interval 1, probability 0, space 0, times 0
[  203.619213][ T7826] netlink: 'syz.1.436': attribute type 27 has an invalid length.
[  203.627648][ T7826] lo: entered promiscuous mode
[  203.633557][ T7826] lo: entered allmulticast mode
[  203.640269][ T7826] tunl0: entered promiscuous mode
[  203.643648][ T7824] CPU: 0 PID: 7824 Comm: syz.4.444 Not tainted syzkaller #0
[  203.651735][ T7826] tunl0: entered allmulticast mode
[  203.652638][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  203.652657][ T7824] Call Trace:
[  203.652687][ T7824]  <TASK>
[  203.662353][ T7826] gre0: entered promiscuous mode
[  203.667939][ T7824]  dump_stack_lvl+0x18c/0x250
[  203.677118][ T7826] gre0: entered allmulticast mode
[  203.679145][ T7824]  ? show_regs_print_info+0x20/0x20
[  203.679184][ T7824]  ? load_image+0x420/0x420
[  203.694859][ T7826] gretap0: entered promiscuous mode
[  203.698666][ T7824]  ? __lock_acquire+0x7eb0/0x7eb0
[  203.698708][ T7824]  should_fail_ex+0x394/0x4c0
[  203.698741][ T7824]  should_failslab+0x9/0x20
[  203.706018][ T7826] gretap0: entered allmulticast mode
[  203.709020][ T7824]  slab_pre_alloc_hook+0x59/0x300
[  203.709056][ T7824]  kmem_cache_alloc+0x5a/0x2d0
[  203.709077][ T7824]  ? create_new_namespaces+0x34/0x700
[  203.717792][ T7826] erspan0: entered promiscuous mode
[  203.718282][ T7824]  create_new_namespaces+0x34/0x700
[  203.725550][ T7826] erspan0: entered allmulticast mode
[  203.728660][ T7824]  __se_sys_setns+0x2f3/0x1740
[  203.728694][ T7824]  ? __bpf_trace_rcu_stall_warning+0x160/0x160
[  203.728733][ T7824]  ? __x64_sys_setns+0x60/0x60
[  203.738283][ T7826] ip_vti0: entered promiscuous mode
[  203.738884][ T7824]  ? lockdep_hardirqs_on+0x98/0x150
[  203.738916][ T7824]  do_syscall_64+0x55/0xb0
[  203.738943][ T7824]  ? clear_bhb_loop+0x40/0x90
[  203.738974][ T7824]  ? clear_bhb_loop+0x40/0x90
[  203.739006][ T7824]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.739046][ T7824] RIP: 0033:0x7fada3daa807
[  203.739066][ T7824] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.739085][ T7824] RSP: 002b:00007fada4cf4fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[  203.739108][ T7824] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fada3daa807
[  203.739123][ T7824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  203.739136][ T7824] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000
[  203.739147][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fada4cf56a8
[  203.739160][ T7824] R13: 000000000000000e R14: 00007fada4025fa0 R15: 00007ffe211301c8
[  203.739218][ T7824]  </TASK>
[  203.763777][ T7826] ip_vti0: entered allmulticast mode
[  203.916027][ T7826] ip6_vti0: entered promiscuous mode
[  203.925432][ T7826] ip6_vti0: entered allmulticast mode
[  203.935275][ T7826] sit0: entered promiscuous mode
[  203.941483][ T7826] sit0: entered allmulticast mode
[  203.947352][ T7826] ip6tnl0: entered promiscuous mode
[  203.958406][ T7826] ip6tnl0: entered allmulticast mode
[  203.965573][ T7826] ip6gre0: entered promiscuous mode
[  203.974197][ T7826] ip6gre0: entered allmulticast mode
[  203.982495][ T7826] syz_tun: entered promiscuous mode
[  203.987761][ T7826] syz_tun: entered allmulticast mode
[  204.000328][ T7826] ip6gretap0: entered promiscuous mode
[  204.005860][ T7826] ip6gretap0: entered allmulticast mode
[  204.016175][ T7826] bridge0: entered promiscuous mode
[  204.022994][ T7826] bridge0: entered allmulticast mode
[  204.035409][ T7826] vcan0: entered promiscuous mode
[  204.042108][ T7826] vcan0: entered allmulticast mode
[  204.047653][ T7826] bond0: entered promiscuous mode
[  204.066903][ T7826] bond_slave_0: entered promiscuous mode
[  204.074127][ T7826] bond_slave_1: entered promiscuous mode
