last executing test programs:

3m6.722493689s ago: executing program 3 (id=474):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003840)={0x20, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)

3m5.341887574s ago: executing program 3 (id=478):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x10}]}, 0x0, 0x7}, 0x94)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010029bd5900fedbee2507000000c6253d2075eea13eb24ab5d730c957cdea7e4cd378f913072a2b435ff0142c08000000cfdfb9b78fb42ffd096353d72ec6bf1646e9f319719f3fb6a1ce1afd3ab2dd6256", @ANYRES32=r4, @ANYBLOB="80007e0a0a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043)
socket$can_j1939(0x1d, 0x2, 0x7)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r7, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000101401002abd7000fcdbdf25000215af9e9db53d89b00600000000030001000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20001051}, 0x40040c0)
ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd09000192ea797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0)
fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
pread64(r0, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)

3m4.317598307s ago: executing program 3 (id=480):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x66, 0x0, 0x132, 0x3})
ioctl$VT_DISALLOCATE(r0, 0x5608)
socket(0x25, 0x3, 0x9)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0x7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="da3ab93d2f946ac7e65fb0321da67132027d1085968f8c7aa43e3ba3852bb6f4811b18d33e11f33eb2ece2d81225dc1848b675912cd55664486dfcdb7dcb330bdeac9bbed71b2303cd579e4cf49cab7388be739946818c46d8e8f163cdeda7d26f09458a5aa89c9271b72fb1fce15d5e8f68ed21bf75d7148fd723439e5be076", @ANYRES8, @ANYRES16, @ANYRES16, @ANYRES16, @ANYRES32=r1, @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000080)=0x20)
ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000040))
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)

3m2.037393241s ago: executing program 3 (id=484):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x1b)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

2m59.60563836s ago: executing program 3 (id=489):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x3, 0x9e)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000040)={0x1})

2m57.224990617s ago: executing program 3 (id=494):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2m41.548163846s ago: executing program 32 (id=494):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

10.973305214s ago: executing program 4 (id=839):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x7fff}}, './file0\x00'})
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x40, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)='gretap0\x00', 0x20c, 0x3, 0x6})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000030a010200000000000000000200000680000000000000000000000026000300fd02b21edf8b721e23f25f47a7af48fbb07c400faffd8d27130601205b56f46dc2de0000140000001100010000000000000000000000000a482b6f6ce8cc41258b05ba688c8a8c099c985d8bfe48583ea1f19e6b1b38d29336c14d34a41bd38079"], 0x70}}, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
r3 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r3)
close(r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000205000100070000008d19e0da1eab44795dee96d502b9dd1c0facca66750302e07ad5035f33ea1709268fc24f1c6db1613898b0be3c12717a4c679f"], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80d0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x2000)
ioctl$LOOP_SET_CAPACITY(r7, 0x4c07)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000306010200000000000000000a0000040500010007000000050001000700000005000100070000000500010007000000e3ff01000700000005000100070000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404a004}, 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a310000000014000480100001800a00010072656469720000000900020073797a3200000000200000000e0a01040000000000000000070000050900010073797a3000000000140000001100010000000000000000000100000ac9d9cc1c00e7"], 0x88}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

10.322477875s ago: executing program 4 (id=840):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="240000001e005f0214f9f407000904001f0000000000000000000e000800040001000000", 0x24)
dup2(0xffffffffffffffff, r1)

9.763761773s ago: executing program 2 (id=842):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$SIOCSIFMTU(r0, 0x40047459, 0x0)

9.689657185s ago: executing program 2 (id=843):
r0 = socket$inet(0x2, 0x3, 0x6)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
io_setup(0x4, &(0x7f0000000080))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x2, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000180)={0x2, @win={{0x2, 0x0, 0x0, 0x4}, 0x7, 0xfffffffd, &(0x7f0000000040)={{0x0, 0x9}}, 0x0, 0x0}})

8.693729407s ago: executing program 5 (id=846):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x10}]}, 0x0, 0x7}, 0x94)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010029bd5900fedbee2507000000c6253d2075eea13eb24ab5d730c957cdea7e4cd378f913072a2b435ff0142c08000000cfdfb9b78fb42ffd096353d72ec6bf1646e9f319719f3fb6a1ce1afd3ab2dd6256", @ANYRES32=r3, @ANYBLOB="80007e0a0a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043)
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r6, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10)
fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
pread64(r0, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)

8.649636779s ago: executing program 4 (id=847):
socket$l2tp(0x2, 0x2, 0x73)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, &(0x7f0000000140))
r7 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000), 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)

7.277533314s ago: executing program 2 (id=848):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340)="8c4e55be8948c65379def4df90ce", 0xe, 0x100, 0x9}], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442da002381c1", 0x3e}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b2e", 0xb3}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac", 0x75}], 0x6, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.225600956s ago: executing program 4 (id=849):
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)

6.841046668s ago: executing program 1 (id=851):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=r0, @ANYBLOB="100a0500223803001c0012800b00010062726964676500000100000005002c0014000000"], 0x3c}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00', @ifru_names='virt_wifi0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r4 = epoll_create1(0x80000)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='A\x00'])
socket$inet6_sctp(0xa, 0x1, 0x84)
memfd_create(&(0x7f0000000300)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xad\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xf7\xff\xff\xff6\xb8G\xd1c\xe1$\xfb\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabt\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd62^\xbd\xc7\xdd\x8c\x99\x95\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xf5N\xd3\x85W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf\x01\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9fx\x9b\xe2\xb2\xc8\xe5umy\t\x9c)s.>{\xe6\\\xc5MX\xca(\xce,\x13D\xa6\xba\x0f\x14j\xcc\xc9\x0f<Z\xcd&\xf1(\x18\f\x16\x98\xf8\x1b\x04\xb0\x89.\xdfj\xf1\x85\x14\v\xfb\xda|\x9d\x94\"\xdb\xb8Z\x7f\x9cR\x7fn6\xf4M@6\xa7\xb7{\x9bf\x81\x15\xbb\xffU\xc2\xe0\x98\b\x03\x11\x89Cw\xd2\x92\x83\xea\xa4S\x9e\xa5\x8d\xa5\xb3.\xfbF\xa0\xa2\x15\xd5\x04\xd6\xb5+\x8f\x84W\xa9\xbaAa\xe7\xa9\xa8QwLs{\x16\t\x81\xb4\x85\xb9)\xb1\xb5\xab\xdd\xed\xf8\xfe\xfdt\x94\"\xa9,V\xcb\x9bo\xe6\xa8\x96\v63]\f\xfe9\xfd\xdd5+\x9c\xd7\x1c\xec\xf1i3;\xae\x9b\xbe4\f\xd8\xd5\xe8\xe7!k^\x1a\xb7O(\x1e\x84/\xcd.f\"\x1d@\xad\xc8\xc1\xbe\t\x9d\xa4\xe3W\x90\"\x10\xe7\xa1-DN\xf3\x8c\xafV#I\x00\x00\x00\x00\x00\x00\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f0000000080), 0x32, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000001000000006d0500000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000040000", @ANYRES32=0x0, @ANYRES8, @ANYRES8=r1], 0x50)
mprotect(&(0x7f0000561000/0x3000)=nil, 0x3000, 0x2000000)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
setresgid(0xee01, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)

6.78765164s ago: executing program 5 (id=852):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x3c}}, 0x0)

6.630728945s ago: executing program 5 (id=853):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010"], 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x2003)
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
r6 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0)

6.610567055s ago: executing program 1 (id=854):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
keyctl$set_reqkey_keyring(0xe, 0x2)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

4.839642183s ago: executing program 0 (id=855):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x0, 0x0, 0x4, r2, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, r2, 0x1})

4.834389033s ago: executing program 1 (id=856):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd", @ANYRES32=0x0, @ANYBLOB="1b0b04000300"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="020304000100090104006bd648c610112f01fe80000000000000000000000000002eff0200000000000000000000000000011c2088be"], 0x1043)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x82, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x36, 0x6, 0x1, 0xfffffb9a, 0xfffffffc, 0x7, 0xfffffffb, 0x4, 0x3, 0x4, 0x8, 0x4, 0x800, 0x300000, 0x9f, 0xe, 0x5, 0x0, 0x0, 0x8, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1000, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0x2, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x803, 0x9, 0x10000, 0x400, 0x7, 0x3, 0x41, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x6, 0xffff, 0x6, 0x96, 0x8000, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x10000379, 0x9, 0xe, 0x1ff, 0xb, 0x6, 0x2, 0x1, 0x1, 0x6, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x17, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x4, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x4a, 0x2, 0x8, 0x3, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x880, 0x85a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0xa, 0x4, 0xea, 0x9, 0x5, 0x2, 0xdd, 0x0, 0x7ff, 0x401, 0x8], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x8e5, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x10001, 0x4, 0x8e8, 0x5, 0x10, 0x4, 0xe4b, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x2000008, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffa, 0x7, 0xe, 0x2, 0x7ff, 0xf, 0x135, 0xec9]}, 0x45c)
r4 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00400300000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)
write$cgroup_int(r0, &(0x7f0000001480)=0x2, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x3, 0x20000000000000f1, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0xb8b, 0x0, 0x0, 0x41100, 0x2}, 0x94)

4.740698876s ago: executing program 0 (id=857):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="240000001e005f0214f9f407000904001f0000000000000000000e000800040001000000", 0x24)
dup2(0xffffffffffffffff, r1)

4.498592964s ago: executing program 2 (id=858):
r0 = socket$inet(0x2, 0x3, 0x6)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
io_setup(0x4, &(0x7f0000000080))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x2, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000180)={0x2, @win={{0x2, 0x0, 0x0, 0x4}, 0x7, 0xfffffffd, &(0x7f0000000040)={{0x0, 0x9}}, 0x0, 0x0}})

2.76984202s ago: executing program 5 (id=859):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x33, 0x0, 0x0)

2.700601172s ago: executing program 0 (id=860):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x4000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