[  204.086972][ T7826] bond0: entered allmulticast mode
[  204.094330][ T7826] bond_slave_0: entered allmulticast mode
[  204.102086][ T7826] bond_slave_1: entered allmulticast mode
[  204.111255][ T7826] team0: entered promiscuous mode
[  204.116353][ T7826] team_slave_0: entered promiscuous mode
[  204.122527][ T7826] team_slave_1: entered promiscuous mode
[  204.128436][ T7826] team0: entered allmulticast mode
[  204.141010][ T7826] team_slave_0: entered allmulticast mode
[  204.146800][ T7826] team_slave_1: entered allmulticast mode
[  204.170975][ T7826] dummy0: entered promiscuous mode
[  204.182762][ T7826] dummy0: entered allmulticast mode
[  204.191160][ T7826] nlmon0: entered promiscuous mode
[  204.196391][ T7826] nlmon0: entered allmulticast mode
[  204.207597][ T7826] caif0: entered promiscuous mode
[  204.215825][ T7826] caif0: entered allmulticast mode
[  204.224801][ T7826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.474980][ T5863] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  204.768636][ T5863] usb 4-1: Using ep0 maxpacket: 16
[  204.786994][ T7837] pim6reg: left allmulticast mode
[  204.860544][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.999259][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.075481][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  205.193735][ T5863] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  205.275225][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.304760][ T5863] usb 4-1: config 0 descriptor??
[  205.454538][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'.
[  205.791812][ T5863] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input8
[  205.857991][ T5863] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  206.110210][ T7849] loop1: detected capacity change from 0 to 32768
[  206.121954][ T5863] usb 4-1: USB disconnect, device number 11
[  206.145206][ T7849] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.442 (7849)
[  206.196987][ T7849] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  206.228836][ T7849] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  206.271434][ T7849] BTRFS info (device loop1): using free space tree
[  206.352108][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'.
[  206.376000][ T7873] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  206.405507][ T7849] BTRFS info (device loop1): enabling ssd optimizations
[  206.597173][ T7875] bond0: (slave bond_slave_0): Releasing backup interface
[  206.739423][ T5786] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  207.009275][ T5790] Bluetooth: hci1: command 0x0406 tx timeout
[  207.015397][ T5796] Bluetooth: hci2: command 0x0406 tx timeout
[  207.060995][ T7897] mmap: syz.1.451 (7897) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  207.215260][   T28] audit: type=1326 audit(1794590208.996:273): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7112ba94d9 code=0x0
[  207.686553][ T7906] pim6reg: entered allmulticast mode
[  207.703321][ T7906] pim6reg: left allmulticast mode
[  208.423590][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'.
[  208.516051][ T7917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.088840][ T5863] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  209.257547][   T52] Bluetooth: hci2: unexpected event 0x04 length: 12 > 10
[  209.295872][   T52] Bluetooth: unknown link type 255
[  209.342730][   T52] Bluetooth: hci2: connection err: -111
[  210.079527][ T5863] usb 5-1: Using ep0 maxpacket: 16
[  210.089128][ T5863] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00
[  210.098976][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.111050][ T5863] usb 5-1: config 0 descriptor??