2.375614293s ago: executing program 5 (id=861):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f00000002c0)='@\a', &(0x7f0000000280)='./file1\x00', 0x0, 0x298869, 0x0)
mount$nfs(&(0x7f0000000080)='@\a', 0x0, &(0x7f0000000500), 0x2204085, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x0, 0x7fffffffffffffff, 0x7d, 0x2000000000000000, 0x85ef, 0x4, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffbfff, 0x9, 0x0, 0xf, 0x80000006, 0x7ffffffffffffffd}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

2.224340518s ago: executing program 1 (id=862):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x10}]}, 0x0, 0x7}, 0x94)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010029bd5900fedbee2507000000c6253d2075eea13eb24ab5d730c957cdea7e4cd378f913072a2b435ff0142c08000000cfdfb9b78fb42ffd096353d72ec6bf1646e9f319719f3fb6a1ce1afd3ab2dd6256", @ANYRES32=r3, @ANYBLOB="80007e0a0a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043)
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r6, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10)
fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
pread64(r0, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)

1.277234719s ago: executing program 2 (id=863):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x3c}}, 0x0)

1.067179685s ago: executing program 4 (id=864):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=r0, @ANYBLOB="100a0500223803001c0012800b00010062726964676500000100000005002c0014000000"], 0x3c}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00', @ifru_names='virt_wifi0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r4 = epoll_create1(0x80000)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='A\x00'])
socket$inet6_sctp(0xa, 0x1, 0x84)
memfd_create(&(0x7f0000000300)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xad\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xf7\xff\xff\xff6\xb8G\xd1c\xe1$\xfb\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabt\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd62^\xbd\xc7\xdd\x8c\x99\x95\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xf5N\xd3\x85W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf\x01\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9fx\x9b\xe2\xb2\xc8\xe5umy\t\x9c)s.>{\xe6\\\xc5MX\xca(\xce,\x13D\xa6\xba\x0f\x14j\xcc\xc9\x0f<Z\xcd&\xf1(\x18\f\x16\x98\xf8\x1b\x04\xb0\x89.\xdfj\xf1\x85\x14\v\xfb\xda|\x9d\x94\"\xdb\xb8Z\x7f\x9cR\x7fn6\xf4M@6\xa7\xb7{\x9bf\x81\x15\xbb\xffU\xc2\xe0\x98\b\x03\x11\x89Cw\xd2\x92\x83\xea\xa4S\x9e\xa5\x8d\xa5\xb3.\xfbF\xa0\xa2\x15\xd5\x04\xd6\xb5+\x8f\x84W\xa9\xbaAa\xe7\xa9\xa8QwLs{\x16\t\x81\xb4\x85\xb9)\xb1\xb5\xab\xdd\xed\xf8\xfe\xfdt\x94\"\xa9,V\xcb\x9bo\xe6\xa8\x96\v63]\f\xfe9\xfd\xdd5+\x9c\xd7\x1c\xec\xf1i3;\xae\x9b\xbe4\f\xd8\xd5\xe8\xe7!k^\x1a\xb7O(\x1e\x84/\xcd.f\"\x1d@\xad\xc8\xc1\xbe\t\x9d\xa4\xe3W\x90\"\x10\xe7\xa1-DN\xf3\x8c\xafV#I\x00\x00\x00\x00\x00\x00\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f0000000080), 0x32, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000001000000006d0500000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000040000", @ANYRES32=0x0, @ANYRES8, @ANYRES8=r1], 0x50)
mprotect(&(0x7f0000561000/0x3000)=nil, 0x3000, 0x2000000)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
setresgid(0xee01, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)

1.052929836s ago: executing program 5 (id=865):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}})
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))
rmdir(&(0x7f0000001180)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.052455356s ago: executing program 1 (id=866):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800)

1.023468337s ago: executing program 0 (id=867):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

990.082278ms ago: executing program 2 (id=868):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0xfffffdf0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

109.227796ms ago: executing program 0 (id=869):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x1, 0x0, {}, {}, {0x0, 0x3, 0x1}, {0x0, 0x0, 0x2}, 0x0, 0x3f, 0x0, 0x8000, 0x0, 0x10000004, 0x0, 0xa, 0xfffffffe, 0xfffffffd, 0xd, 0x8, 0x4, 0x0, 0x0, 0xa})

49.049378ms ago: executing program 1 (id=870):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="240000001e005f0214f9f407000904001f0000000000000000000e000800040001000000", 0x24)
dup2(0xffffffffffffffff, r1)

1.60723ms ago: executing program 4 (id=871):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140))
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x40)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x0, 0x2, 0x3, &(0x7f0000000000))
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @pix={0x46, 0x7, 0x49433553, 0x7, 0xa, 0xac0, 0xb, 0x1, 0x0, 0x3, 0x2, 0x2}})
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x30, 0x1}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20100, 0x10)
statx(r2, &(0x7f0000000340)='./file0\x00', 0x6000, 0x10, &(0x7f00000000c0))
unshare(0x6e000000)

0s ago: executing program 0 (id=872):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd", @ANYRES32=0x0, @ANYBLOB="1b0b04000300"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="020304000100090104006bd648c610112f01fe80000000000000000000000000002eff0200000000000000000000000000011c2088be"], 0x1043)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x82, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x36, 0x6, 0x1, 0xfffffb9a, 0xfffffffc, 0x7, 0xfffffffb, 0x4, 0x3, 0x4, 0x8, 0x4, 0x800, 0x300000, 0x9f, 0xe, 0x5, 0x0, 0x0, 0x8, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1000, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0x2, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x803, 0x9, 0x10000, 0x400, 0x7, 0x3, 0x41, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x6, 0xffff, 0x6, 0x96, 0x8000, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x10000379, 0x9, 0xe, 0x1ff, 0xb, 0x6, 0x2, 0x1, 0x1, 0x6, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x17, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x4, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x4a, 0x2, 0x8, 0x3, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x880, 0x85a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0xa, 0x4, 0xea, 0x9, 0x5, 0x2, 0xdd, 0x0, 0x7ff, 0x401, 0x8], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x8e5, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x10001, 0x4, 0x8e8, 0x5, 0x10, 0x4, 0xe4b, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x2000008, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffa, 0x7, 0xe, 0x2, 0x7ff, 0xf, 0x135, 0xec9]}, 0x45c)
r4 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00400300000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)
write$cgroup_int(r0, &(0x7f0000001480)=0x2, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x3, 0x20000000000000f1, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0xb8b, 0x0, 0x0, 0x41100, 0x2}, 0x94)

kernel console output (not intermixed with test programs):