[  210.136639][ T5863] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  210.167470][ T5863] usb 5-1: Detected FT2233HP
[  210.340841][ T5863] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  210.363831][ T5863] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  210.436308][ T7929] syz.3.461 (7929): drop_caches: 2
[  210.749776][ T7938] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  210.760788][ T7938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  211.827511][ T7941] block nbd1: shutting down sockets
[  212.016564][ T7952] pim6reg: entered allmulticast mode
[  212.038937][ T7952] pim6reg: left allmulticast mode
[  212.093995][ T7944] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity
[  212.145335][ T7944] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate
[  212.226311][ T7944] ftdi_sio ttyUSB0: failed to set flow control: -32
[  212.631299][ T7944] ftdi_sio ttyUSB0: failed to get modem status: -32
[  212.675543][ T7944] ftdi_sio ttyUSB0: error from flowcontrol urb
[  212.697452][   T27] usb 5-1: USB disconnect, device number 3
[  212.722608][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'.
[  212.737341][   T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  212.812997][   T27] ftdi_sio 5-1:0.0: device disconnected
[  213.480732][ T7964] pim6reg: left allmulticast mode
[  214.122162][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'.
[  214.186604][   T27] IPVS: starting estimator thread 0...
[  214.329086][ T7981] IPVS: using max 18 ests per chain, 43200 per kthread
[  215.517944][ T8024] ALSA: seq fatal error: cannot create timer (-22)
[  217.017325][ T8031] pim6reg: entered allmulticast mode
[  217.031692][ T8033] pim6reg: left allmulticast mode
[  217.081466][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'.
[  217.664386][ T8050] kvm: pic: non byte write
[  219.253007][ T8071] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  220.982134][ T8066] bridge_slave_1: left allmulticast mode
[  220.987953][ T8066] bridge_slave_1: left promiscuous mode
[  220.994604][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.021891][ T8066] bridge_slave_0: left allmulticast mode
[  221.037831][ T8066] bridge_slave_0: left promiscuous mode
[  221.044461][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.191099][ T8086] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  221.205070][ T8077] pim6reg: entered allmulticast mode
[  221.225536][ T8078] pim6reg: left allmulticast mode
[  221.298917][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'.
[  221.884627][ T8102] pim6reg: entered allmulticast mode
[  221.899649][ T8102] pim6reg: left allmulticast mode
[  222.574785][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'.
[  222.889670][ T5862] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  222.993826][ T8122] loop1: detected capacity change from 0 to 164
[  223.011569][ T8122] ISO 9660 Extensions: Microsoft Joliet Level 3
[  223.012564][ T8122] ISOFS: changing to secondary root
[  223.078984][ T5862] usb 3-1: Using ep0 maxpacket: 16
[  223.092542][ T8123] ==================================================================
[  223.092557][ T8123] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0
[  223.092596][ T8123] Write of size 4 at addr ffffc90003da9fc0 by task syz.4.516/8123
[  223.092616][ T8123] 
[  223.092622][ T8123] CPU: 1 PID: 8123 Comm: syz.4.516 Not tainted syzkaller #0
[  223.092652][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  223.092665][ T8123] Call Trace:
[  223.092673][ T8123]  <TASK>
[  223.092682][ T8123]  dump_stack_lvl+0x18c/0x250
[  223.092712][ T8123]  ? sys_imageblit+0x1bac/0x25d0
[  223.092742][ T8123]  ? show_regs_print_info+0x20/0x20
[  223.092772][ T8123]  ? load_image+0x420/0x420
[  223.092802][ T8123]  print_report+0xa8/0x210
[  223.092827][ T8123]  ? sys_imageblit+0x1bac/0x25d0
[  223.092854][ T8123]  kasan_report+0x117/0x150
[  223.092883][ T8123]  ? sys_imageblit+0x1bac/0x25d0
[  223.092916][ T8123]  sys_imageblit+0x1bac/0x25d0
[  223.092953][ T8123]  ? sys_copyarea+0x2530/0x2530
[  223.092985][ T8123]  ? try_to_wake_up+0x6c3/0x10e0
[  223.093011][ T8123]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  223.093038][ T8123]  cw_putcs+0x15f3/0x18a0
[  223.093085][ T8123]  ? cw_clear+0x250/0x250
[  223.093114][ T8123]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[  223.093140][ T8123]  ? fb_get_color_depth+0x162/0x280
[  223.093177][ T8123]  fbcon_putcs+0x35c/0x520
[  223.093203][ T8123]  ? cw_clear+0x250/0x250
[  223.093230][ T8123]  do_update_region+0x4e9/0x640
[  223.093252][ T8123]  ? __asan_memcpy+0x40/0x70
[  223.093288][ T8123]  ? hide_cursor+0x320/0x320
[  223.093315][ T8123]  redraw_screen+0xa30/0x1000
[  223.093341][ T8123]  ? clear_buffer_attributes+0x320/0x320
[  223.093366][ T8123]  ? vc_do_resize+0x1087/0x17f0
[  223.093391][ T8123]  vc_do_resize+0x1256/0x17f0
[  223.093427][ T8123]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  223.093452][ T8123]  ? vc_resize+0x50/0x50
[  223.093481][ T8123]  vt_resizex+0x3f0/0x5a0
[  223.093511][ T8123]  ? vt_disallocate+0x90/0x90
[  223.093539][ T8123]  ? security_capable+0x89/0xb0
[  223.093564][ T8123]  vt_ioctl+0x125f/0x1f20
[  223.093593][ T8123]  ? __vt_event_wait+0x260/0x260
[  223.093626][ T8123]  ? __fget_files+0x28/0x460
[  223.093666][ T8123]  ? tty_jobctrl_ioctl+0x378/0xba0
[  223.093690][ T8123]  tty_ioctl+0x91e/0xdc0
[  223.093714][ T8123]  ? tty_get_icount+0xb0/0xb0
[  223.093742][ T8123]  __se_sys_ioctl+0xfd/0x170
[  223.093773][ T8123]  do_syscall_64+0x55/0xb0
[  223.093800][ T8123]  ? clear_bhb_loop+0x40/0x90
[  223.093829][ T8123]  ? clear_bhb_loop+0x40/0x90
[  223.093859][ T8123]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.093888][ T8123] RIP: 0033:0x7fada3da94d9
[  223.093907][ T8123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.093926][ T8123] RSP: 002b:00007fada4cb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  223.093950][ T8123] RAX: ffffffffffffffda RBX: 00007fada4026180 RCX: 00007fada3da94d9
[  223.093966][ T8123] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000009
[  223.093981][ T8123] RBP: 00007fada3e3804e R08: 0000000000000000 R09: 0000000000000000
[  223.093995][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.094009][ T8123] R13: 00007fada4026218 R14: 00007fada4026180 R15: 00007ffe211301c8
[  223.094035][ T8123]  </TASK>
[  223.094042][ T8123] 
[  223.094046][ T8123] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003daa000 allocated at drm_gem_shmem_vmap+0x3c4/0x650
[  223.094097][ T8123] Memory state around the buggy address:
[  223.094109][ T8123]  ffffc90003da9e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  223.094123][ T8123]  ffffc90003da9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  223.094136][ T8123] >ffffc90003da9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  223.094147][ T8123]                                            ^
[  223.094159][ T8123]  ffffc90003daa000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  223.094172][ T8123]  ffffc90003daa080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  223.094183][ T8123] ==================================================================