=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  247.069977][ T6031] loop4: detected capacity change from 0 to 512
[  247.085086][   T26] audit: type=1326 audit(1780725757.700:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  247.243294][   T26] audit: type=1326 audit(1780725757.700:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  247.377686][   T26] audit: type=1326 audit(1780725757.700:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  247.404068][   T26] audit: type=1326 audit(1780725757.700:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  247.447737][   T26] audit: type=1326 audit(1780725757.700:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  247.577844][   T26] audit: type=1326 audit(1780725757.710:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  247.639563][ T6031] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.469: missing EA_INODE flag
[  247.641421][ T6033] No such timeout policy "syz0"
[  247.759932][ T6031] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.469: error while reading EA inode 12 err=-117
[  248.092970][ T6031] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.469: inode #1025: comm syz.4.469: iget: illegal inode #
[  248.203698][ T6031] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.469: error while reading EA inode 1025 err=-117
[  248.215971][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[  248.257012][ T6031] EXT4-fs (loop4): 1 orphan inode deleted
[  248.262776][ T6031] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  248.738796][ T6055] blktrace: Concurrent blktraces are not allowed on loop8
[  250.157367][ T1107] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  250.209753][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'.
[  250.235631][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'.
[  251.306209][ T1107] usb 3-1: Using ep0 maxpacket: 8
[  253.246795][ T1107] usb 3-1: device descriptor read/all, error -71
[  253.302895][ T6090] loop4: detected capacity change from 0 to 512
[  253.328815][ T6092] loop0: detected capacity change from 0 to 512
[  253.462410][ T6092] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.485: missing EA_INODE flag
[  253.469505][ T6090] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.482: missing EA_INODE flag
[  253.509424][ T6092] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.485: error while reading EA inode 12 err=-117
[  253.523381][ T6090] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.482: error while reading EA inode 12 err=-117
[  253.537477][ T6090] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.482: inode #1025: comm syz.4.482: iget: illegal inode #
[  253.551949][ T6092] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.485: inode #1025: comm syz.0.485: iget: illegal inode #
[  253.553199][ T6094] No such timeout policy "syz0"
[  253.786701][ T6092] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.485: error while reading EA inode 1025 err=-117
[  253.917142][ T6090] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.482: error while reading EA inode 1025 err=-117
[  253.932975][ T6092] EXT4-fs (loop0): 1 orphan inode deleted
[  253.947585][ T6092] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  254.049012][ T6090] EXT4-fs (loop4): 1 orphan inode deleted
[  254.069694][ T6090] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  254.831207][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  254.840951][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:4 Not tainted syzkaller #0
[  254.848524][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  254.858679][ T4202] Workqueue: hci3 hci_rx_work
[  254.863380][ T4202] Call Trace:
[  254.866659][ T4202]  <TASK>
[  254.869588][ T4202]  dump_stack_lvl+0x188/0x250
[  254.874252][ T4202]  ? show_regs_print_info+0x20/0x20
[  254.879434][ T4202]  ? load_image+0x400/0x400
[  254.883927][ T4202]  sysfs_create_dir_ns+0x26a/0x290
[  254.889025][ T4202]  ? sysfs_warn_dup+0xa0/0xa0
[  254.893715][ T4202]  ? process_one_work+0x85f/0x1010
[  254.898829][ T4202]  ? do_raw_spin_unlock+0x11d/0x230
[  254.904033][ T4202]  kobject_add_internal+0x6e0/0xd90
[  254.909229][ T4202]  kobject_add+0x160/0x230
[  254.913631][ T4202]  ? kobject_init+0x1d0/0x1d0
[  254.918297][ T4202]  ? klist_children_get+0x50/0x50
[  254.923310][ T4202]  ? get_device_parent+0x121/0x3f0
[  254.928407][ T4202]  device_add+0x48c/0x1000
[  254.932815][ T4202]  hci_conn_add_sysfs+0xd1/0x1e0
[  254.937743][ T4202]  le_conn_complete_evt+0xc4b/0x15c0
[  254.943017][ T4202]  ? cs_le_create_conn+0x5e0/0x5e0
[  254.948126][ T4202]  ? __mutex_trylock_common+0x155/0x260
[  254.953709][ T4202]  hci_le_meta_evt+0x285/0x3cb0
[  254.958549][ T4202]  ? hci_event_packet+0x37e/0x1370
[  254.963647][ T4202]  ? __lock_acquire+0x7d10/0x7d10
[  254.968662][ T4202]  ? hci_remote_host_features_evt+0x290/0x290
[  254.974739][ T4202]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  254.980357][ T4202]  ? mark_lock+0x94/0x320
[  254.984675][ T4202]  ? mutex_unlock+0x10/0x10
[  254.989270][ T4202]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  254.995240][ T4202]  ? lock_chain_count+0x20/0x20
[  255.000080][ T4202]  ? __rwlock_init+0x140/0x140
[  255.004856][ T4202]  hci_event_packet+0xe4b/0x1370
[  255.009868][ T4202]  ? lockdep_hardirqs_on+0x94/0x140
[  255.015070][ T4202]  ? rcu_lock_release+0x20/0x20
[  255.019911][ T4202]  ? hci_send_to_monitor+0x9c/0x4a0
[  255.025094][ T4202]  hci_rx_work+0x255/0xa10
[  255.029539][ T4202]  process_one_work+0x85f/0x1010
[  255.034481][ T4202]  ? worker_detach_from_pool+0x240/0x240
[  255.040106][ T4202]  ? lockdep_hardirqs_off+0x70/0x100
[  255.045377][ T4202]  ? _raw_spin_lock_irq+0xb7/0xf0
[  255.050387][ T4202]  ? _raw_spin_lock_irqsave+0x100/0x100
[  255.055941][ T4202]  ? wq_worker_running+0x97/0x170
[  255.060955][ T4202]  worker_thread+0xaa6/0x1290
[  255.065646][ T4202]  ? lockdep_hardirqs_on+0x94/0x140
[  255.070842][ T4202]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  255.076740][ T4202]  kthread+0x436/0x520
[  255.080816][ T4202]  ? rcu_lock_release+0x20/0x20
[  255.085655][ T4202]  ? kthread_blkcg+0xd0/0xd0
[  255.090230][ T4202]  ret_from_fork+0x1f/0x30
[  255.094636][ T4202]  </TASK>
[  255.097671][    C1] vkms_vblank_simulate: vblank timer overrun
[  255.158216][ T6102] blktrace: Concurrent blktraces are not allowed on loop0
[  255.189560][ T4202] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  255.202941][ T4202] Bluetooth: hci3: failed to register connection device
[  255.588905][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.595299][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.957431][ T4237] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  258.106864][ T4237] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.787686][ T4237] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  258.926201][ T4237] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.164537][ T4237] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  259.194285][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.876197][ T4237] usb 3-1: can't set config #1, error -71
[  260.619194][ T4237] usb 3-1: USB disconnect, device number 8
[  260.721724][ T6147] loop2: detected capacity change from 0 to 512
[  260.861576][ T6150] loop4: detected capacity change from 0 to 512
[  260.975713][ T6147] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.497: missing EA_INODE flag
[  260.993090][ T6147] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.497: error while reading EA inode 12 err=-117
[  261.012574][ T6147] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.497: inode #1025: comm syz.2.497: iget: illegal inode #
[  261.026120][ T6147] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.497: error while reading EA inode 1025 err=-117
[  261.049743][ T6147] EXT4-fs (loop2): 1 orphan inode deleted
[  261.058251][ T6147] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  261.417821][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  261.428320][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:4 Not tainted syzkaller #0
[  261.435880][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  261.445947][ T4202] Workqueue: hci2 hci_rx_work
[  261.450643][ T4202] Call Trace:
[  261.453925][ T4202]  <TASK>
[  261.456854][ T4202]  dump_stack_lvl+0x188/0x250
[  261.461541][ T4202]  ? show_regs_print_info+0x20/0x20
[  261.466745][ T4202]  ? load_image+0x400/0x400
[  261.471266][ T4202]  sysfs_create_dir_ns+0x26a/0x290
[  261.476384][ T4202]  ? sysfs_warn_dup+0xa0/0xa0
[  261.481065][ T4202]  ? preempt_schedule_thunk+0x16/0x18
[  261.486445][ T4202]  kobject_add_internal+0x6e0/0xd90
[  261.491660][ T4202]  kobject_add+0x160/0x230
[  261.496107][ T4202]  ? kobject_init+0x1d0/0x1d0
[  261.500792][ T4202]  ? klist_children_get+0x50/0x50
[  261.505920][ T4202]  ? get_device_parent+0x121/0x3f0
[  261.511050][ T4202]  device_add+0x48c/0x1000
[  261.515482][ T4202]  hci_conn_add_sysfs+0xd1/0x1e0
[  261.520440][ T4202]  le_conn_complete_evt+0xc4b/0x15c0
[  261.525749][ T4202]  ? cs_le_create_conn+0x5e0/0x5e0
[  261.530877][ T4202]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  261.536531][ T4202]  hci_le_meta_evt+0x285/0x3cb0
[  261.541433][ T4202]  ? hci_event_packet+0x37e/0x1370
[  261.546549][ T4202]  ? __lock_acquire+0x7d10/0x7d10
[  261.551587][ T4202]  ? hci_remote_host_features_evt+0x290/0x290
[  261.557658][ T4202]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  261.563295][ T4202]  ? mark_lock+0x94/0x320
[  261.567630][ T4202]  ? mutex_unlock+0x10/0x10
[  261.572136][ T4202]  ? mark_lock+0x94/0x320
[  261.576468][ T4202]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  261.582550][ T4202]  hci_event_packet+0xe4b/0x1370
[  261.587501][ T4202]  ? rcu_lock_release+0x20/0x20
[  261.592356][ T4202]  ? hci_rx_work+0xe1/0xa10
[  261.596868][ T4202]  hci_rx_work+0x255/0xa10
[  261.601300][ T4202]  process_one_work+0x85f/0x1010
[  261.606259][ T4202]  ? worker_detach_from_pool+0x240/0x240
[  261.611894][ T4202]  ? lockdep_hardirqs_off+0x70/0x100
[  261.617197][ T4202]  ? _raw_spin_lock_irq+0xb7/0xf0
[  261.622237][ T4202]  ? _raw_spin_lock_irqsave+0x100/0x100
[  261.627793][ T4202]  ? wq_worker_running+0x97/0x170
[  261.632830][ T4202]  worker_thread+0xaa6/0x1290
[  261.637526][ T4202]  ? lockdep_hardirqs_on+0x94/0x140
[  261.642751][ T4202]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  261.648659][ T4202]  kthread+0x436/0x520
[  261.652738][ T4202]  ? rcu_lock_release+0x20/0x20
[  261.657855][ T4202]  ? kthread_blkcg+0xd0/0xd0
[  261.662456][ T4202]  ret_from_fork+0x1f/0x30
[  261.666904][ T4202]  </TASK>
[  261.669960][    C1] vkms_vblank_simulate: vblank timer overrun
[  261.695013][ T6150] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.498: missing EA_INODE flag
[  261.756778][ T4202] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  261.770079][ T4202] Bluetooth: hci2: failed to register connection device
[  261.789781][   T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  261.947356][ T6150] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.498: error while reading EA inode 12 err=-117
[  262.176841][   T21] usb 2-1: Using ep0 maxpacket: 8
[  262.274320][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'.
[  262.297310][   T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  262.667480][ T6168] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  262.677984][ T6168] overlayfs: overlapping lowerdir path
[  262.692380][ T6150] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.498: inode #1025: comm syz.4.498: iget: illegal inode #
[  262.720838][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.746247][ T6171] 9pnet: Insufficient options for proto=fd
[  262.752479][ T6150] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.498: error while reading EA inode 1025 err=-117
[  262.886558][   T21] pvrusb2: Hardware description: Terratec Grabster AV400
[  262.977849][   T21] pvrusb2: **********
[  262.978050][ T6150] EXT4-fs (loop4): 1 orphan inode deleted
[  262.981908][   T21] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  262.988397][ T6150] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  263.056425][ T6159] udc-core: couldn't find an available UDC or it's busy
[  263.077952][ T6159] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  263.194599][   T21] pvrusb2: Important functionality might not be entirely working.
[  263.295367][   T21] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  263.567753][ T6159] udc-core: couldn't find an available UDC or it's busy
[  263.580309][ T6159] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  264.119479][   T21] pvrusb2: **********
[  264.662733][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.506'.
[  265.166888][ T2427] pvrusb2: Invalid write control endpoint
[  265.344008][ T6197] loop0: detected capacity change from 0 to 2048
[  266.945743][ T6197] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  266.963285][ T6197] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.113470][ T2427] pvrusb2: Invalid write control endpoint
[  267.121527][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  267.443819][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  267.458858][   T13] usb 2-1: USB disconnect, device number 10
[  267.546699][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  267.658976][ T2427] pvrusb2: Device being rendered inoperable
[  267.664946][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  268.420667][ T6212] loop2: detected capacity change from 0 to 512
[  268.686835][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  268.697927][ T6212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.513: missing EA_INODE flag
[  268.711139][ T2427] pvrusb2: Attached sub-driver cx25840
[  268.723838][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  268.734325][ T6212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.513: error while reading EA inode 12 err=-117
[  268.739502][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'.
[  268.756675][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  268.766094][ T6212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.513: inode #1025: comm syz.2.513: iget: illegal inode #
[  268.780705][ T6212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.513: error while reading EA inode 1025 err=-117
[  268.796199][ T6212] EXT4-fs (loop2): 1 orphan inode deleted
[  268.802155][ T6212] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  268.915720][ T4192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  268.946779][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:1 Not tainted syzkaller #0
[  268.954365][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  268.964427][ T4192] Workqueue: hci2 hci_rx_work
[  268.969125][ T4192] Call Trace:
[  268.972401][ T4192]  <TASK>
[  268.975333][ T4192]  dump_stack_lvl+0x188/0x250
[  268.980024][ T4192]  ? show_regs_print_info+0x20/0x20
[  268.985234][ T4192]  ? load_image+0x400/0x400
[  268.989754][ T4192]  sysfs_create_dir_ns+0x26a/0x290
[  268.992102][ T6231] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  268.994880][ T4192]  ? sysfs_warn_dup+0xa0/0xa0
[  269.007687][ T4192]  ? process_one_work+0x85f/0x1010
[  269.012816][ T4192]  ? do_raw_spin_unlock+0x11d/0x230
[  269.018040][ T4192]  kobject_add_internal+0x6e0/0xd90
[  269.023266][ T4192]  kobject_add+0x160/0x230
[  269.027700][ T4192]  ? kobject_init+0x1d0/0x1d0
[  269.032372][ T4192]  ? klist_children_get+0x50/0x50
[  269.037498][ T4192]  ? get_device_parent+0x121/0x3f0
[  269.042637][ T4192]  device_add+0x48c/0x1000
[  269.047051][ T4192]  hci_conn_add_sysfs+0xd1/0x1e0
[  269.051996][ T4192]  le_conn_complete_evt+0xc4b/0x15c0
[  269.057294][ T4192]  ? cs_le_create_conn+0x5e0/0x5e0
[  269.062422][ T4192]  ? __mutex_trylock_common+0x155/0x260
[  269.067970][ T4192]  hci_le_meta_evt+0x285/0x3cb0
[  269.072825][ T4192]  ? hci_event_packet+0x37e/0x1370
[  269.077937][ T4192]  ? __lock_acquire+0x7d10/0x7d10
[  269.082956][ T4192]  ? hci_remote_host_features_evt+0x290/0x290
[  269.089116][ T4192]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  269.094739][ T4192]  ? mark_lock+0x94/0x320
[  269.099056][ T4192]  ? mutex_unlock+0x10/0x10
[  269.103543][ T4192]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  269.109510][ T4192]  ? lock_chain_count+0x20/0x20
[  269.114350][ T4192]  ? __rwlock_init+0x140/0x140
[  269.119186][ T4192]  hci_event_packet+0xe4b/0x1370
[  269.124109][ T4192]  ? lockdep_hardirqs_on+0x94/0x140
[  269.129293][ T4192]  ? rcu_lock_release+0x20/0x20
[  269.134238][ T4192]  ? hci_send_to_monitor+0x9c/0x4a0
[  269.139436][ T4192]  hci_rx_work+0x255/0xa10
[  269.143954][ T4192]  process_one_work+0x85f/0x1010
[  269.148892][ T4192]  ? worker_detach_from_pool+0x240/0x240
[  269.154513][ T4192]  ? lockdep_hardirqs_off+0x70/0x100
[  269.159791][ T4192]  ? _raw_spin_lock_irq+0xb7/0xf0
[  269.164804][ T4192]  ? _raw_spin_lock_irqsave+0x100/0x100
[  269.170333][ T4192]  ? wq_worker_running+0x97/0x170
[  269.175344][ T4192]  worker_thread+0xaa6/0x1290
[  269.180017][ T4192]  kthread+0x436/0x520
[  269.184065][ T4192]  ? rcu_lock_release+0x20/0x20
[  269.188894][ T4192]  ? kthread_blkcg+0xd0/0xd0
[  269.193465][ T4192]  ret_from_fork+0x1f/0x30
[  269.197867][ T4192]  </TASK>
[  269.202220][ T4192] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  269.215550][ T4192] Bluetooth: hci2: failed to register connection device
[  269.286210][ T6231] overlayfs: overlapping lowerdir path
[  269.346755][   T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  269.386729][ T6236] 9pnet: Insufficient options for proto=fd
[  269.976852][   T13] usb 2-1: Using ep0 maxpacket: 32
[  269.989102][ T6241] loop4: detected capacity change from 0 to 512
[  270.097037][   T13] usb 2-1: config 160 has an invalid interface number: 149 but max is 0
[  270.122174][   T13] usb 2-1: config 160 has no interface number 0
[  270.149378][ T6241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.519: missing EA_INODE flag
[  270.150990][   T13] usb 2-1: config 160 interface 149 has no altsetting 0
[  270.190757][ T6241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.519: error while reading EA inode 12 err=-117
[  270.617162][ T6241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.519: inode #1025: comm syz.4.519: iget: illegal inode #
[  270.662392][ T6241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.519: error while reading EA inode 1025 err=-117
[  270.686928][   T13] usb 2-1: string descriptor 0 read error: -71
[  270.693376][   T13] usb 2-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=a4.44
[  270.731346][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.742643][ T6241] EXT4-fs (loop4): 1 orphan inode deleted
[  270.762352][ T6241] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  270.806856][   T13] usb 2-1: can't set config #160, error -71
[  270.846885][   T13] usb 2-1: USB disconnect, device number 11
[  271.454380][ T6256] loop1: detected capacity change from 0 to 2048
[  272.616725][ T4612] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  272.698589][ T6256] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  272.716007][ T6256] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.886825][ T4612] usb 3-1: Using ep0 maxpacket: 8
[  273.026953][ T4612] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  273.058594][ T4612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.141920][ T4612] pvrusb2: Hardware description: Terratec Grabster AV400
[  273.157903][ T4612] pvrusb2: **********
[  273.163825][ T4612] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  273.217608][ T4612] pvrusb2: Important functionality might not be entirely working.
[  273.225886][ T4612] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  273.256888][ T4612] pvrusb2: **********
[  273.339908][ T6254] udc-core: couldn't find an available UDC or it's busy
[  273.367415][ T6254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  273.612314][ T6254] udc-core: couldn't find an available UDC or it's busy
[  273.648306][ T6254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  274.808139][ T2427] pvrusb2: Invalid write control endpoint
[  275.128646][ T6289] loop0: detected capacity change from 0 to 512
[  275.207751][ T6254] pvrusb2: Invalid write control endpoint
[  275.340345][ T2427] pvrusb2: Invalid write control endpoint
[  275.346171][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  275.356928][ T6289] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.529: missing EA_INODE flag
[  275.370331][   T13] usb 3-1: USB disconnect, device number 9
[  275.389463][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'.
[  275.414462][ T6289] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.529: error while reading EA inode 12 err=-117
[  275.438075][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  275.463929][ T6294] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  275.475384][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  276.318157][ T6299] 9pnet: Insufficient options for proto=fd
[  276.346972][ T6289] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.529: inode #1025: comm syz.0.529: iget: illegal inode #
[  276.373870][ T6286] chnl_net:caif_netlink_parms(): no params data found
[  276.380705][ T2427] pvrusb2: Device being rendered inoperable
[  276.386962][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  276.394004][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  276.431014][ T6294] overlayfs: overlapping lowerdir path
[  276.441528][ T6304] loop2: detected capacity change from 0 to 1024
[  276.457387][ T6289] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.529: error while reading EA inode 1025 err=-117
[  276.736260][ T6289] EXT4-fs (loop0): 1 orphan inode deleted
[  276.857164][ T6289] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  276.857185][ T2427] pvrusb2: Attached sub-driver cx25840
[  276.925819][ T6304] EXT4-fs (loop2): Ignoring removed bh option
[  277.160331][ T4612] Bluetooth: hci5: command 0x0409 tx timeout
[  277.184108][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  277.196169][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:4 Not tainted syzkaller #0
[  277.203754][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  277.213959][ T4202] Workqueue: hci0 hci_rx_work
[  277.218646][ T4202] Call Trace:
[  277.221914][ T4202]  <TASK>
[  277.224837][ T4202]  dump_stack_lvl+0x188/0x250
[  277.229511][ T4202]  ? show_regs_print_info+0x20/0x20
[  277.234703][ T4202]  ? load_image+0x400/0x400
[  277.239214][ T4202]  sysfs_create_dir_ns+0x26a/0x290
[  277.244320][ T4202]  ? sysfs_warn_dup+0xa0/0xa0
[  277.248987][ T4202]  ? process_one_work+0x85f/0x1010
[  277.254090][ T4202]  ? do_raw_spin_unlock+0x11d/0x230
[  277.259292][ T4202]  kobject_add_internal+0x6e0/0xd90
[  277.264490][ T4202]  kobject_add+0x160/0x230
[  277.268901][ T4202]  ? kobject_init+0x1d0/0x1d0
[  277.273575][ T4202]  ? klist_children_get+0x50/0x50
[  277.278613][ T4202]  ? get_device_parent+0x121/0x3f0
[  277.283728][ T4202]  device_add+0x48c/0x1000
[  277.288140][ T4202]  hci_conn_add_sysfs+0xd1/0x1e0
[  277.293073][ T4202]  le_conn_complete_evt+0xc4b/0x15c0
[  277.298383][ T4202]  ? cs_le_create_conn+0x5e0/0x5e0
[  277.303490][ T4202]  ? __mutex_trylock_common+0x155/0x260
[  277.309029][ T4202]  hci_le_meta_evt+0x285/0x3cb0
[  277.313869][ T4202]  ? hci_event_packet+0x37e/0x1370
[  277.318968][ T4202]  ? __lock_acquire+0x7d10/0x7d10
[  277.323994][ T4202]  ? hci_remote_host_features_evt+0x290/0x290
[  277.330050][ T4202]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  277.335672][ T4202]  ? mark_lock+0x94/0x320
[  277.339990][ T4202]  ? mutex_unlock+0x10/0x10
[  277.344484][ T4202]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  277.350459][ T4202]  ? lock_chain_count+0x20/0x20
[  277.355299][ T4202]  ? __rwlock_init+0x140/0x140
[  277.360059][ T4202]  hci_event_packet+0xe4b/0x1370
[  277.364989][ T4202]  ? lockdep_hardirqs_on+0x94/0x140
[  277.370186][ T4202]  ? rcu_lock_release+0x20/0x20
[  277.375032][ T4202]  ? hci_send_to_monitor+0x9c/0x4a0
[  277.380224][ T4202]  hci_rx_work+0x255/0xa10
[  277.384644][ T4202]  process_one_work+0x85f/0x1010
[  277.389580][ T4202]  ? worker_detach_from_pool+0x240/0x240
[  277.395197][ T4202]  ? lockdep_hardirqs_off+0x70/0x100
[  277.400474][ T4202]  ? _raw_spin_lock_irq+0xb7/0xf0
[  277.405489][ T4202]  ? _raw_spin_lock_irqsave+0x100/0x100
[  277.411022][ T4202]  ? wq_worker_running+0x97/0x170
[  277.416042][ T4202]  worker_thread+0xaa6/0x1290
[  277.420718][ T4202]  ? lockdep_hardirqs_on+0x94/0x140
[  277.425911][ T4202]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  277.431811][ T4202]  kthread+0x436/0x520
[  277.435872][ T4202]  ? rcu_lock_release+0x20/0x20
[  277.440710][ T4202]  ? kthread_blkcg+0xd0/0xd0
[  277.445288][ T4202]  ret_from_fork+0x1f/0x30
[  277.450329][ T4202]  </TASK>
[  277.463045][ T4202] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  277.476349][ T4202] Bluetooth: hci0: failed to register connection device
[  277.483614][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  277.494763][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  277.669914][ T6304] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  277.727944][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.749057][ T6319] loop0: detected capacity change from 0 to 512
[  277.798837][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.807531][ T6286] device bridge_slave_0 entered promiscuous mode
[  277.818413][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.825635][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.834330][ T6286] device bridge_slave_1 entered promiscuous mode
[  277.860445][ T6286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.869877][ T6319] EXT4-fs (loop0): Ignoring removed bh option
[  277.882669][ T6286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.909136][ T6319] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  277.923664][ T6286] team0: Port device team_slave_0 added
[  277.939721][ T6286] team0: Port device team_slave_1 added
[  278.029061][ T6319] EXT4-fs (loop0): 1 truncate cleaned up
[  278.067643][ T6319] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  278.144507][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.289025][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.618124][ T6286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.631561][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.638604][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.703913][   T23] Bluetooth: hci5: command 0x041b tx timeout
[  279.731261][ T6286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.746599][ T6338] loop4: detected capacity change from 0 to 512
[  279.881851][ T6286] device hsr_slave_0 entered promiscuous mode
[  279.895607][ T6338] EXT4-fs (loop4): Test dummy encryption mode enabled
[  279.924238][ T6286] device hsr_slave_1 entered promiscuous mode
[  279.936906][ T6338] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.538: inode has both inline data and extents flags
[  280.003648][ T6338] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.538: couldn't read orphan inode 15 (err -117)
[  280.026091][ T6286] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.073229][ T6286] Cannot create hsr debugfs directory
[  280.079334][ T6338] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  280.889367][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'.
[  281.275267][ T6286] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  281.309450][ T6286] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  281.367565][ T6286] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  281.419984][ T6286] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  281.506503][ T6362] loop4: detected capacity change from 0 to 512
[  281.658296][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.544'.
[  281.998653][ T4235] Bluetooth: hci5: command 0x040f tx timeout
[  282.034255][ T6286] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.096805][ T6362] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.543: missing EA_INODE flag
[  282.117308][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  282.196700][ T6362] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.543: error while reading EA inode 12 err=-117
[  282.244500][ T6362] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.543: inode #1025: comm syz.4.543: iget: illegal inode #
[  282.247875][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  282.353223][ T6362] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.543: error while reading EA inode 1025 err=-117
[  282.367710][ T6362] EXT4-fs (loop4): 1 orphan inode deleted
[  282.373474][ T6362] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  282.598195][   T26] kauditd_printk_skb: 62 callbacks suppressed
[  282.716472][   T26] audit: type=1326 audit(1780725794.100:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  282.740774][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  282.750279][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:4 Not tainted syzkaller #0
[  282.757914][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  282.767975][ T4202] Workqueue: hci3 hci_rx_work
[  282.772666][ T4202] Call Trace:
[  282.775943][ T4202]  <TASK>
[  282.778877][ T4202]  dump_stack_lvl+0x188/0x250
[  282.783560][ T4202]  ? show_regs_print_info+0x20/0x20
[  282.788761][ T4202]  ? load_image+0x400/0x400
[  282.793274][ T4202]  sysfs_create_dir_ns+0x26a/0x290
[  282.798390][ T4202]  ? sysfs_warn_dup+0xa0/0xa0
[  282.803069][ T4202]  ? process_one_work+0x85f/0x1010
[  282.808186][ T4202]  ? do_raw_spin_unlock+0x11d/0x230
[  282.813393][ T4202]  kobject_add_internal+0x6e0/0xd90
[  282.818603][ T4202]  kobject_add+0x160/0x230
[  282.823030][ T4202]  ? kobject_init+0x1d0/0x1d0
[  282.827715][ T4202]  ? klist_children_get+0x50/0x50
[  282.832743][ T4202]  ? get_device_parent+0x121/0x3f0
[  282.837862][ T4202]  device_add+0x48c/0x1000
[  282.842295][ T4202]  hci_conn_add_sysfs+0xd1/0x1e0
[  282.847244][ T4202]  le_conn_complete_evt+0xc4b/0x15c0
[  282.852546][ T4202]  ? cs_le_create_conn+0x5e0/0x5e0
[  282.857667][ T4202]  ? __mutex_trylock_common+0x155/0x260
[  282.863224][ T4202]  hci_le_meta_evt+0x285/0x3cb0
[  282.868079][ T4202]  ? hci_event_packet+0x37e/0x1370
[  282.873196][ T4202]  ? __lock_acquire+0x7d10/0x7d10
[  282.878239][ T4202]  ? hci_remote_host_features_evt+0x290/0x290
[  282.884309][ T4202]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  282.889949][ T4202]  ? mark_lock+0x94/0x320
[  282.894277][ T4202]  ? mutex_unlock+0x10/0x10
[  282.898784][ T4202]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  282.904770][ T4202]  ? lock_chain_count+0x20/0x20
[  282.909623][ T4202]  ? __rwlock_init+0x140/0x140
[  282.914391][ T4202]  hci_event_packet+0xe4b/0x1370
[  282.919331][ T4202]  ? lockdep_hardirqs_on+0x94/0x140
[  282.924542][ T4202]  ? rcu_lock_release+0x20/0x20
[  282.929400][ T4202]  ? hci_send_to_monitor+0x9c/0x4a0
[  282.934604][ T4202]  hci_rx_work+0x255/0xa10
[  282.939041][ T4202]  process_one_work+0x85f/0x1010
[  282.944005][ T4202]  ? worker_detach_from_pool+0x240/0x240
[  282.949645][ T4202]  ? lockdep_hardirqs_off+0x70/0x100
[  282.955370][ T4202]  ? _raw_spin_lock_irq+0xb7/0xf0
[  282.960397][ T4202]  ? _raw_spin_lock_irqsave+0x100/0x100
[  282.965962][ T4202]  ? wq_worker_running+0x97/0x170
[  282.970997][ T4202]  worker_thread+0xaa6/0x1290
[  282.975691][ T4202]  ? lockdep_hardirqs_on+0x94/0x140
[  282.980898][ T4202]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  282.986903][ T4202]  kthread+0x436/0x520
[  282.990985][ T4202]  ? rcu_lock_release+0x20/0x20
[  282.995842][ T4202]  ? kthread_blkcg+0xd0/0xd0
[  283.000447][ T4202]  ret_from_fork+0x1f/0x30
[  283.004885][ T4202]  </TASK>
[  283.015180][ T4202] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  283.028907][ T4202] Bluetooth: hci3: failed to register connection device
[  283.037453][ T4192] Bluetooth: hci3: link tx timeout
[  283.043451][ T4192] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  283.063514][ T6286] 8021q: adding VLAN 0 to HW filter on device team0
[  283.089554][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  283.099405][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  283.569916][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.577062][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.836944][   T26] audit: type=1326 audit(1780725794.100:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  283.860982][    C1] vkms_vblank_simulate: vblank timer overrun
[  284.067709][ T4235] Bluetooth: hci5: command 0x0419 tx timeout
[  284.112487][   T26] audit: type=1326 audit(1780725794.100:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  284.137412][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.157749][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  284.168763][   T26] audit: type=1326 audit(1780725794.100:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  284.192793][    C1] vkms_vblank_simulate: vblank timer overrun
[  284.628113][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.635244][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.660398][   T26] audit: type=1326 audit(1780725794.100:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  284.790046][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  284.836029][ T6391] loop4: detected capacity change from 0 to 1024
[  284.850412][   T26] audit: type=1326 audit(1780725794.100:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  284.866752][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  284.874587][    C1] vkms_vblank_simulate: vblank timer overrun
[  284.997335][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  285.016982][ T6391] EXT4-fs (loop4): Ignoring removed bh option
[  285.049358][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  285.096611][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.116751][   T26] audit: type=1326 audit(1780725794.100:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  285.175436][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  285.247501][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  285.254478][   T26] audit: type=1326 audit(1780725794.100:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  285.279522][    C1] vkms_vblank_simulate: vblank timer overrun
[  285.290635][ T6391] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  285.313167][    C1] vkms_vblank_simulate: vblank timer overrun
[  285.330599][   T26] audit: type=1326 audit(1780725794.100:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  285.773452][   T26] audit: type=1326 audit(1780725794.100:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  285.797504][    C1] vkms_vblank_simulate: vblank timer overrun
[  285.836948][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  286.179029][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  286.191636][ T6405] loop0: detected capacity change from 0 to 512
[  286.203207][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.212474][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  286.221958][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.247239][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.301250][ T6405] EXT4-fs (loop0): Test dummy encryption mode enabled
[  286.354849][ T6407] loop1: detected capacity change from 0 to 512
[  286.381172][ T6405] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.553: inode has both inline data and extents flags
[  286.407024][ T6405] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.553: couldn't read orphan inode 15 (err -117)
[  286.421308][ T6405] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  286.462585][ T6407] EXT4-fs (loop1): Ignoring removed bh option
[  286.510676][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.542798][ T6407] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  286.563885][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'.
[  286.601105][ T6407] EXT4-fs (loop1): 1 truncate cleaned up
[  286.614673][ T6407] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  286.635538][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.730219][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.765679][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  286.774054][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  286.788558][ T6286] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.244253][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  287.261908][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  287.322816][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  287.335642][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  287.379621][ T6286] device veth0_vlan entered promiscuous mode
[  287.514669][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.152697][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  288.152973][   T26] audit: type=1326 audit(1780725799.660:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  288.396949][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  288.412412][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  288.486815][   T26] audit: type=1326 audit(1780725799.660:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  288.609339][   T26] audit: type=1326 audit(1780725799.660:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  288.651658][ T6286] device veth1_vlan entered promiscuous mode
[  288.726061][ T6436] loop2: detected capacity change from 0 to 512
[  288.825359][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  288.863313][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  288.871689][   T26] audit: type=1326 audit(1780725799.660:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  288.992729][ T6286] device veth0_macvtap entered promiscuous mode
[  289.020945][ T6436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.557: missing EA_INODE flag
[  289.035041][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.556'.
[  289.127357][ T6436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.557: error while reading EA inode 12 err=-117
[  289.229743][   T26] audit: type=1326 audit(1780725799.660:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  289.251029][ T6286] device veth1_macvtap entered promiscuous mode
[  289.256904][ T6436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.557: inode #1025: comm syz.2.557: iget: illegal inode #
[  289.329469][ T6436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.557: error while reading EA inode 1025 err=-117
[  289.336499][   T26] audit: type=1326 audit(1780725799.660:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  289.477224][   T26] audit: type=1326 audit(1780725799.660:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  289.487530][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  289.518399][   T26] audit: type=1326 audit(1780725799.660:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  289.596605][ T6436] EXT4-fs (loop2): 1 orphan inode deleted
[  289.602456][ T6436] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  289.785064][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  289.910100][   T26] audit: type=1326 audit(1780725799.660:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  290.128325][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.147456][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.189963][   T26] audit: type=1326 audit(1780725799.660:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.555" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  290.324197][ T4192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  290.333836][ T4192] CPU: 1 PID: 4192 Comm: kworker/u5:1 Not tainted syzkaller #0
[  290.341392][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  290.351449][ T4192] Workqueue: hci2 hci_rx_work
[  290.356139][ T4192] Call Trace:
[  290.359421][ T4192]  <TASK>
[  290.362353][ T4192]  dump_stack_lvl+0x188/0x250
[  290.367033][ T4192]  ? show_regs_print_info+0x20/0x20
[  290.372233][ T4192]  ? load_image+0x400/0x400
[  290.376748][ T4192]  sysfs_create_dir_ns+0x26a/0x290
[  290.381874][ T4192]  ? sysfs_warn_dup+0xa0/0xa0
[  290.386549][ T4192]  ? process_one_work+0x85f/0x1010
[  290.391670][ T4192]  ? do_raw_spin_unlock+0x11d/0x230
[  290.396907][ T4192]  kobject_add_internal+0x6e0/0xd90
[  290.402135][ T4192]  kobject_add+0x160/0x230
[  290.406574][ T4192]  ? kobject_init+0x1d0/0x1d0
[  290.411267][ T4192]  ? klist_children_get+0x50/0x50
[  290.415203][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.416905][ T4192]  ? get_device_parent+0x121/0x3f0
[  290.416929][ T4192]  device_add+0x48c/0x1000
[  290.416957][ T4192]  hci_conn_add_sysfs+0xd1/0x1e0
[  290.441756][ T4192]  le_conn_complete_evt+0xc4b/0x15c0
[  290.447072][ T4192]  ? cs_le_create_conn+0x5e0/0x5e0
[  290.452215][ T4192]  ? __switch_to_asm+0x34/0x60
[  290.457029][ T4192]  ? __mutex_trylock_common+0x155/0x260
[  290.458762][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.462594][ T4192]  hci_le_meta_evt+0x285/0x3cb0
[  290.477213][ T4192]  ? hci_event_packet+0x37e/0x1370
[  290.482313][ T4192]  ? __lock_acquire+0x7d10/0x7d10
[  290.487334][ T4192]  ? release_firmware_map_entry+0x190/0x190
[  290.493241][ T4192]  ? hci_remote_host_features_evt+0x290/0x290
[  290.499299][ T4192]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  290.504925][ T4192]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  290.511622][ T4192]  ? mutex_unlock+0x10/0x10
[  290.516130][ T4192]  ? lock_chain_count+0x20/0x20
[  290.520977][ T4192]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  290.526689][ T4192]  hci_event_packet+0xe4b/0x1370
[  290.531619][ T4192]  ? rcu_lock_release+0x20/0x20
[  290.536453][ T4192]  ? kasan_check_range+0x84/0x290
[  290.541480][ T4192]  ? hci_send_to_monitor+0x9c/0x4a0
[  290.546695][ T4192]  hci_rx_work+0x255/0xa10
[  290.551114][ T4192]  process_one_work+0x85f/0x1010
[  290.556042][ T4192]  ? worker_detach_from_pool+0x240/0x240
[  290.561659][ T4192]  ? lockdep_hardirqs_off+0x70/0x100
[  290.566932][ T4192]  ? _raw_spin_lock_irq+0xb7/0xf0
[  290.571941][ T4192]  ? _raw_spin_lock_irqsave+0x100/0x100
[  290.577489][ T4192]  ? wq_worker_running+0x97/0x170
[  290.582505][ T4192]  worker_thread+0xaa6/0x1290
[  290.587183][ T4192]  kthread+0x436/0x520
[  290.591237][ T4192]  ? rcu_lock_release+0x20/0x20
[  290.596067][ T4192]  ? kthread_blkcg+0xd0/0xd0
[  290.600734][ T4192]  ret_from_fork+0x1f/0x30
[  290.605143][ T4192]  </TASK>
[  290.617182][ T4192] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  290.630883][ T4192] Bluetooth: hci2: failed to register connection device
[  290.638368][ T4192] Bluetooth: hci2: link tx timeout
[  290.645113][ T4192] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  290.693683][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.713743][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.739878][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.822664][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.913719][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.292968][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.393518][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.568653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  291.578502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  291.607348][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.634168][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.662346][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.716368][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.818702][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.853564][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.016811][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.028113][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.038716][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.053158][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.144248][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.241607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  292.279190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  292.563803][ T6286] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.590600][ T6286] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.599652][ T6286] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.601490][ T6488] loop0: detected capacity change from 0 to 512
[  292.608532][ T6286] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.663793][ T6488] EXT4-fs (loop0): Ignoring removed bh option
[  292.724841][ T6488] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  292.938326][ T6488] EXT4-fs (loop0): 1 truncate cleaned up
[  292.944149][ T6488] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  293.711384][ T6502] loop1: detected capacity change from 0 to 512
[  293.805760][   T26] kauditd_printk_skb: 39 callbacks suppressed
[  293.805776][   T26] audit: type=1326 audit(1780725804.560:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  293.871976][ T6502] EXT4-fs (loop1): Test dummy encryption mode enabled
[  294.431309][   T26] audit: type=1326 audit(1780725804.570:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa86f461bc2 code=0x7ffc0000
[  294.446054][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.455972][   T26] audit: type=1326 audit(1780725804.570:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa86f461bc2 code=0x7ffc0000
[  294.482735][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.511805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  294.529681][ T6502] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.567: inode has both inline data and extents flags
[  294.567569][   T26] audit: type=1326 audit(1780725804.880:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  294.587733][ T6502] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.567: couldn't read orphan inode 15 (err -117)
[  294.591583][    C1] vkms_vblank_simulate: vblank timer overrun
[  294.592403][ T3049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.604124][   T26] audit: type=1326 audit(1780725804.880:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa86f461bc2 code=0x7ffc0000
[  294.634343][ T6502] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  294.647951][   T26] audit: type=1326 audit(1780725804.890:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa86f461c57 code=0x7ffc0000
[  294.682678][   T26] audit: type=1326 audit(1780725804.890:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa86f41eb51 code=0x7ffc0000
[  294.707726][   T26] audit: type=1326 audit(1780725804.890:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa86f462c49 code=0x7ffc0000
[  294.768982][ T3049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.795972][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  294.881794][   T26] audit: type=1326 audit(1780725804.900:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa86f41ebbb code=0x7ffc0000
[  295.053400][   T26] audit: type=1326 audit(1780725804.900:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  295.077517][    C1] vkms_vblank_simulate: vblank timer overrun
[  295.096817][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'.
[  295.399591][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.526'.
[  296.053644][ T6531] Can't find ip_set type hash:ip,por