[  223.095088][ T5862] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00
[  223.095120][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.099279][ T8123] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  223.099293][ T8123] CPU: 1 PID: 8123 Comm: syz.4.516 Not tainted syzkaller #0
[  223.099315][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  223.099328][ T8123] Call Trace:
[  223.099336][ T8123]  <TASK>
[  223.099345][ T8123]  dump_stack_lvl+0x18c/0x250
[  223.099379][ T8123]  ? show_regs_print_info+0x20/0x20
[  223.099406][ T8123]  ? load_image+0x420/0x420
[  223.099435][ T8123]  panic+0x2ca/0x720
[  223.099457][ T8123]  ? bpf_jit_dump+0xd0/0xd0
[  223.099479][ T8123]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  223.099505][ T8123]  ? _raw_spin_unlock+0x40/0x40
[  223.099526][ T8123]  ? print_memory_metadata+0x314/0x400
[  223.099555][ T8123]  ? sys_imageblit+0x1bac/0x25d0
[  223.099585][ T8123]  check_panic_on_warn+0x84/0xa0
[  223.099612][ T8123]  ? sys_imageblit+0x1bac/0x25d0
[  223.099655][ T8123]  end_report+0x6f/0x130
[  223.099682][ T8123]  kasan_report+0x128/0x150
[  223.099711][ T8123]  ? sys_imageblit+0x1bac/0x25d0
[  223.099744][ T8123]  sys_imageblit+0x1bac/0x25d0
[  223.099782][ T8123]  ? sys_copyarea+0x2530/0x2530
[  223.099815][ T8123]  ? try_to_wake_up+0x6c3/0x10e0
[  223.099840][ T8123]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  223.099867][ T8123]  cw_putcs+0x15f3/0x18a0
[  223.099913][ T8123]  ? cw_clear+0x250/0x250
[  223.099943][ T8123]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[  223.099970][ T8123]  ? fb_get_color_depth+0x162/0x280
[  223.100005][ T8123]  fbcon_putcs+0x35c/0x520
[  223.100031][ T8123]  ? cw_clear+0x250/0x250
[  223.100058][ T8123]  do_update_region+0x4e9/0x640
[  223.100079][ T8123]  ? __asan_memcpy+0x40/0x70
[  223.100116][ T8123]  ? hide_cursor+0x320/0x320
[  223.100143][ T8123]  redraw_screen+0xa30/0x1000
[  223.100171][ T8123]  ? clear_buffer_attributes+0x320/0x320
[  223.100195][ T8123]  ? vc_do_resize+0x1087/0x17f0
[  223.100220][ T8123]  vc_do_resize+0x1256/0x17f0
[  223.100258][ T8123]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  223.100288][ T8123]  ? vc_resize+0x50/0x50
[  223.100317][ T8123]  vt_resizex+0x3f0/0x5a0
[  223.100369][ T8123]  ? vt_disallocate+0x90/0x90
[  223.100396][ T8123]  ? security_capable+0x89/0xb0
[  223.100422][ T8123]  vt_ioctl+0x125f/0x1f20
[  223.100452][ T8123]  ? __vt_event_wait+0x260/0x260
[  223.100485][ T8123]  ? __fget_files+0x28/0x460
[  223.100517][ T8123]  ? tty_jobctrl_ioctl+0x378/0xba0
[  223.100541][ T8123]  tty_ioctl+0x91e/0xdc0
[  223.100563][ T8123]  ? tty_get_icount+0xb0/0xb0
[  223.100585][ T8123]  __se_sys_ioctl+0xfd/0x170
[  223.100615][ T8123]  do_syscall_64+0x55/0xb0
[  223.100650][ T8123]  ? clear_bhb_loop+0x40/0x90
[  223.100679][ T8123]  ? clear_bhb_loop+0x40/0x90
[  223.100708][ T8123]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.100737][ T8123] RIP: 0033:0x7fada3da94d9
[  223.100755][ T8123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.100772][ T8123] RSP: 002b:00007fada4cb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  223.100806][ T8123] RAX: ffffffffffffffda RBX: 00007fada4026180 RCX: 00007fada3da94d9
[  223.100822][ T8123] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000009
[  223.100836][ T8123] RBP: 00007fada3e3804e R08: 0000000000000000 R09: 0000000000000000
[  223.100849][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.100862][ T8123] R13: 00007fada4026218 R14: 00007fada4026180 R15: 00007ffe211301c8
[  223.100887][ T8123]  </TASK>
[  223.101467][ T8123] Kernel Offset: disabled