[  296.437343][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.572'.
[  297.101478][  T154] device hsr_slave_0 left promiscuous mode
[  297.139022][  T154] device hsr_slave_1 left promiscuous mode
[  297.161936][ T6555] loop2: detected capacity change from 0 to 512
[  297.177344][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.189114][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.357507][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.444809][ T6555] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.570: missing EA_INODE flag
[  297.480111][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.621615][ T6555] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.570: error while reading EA inode 12 err=-117
[  297.643241][  T154] device bridge_slave_1 left promiscuous mode
[  297.684989][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.876135][ T6555] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.570: inode #1025: comm syz.2.570: iget: illegal inode #
[  298.068280][  T154] device bridge_slave_0 left promiscuous mode
[  298.080335][ T6555] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.570: error while reading EA inode 1025 err=-117
[  298.094977][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.129287][ T6555] EXT4-fs (loop2): 1 orphan inode deleted
[  298.155653][ T6555] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  298.493285][ T4192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  298.503108][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:1 Not tainted syzkaller #0
[  298.510672][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  298.520751][ T4192] Workqueue: hci2 hci_rx_work
[  298.525453][ T4192] Call Trace:
[  298.528743][ T4192]  <TASK>
[  298.531677][ T4192]  dump_stack_lvl+0x188/0x250
[  298.536369][ T4192]  ? show_regs_print_info+0x20/0x20
[  298.541580][ T4192]  ? load_image+0x400/0x400
[  298.546097][ T4192]  sysfs_create_dir_ns+0x26a/0x290
[  298.551200][ T4192]  ? sysfs_warn_dup+0xa0/0xa0
[  298.555872][ T4192]  ? process_one_work+0x85f/0x1010
[  298.560972][ T4192]  ? do_raw_spin_unlock+0x11d/0x230
[  298.566159][ T4192]  kobject_add_internal+0x6e0/0xd90
[  298.571348][ T4192]  kobject_add+0x160/0x230
[  298.575754][ T4192]  ? kobject_init+0x1d0/0x1d0
[  298.580426][ T4192]  ? klist_children_get+0x50/0x50
[  298.585465][ T4192]  ? get_device_parent+0x121/0x3f0
[  298.590565][ T4192]  device_add+0x48c/0x1000
[  298.594983][ T4192]  hci_conn_add_sysfs+0xd1/0x1e0
[  298.599912][ T4192]  le_conn_complete_evt+0xc4b/0x15c0
[  298.605191][ T4192]  ? cs_le_create_conn+0x5e0/0x5e0
[  298.610303][ T4192]  ? __mutex_trylock_common+0x155/0x260
[  298.615843][ T4192]  hci_le_meta_evt+0x285/0x3cb0
[  298.620684][ T4192]  ? hci_event_packet+0x37e/0x1370
[  298.625779][ T4192]  ? __lock_acquire+0x7d10/0x7d10
[  298.630791][ T4192]  ? hci_remote_host_features_evt+0x290/0x290
[  298.636842][ T4192]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  298.642463][ T4192]  ? mark_lock+0x94/0x320
[  298.646782][ T4192]  ? mutex_unlock+0x10/0x10
[  298.651289][ T4192]  ? mark_lock+0x94/0x320
[  298.655623][ T4192]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  298.661614][ T4192]  hci_event_packet+0xe4b/0x1370
[  298.666547][ T4192]  ? rcu_lock_release+0x20/0x20
[  298.671395][ T4192]  ? hci_send_to_monitor+0x9c/0x4a0
[  298.676581][ T4192]  hci_rx_work+0x255/0xa10
[  298.680993][ T4192]  process_one_work+0x85f/0x1010
[  298.685975][ T4192]  ? worker_detach_from_pool+0x240/0x240
[  298.691598][ T4192]  ? lockdep_hardirqs_off+0x70/0x100
[  298.696877][ T4192]  ? _raw_spin_lock_irq+0xb7/0xf0
[  298.701893][ T4192]  ? _raw_spin_lock_irqsave+0x100/0x100
[  298.707460][ T4192]  ? wq_worker_running+0x97/0x170
[  298.712477][ T4192]  worker_thread+0xaa6/0x1290
[  298.717241][ T4192]  kthread+0x436/0x520
[  298.721294][ T4192]  ? rcu_lock_release+0x20/0x20
[  298.726124][ T4192]  ? kthread_blkcg+0xd0/0xd0
[  298.730699][ T4192]  ret_from_fork+0x1f/0x30
[  298.735108][ T4192]  </TASK>
[  298.758991][  T154] device veth1_macvtap left promiscuous mode
[  298.765543][  T154] device veth0_macvtap left promiscuous mode
[  298.772553][ T4192] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  298.786028][ T4192] Bluetooth: hci2: failed to register connection device
[  298.793277][ T4192] Bluetooth: hci2: link tx timeout
[  298.798554][ T4192] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  298.848552][  T154] device veth1_vlan left promiscuous mode
[  298.854634][  T154] device veth0_vlan left promiscuous mode
[  299.279767][   T26] audit: type=1326 audit(1780725810.770:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  299.456709][   T26] audit: type=1326 audit(1780725810.770:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  299.480798][    C1] vkms_vblank_simulate: vblank timer overrun
[  299.516712][   T26] audit: type=1326 audit(1780725810.770:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  299.566719][   T26] audit: type=1326 audit(1780725810.770:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  299.621705][   T26] audit: type=1326 audit(1780725810.770:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  299.645739][    C1] vkms_vblank_simulate: vblank timer overrun
[  299.677106][   T26] audit: type=1326 audit(1780725810.770:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  299.731935][   T26] audit: type=1326 audit(1780725810.770:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  300.976787][   T26] audit: type=1326 audit(1780725810.780:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  300.979210][ T6580] loop2: detected capacity change from 0 to 512
[  301.008272][   T26] audit: type=1326 audit(1780725810.780:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  301.035492][   T26] audit: type=1326 audit(1780725810.780:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fa86f461e59 code=0x7ffc0000
[  301.070784][ T6580] EXT4-fs (loop2): Ignoring removed bh option
[  301.083293][ T6580] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  301.103918][  T154] team0 (unregistering): Port device team_slave_1 removed
[  301.121197][  T154] team0 (unregistering): Port device team_slave_0 removed
[  301.132493][ T6580] EXT4-fs (loop2): 1 truncate cleaned up
[  301.140604][ T6580] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  301.190821][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.248620][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.859025][  T154] bond0 (unregistering): Released all slaves
[  302.509357][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'.
[  302.600381][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.584'.
[  303.472783][ T6601] Can't find ip_set type hash:ip,por

[  303.605981][ T6617] loop5: detected capacity change from 0 to 2048
[  303.826692][ T6617] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  303.844302][ T6617] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.371495][ T6643] loop5: detected capacity change from 0 to 512
[  306.417155][ T6647] loop1: detected capacity change from 0 to 512
[  306.420487][ T6648] fuse: Unknown parameter '0x0000000000000006'
[  306.464440][ T6643] EXT4-fs (loop5): Ignoring removed bh option
[  306.496451][ T6647] EXT4-fs (loop1): Test dummy encryption mode enabled
[  306.517499][ T6651] loop2: detected capacity change from 0 to 1024
[  306.535674][ T6643] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  306.544000][ T6647] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.593: inode has both inline data and extents flags
[  306.544202][ T6647] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.593: couldn't read orphan inode 15 (err -117)
[  306.578479][ T6647] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  307.417638][ T6643] EXT4-fs (loop5): 1 truncate cleaned up
[  307.543075][ T6643] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  307.563051][ T6651] EXT4-fs (loop2): Ignoring removed bh option
[  307.568992][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'.
[  307.580537][ T6666] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  307.588956][ T6666] overlayfs: overlapping lowerdir path
[  307.596543][ T6666] 9pnet: Insufficient options for proto=fd
[  307.767222][ T6651] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  307.789839][    C0] vkms_vblank_simulate: vblank timer overrun
[  308.186206][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'.
[  308.580709][ T6689] loop5: detected capacity change from 0 to 2048
[  308.663031][ T6689] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  308.686797][ T6689] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.321312][   T26] kauditd_printk_skb: 49 callbacks suppressed
[  309.321481][   T26] audit: type=1326 audit(1780725820.360:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  309.770991][   T26] audit: type=1326 audit(1780725820.360:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  309.806472][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.5.602'.
[  310.188557][   T26] audit: type=1326 audit(1780725820.380:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  310.556769][   T26] audit: type=1326 audit(1780725820.380:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  311.536737][   T26] audit: type=1326 audit(1780725820.400:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  312.868722][   T26] audit: type=1326 audit(1780725820.410:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  312.878028][ T6723] fuse: Unknown parameter '0x0000000000000006'
[  312.896675][   T26] audit: type=1326 audit(1780725820.410:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  312.923654][   T26] audit: type=1326 audit(1780725820.430:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  312.957831][   T26] audit: type=1326 audit(1780725820.440:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  312.981827][    C0] vkms_vblank_simulate: vblank timer overrun
[  313.932877][   T26] audit: type=1326 audit(1780725820.450:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  314.997350][ T6732] loop0: detected capacity change from 0 to 512
[  315.115591][ T6743] loop1: detected capacity change from 0 to 2048
[  315.471680][ T6743] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  315.489080][ T6743] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.590552][ T6732] EXT4-fs (loop0): Ignoring removed bh option
[  315.617999][ T6732] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  315.652142][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.611'.
[  315.702539][ T6732] EXT4-fs (loop0): 1 truncate cleaned up
[  315.710482][ T6732] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  315.747247][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  315.837260][ T6734] Can't find ip_set type hash:ip,por

[  316.014490][ T4232] usb 6-1: Using ep0 maxpacket: 8
[  316.022047][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'.
[  316.166722][ T4232] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  316.233550][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.309078][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.315448][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.598999][ T4232] pvrusb2: Hardware description: Terratec Grabster AV400
[  317.809882][ T6741] udc-core: couldn't find an available UDC or it's busy
[  317.857034][ T4232] pvrusb2: **********
[  317.861059][ T4232] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  317.872313][ T6741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  317.885074][ T4232] pvrusb2: Important functionality might not be entirely working.
[  318.610373][ T4232] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  318.622241][ T4232] pvrusb2: **********
[  318.758229][ T6741] udc-core: couldn't find an available UDC or it's busy
[  318.765324][ T6741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  319.407613][ T2427] pvrusb2: Invalid write control endpoint
[  320.526856][   T26] kauditd_printk_skb: 58 callbacks suppressed
[  320.526873][   T26] audit: type=1326 audit(1780725831.280:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  320.558003][   T26] audit: type=1326 audit(1780725831.280:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  320.607767][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'.
[  320.677672][   T26] audit: type=1326 audit(1780725831.300:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  320.701953][    C0] vkms_vblank_simulate: vblank timer overrun
[  322.112932][   T26] audit: type=1326 audit(1780725831.300:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  322.189494][ T6787] Can't find ip_set type hash:ip,por

[  322.192105][ T2303] usb 6-1: USB disconnect, device number 2
[  322.237082][   T26] audit: type=1326 audit(1780725831.300:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  322.400135][   T26] audit: type=1326 audit(1780725831.310:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  322.465701][ T2427] pvrusb2: Invalid write control endpoint
[  322.474278][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  322.599625][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  323.348895][   T26] audit: type=1326 audit(1780725831.310:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  323.360904][ T6808] fuse: Unknown parameter '0x0000000000000006'
[  323.373735][   T26] audit: type=1326 audit(1780725831.330:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  323.403833][   T26] audit: type=1326 audit(1780725831.330:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  323.405509][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  323.429770][   T26] audit: type=1326 audit(1780725831.330:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  323.511049][ T2427] pvrusb2: Device being rendered inoperable
[  323.519708][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  323.530691][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  323.617367][ T6814] loop4: detected capacity change from 0 to 2048
[  323.655022][ T2427] pvrusb2: Attached sub-driver cx25840
[  323.813400][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.625'.
[  323.958838][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  323.962759][ T6822] loop2: detected capacity change from 0 to 512
[  324.083079][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  324.339531][ T6814] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  324.357011][ T6814] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.374853][ T6813] Can't find ip_set type hash:ip,por

[  324.433198][ T6822] EXT4-fs (loop2): Ignoring removed bh option
[  324.465225][ T6822] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  324.580318][ T6822] EXT4-fs (loop2): 1 truncate cleaned up
[  324.586842][ T6822] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  324.698266][ T6836] loop1: detected capacity change from 0 to 512
[  324.762162][ T6836] EXT4-fs (loop1): Test dummy encryption mode enabled
[  325.696763][ T4267] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  325.735253][ T6836] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.629: inode has both inline data and extents flags
[  325.768149][ T6836] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.629: couldn't read orphan inode 15 (err -117)
[  325.835319][ T6836] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  325.933367][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'.
[  325.956798][ T4267] usb 1-1: Using ep0 maxpacket: 8
[  326.086976][ T4267] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  327.937232][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.038990][ T4267] pvrusb2: Hardware description: Terratec Grabster AV400
[  328.046087][ T4267] pvrusb2: **********
[  328.075093][ T4267] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  328.085736][ T4267] pvrusb2: Important functionality might not be entirely working.
[  328.716110][   T26] kauditd_printk_skb: 57 callbacks suppressed
[  328.716380][   T26] audit: type=1326 audit(1780725840.090:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  329.264095][   T26] audit: type=1326 audit(1780725840.100:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  329.279599][ T4267] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  329.341114][ T4267] pvrusb2: **********
[  330.026195][ T2427] pvrusb2: Invalid write control endpoint
[  330.535223][   T26] audit: type=1326 audit(1780725840.110:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  330.559346][   T26] audit: type=1326 audit(1780725840.120:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  330.583462][   T26] audit: type=1326 audit(1780725840.120:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  330.607663][   T26] audit: type=1326 audit(1780725840.120:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  330.631729][   T26] audit: type=1326 audit(1780725840.120:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  330.656846][   T26] audit: type=1326 audit(1780725840.130:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  330.680916][   T26] audit: type=1326 audit(1780725840.130:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  330.707440][ T6895] fuse: Unknown parameter 'fd0x0000000000000006'
[  330.713843][   T26] audit: type=1326 audit(1780725840.140:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0ac566ee59 code=0x7ffc0000
[  330.763344][ T4267] usb 1-1: USB disconnect, device number 5
[  331.202616][ T2427] pvrusb2: Invalid write control endpoint
[  331.218563][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  331.681685][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.640'.
[  331.876752][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  331.884403][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  331.916713][ T2427] pvrusb2: Device being rendered inoperable
[  332.203741][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  332.249909][ T6906] loop0: detected capacity change from 0 to 512
[  332.256587][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  332.299825][ T2427] pvrusb2: Attached sub-driver cx25840
[  332.305323][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  332.359941][ T6906] EXT4-fs (loop0): Ignoring removed bh option
[  332.376671][ T6906] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  332.385029][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  333.651836][ T6906] EXT4-fs (loop0): 1 truncate cleaned up
[  333.756707][ T6906] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  334.001845][ T6940] loop4: detected capacity change from 0 to 512
[  334.897268][ T6940] EXT4-fs (loop4): Test dummy encryption mode enabled
[  335.193066][ T6940] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.645: inode has both inline data and extents flags
[  335.495813][ T6940] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.645: couldn't read orphan inode 15 (err -117)
[  335.640075][ T6940] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  336.364394][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'.
[  336.380483][ T6963] fuse: Unknown parameter 'fd0x0000000000000006'
[  336.983157][   T26] kauditd_printk_skb: 62 callbacks suppressed
[  336.983265][   T26] audit: type=1326 audit(1780725848.130:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  337.107298][   T26] audit: type=1326 audit(1780725848.130:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  337.111701][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.653'.
[  337.133499][   T26] audit: type=1326 audit(1780725848.140:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  337.229167][   T26] audit: type=1326 audit(1780725848.140:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  337.942972][ T6965] No such timeout policy "syz0"
[  337.947982][   T26] audit: type=1326 audit(1780725848.140:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  338.328673][   T26] audit: type=1326 audit(1780725848.140:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  338.576958][   T26] audit: type=1326 audit(1780725848.140:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  338.601000][    C0] vkms_vblank_simulate: vblank timer overrun
[  338.816869][   T26] audit: type=1326 audit(1780725848.140:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  338.997042][   T26] audit: type=1326 audit(1780725848.140:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  339.648761][ T6989] loop1: detected capacity change from 0 to 2048
[  340.998221][ T6991] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  341.024368][   T26] audit: type=1326 audit(1780725848.140:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  341.040214][ T6991] overlayfs: overlapping lowerdir path
[  341.166439][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.658'.
[  341.265108][ T6991] 9pnet: Insufficient options for proto=fd
[  341.437854][ T6989] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  341.455303][ T6989] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.948567][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.659'.
[  342.049347][ T7000] Can't find ip_set type hash:ip,por

[  342.180643][ T7008] loop4: detected capacity change from 0 to 512
[  342.859812][ T7008] EXT4-fs (loop4): Ignoring removed bh option
[  343.079476][ T7008] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  343.126844][ T7008] EXT4-fs (loop4): 1 truncate cleaned up
[  343.132544][ T7008] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  343.257037][   T26] kauditd_printk_skb: 25 callbacks suppressed
[  343.257050][   T26] audit: type=1326 audit(1780725854.720:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.034229][   T26] audit: type=1326 audit(1780725854.720:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.076700][   T26] audit: type=1326 audit(1780725854.730:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.113431][   T26] audit: type=1326 audit(1780725854.730:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.147400][   T26] audit: type=1326 audit(1780725854.730:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.171524][   T26] audit: type=1326 audit(1780725854.730:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.206031][   T26] audit: type=1326 audit(1780725854.730:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.232129][   T26] audit: type=1326 audit(1780725854.730:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.261269][   T26] audit: type=1326 audit(1780725854.730:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.597066][   T26] audit: type=1326 audit(1780725854.730:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f35ceaade59 code=0x7ffc0000
[  344.754704][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.5.666'.
[  345.817263][ T7044] No such timeout policy "syz0"
[  346.395946][ T7041] Can't find ip_set type hash:ip,por

[  346.929982][ T7058] loop4: detected capacity change from 0 to 512
[  346.948407][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.672'.
[  346.966355][ T7065] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  346.975363][ T7065] overlayfs: overlapping lowerdir path
[  346.988425][ T7065] 9pnet: Insufficient options for proto=fd
[  347.031852][ T7070] loop2: detected capacity change from 0 to 2048
[  348.837070][ T7072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'.
[  349.002245][ T7070] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  349.019808][ T7070] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.031807][ T7058] EXT4-fs (loop4): Test dummy encryption mode enabled
[  349.129263][ T7058] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.670: inode has both inline data and extents flags
[  349.877254][ T7058] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.670: couldn't read orphan inode 15 (err -117)
[  350.070038][ T7088] fuse: Unknown parameter 'fd0x0000000000000006'
[  350.088970][ T7058] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  350.977771][ T7096] loop5: detected capacity change from 0 to 512
[  352.150356][ T7096] EXT4-fs (loop5): Ignoring removed bh option
[  352.273410][ T7096] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  352.354428][ T7096] EXT4-fs (loop5): 1 truncate cleaned up
[  352.436997][ T7096] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  354.449054][   T26] kauditd_printk_skb: 62 callbacks suppressed
[  354.450632][   T26] audit: type=1326 audit(1780725865.610:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  354.656939][   T26] audit: type=1326 audit(1780725865.610:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  354.684375][   T26] audit: type=1326 audit(1780725865.610:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  354.713218][ T7121] No such timeout policy "syz0"
[  354.967398][   T26] audit: type=1326 audit(1780725865.610:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  355.105924][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.683'.
[  355.577382][   T26] audit: type=1326 audit(1780725865.710:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  355.640312][   T26] audit: type=1326 audit(1780725865.710:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  355.688162][   T26] audit: type=1326 audit(1780725865.710:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  356.445983][ T7145] loop5: detected capacity change from 0 to 2048
[  356.526682][   T26] audit: type=1326 audit(1780725865.710:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  356.558139][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'.
[  356.647217][ T7153] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  356.655015][   T26] audit: type=1326 audit(1780725865.710:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  356.655768][ T7153] overlayfs: overlapping lowerdir path
[  356.694122][ T7153] 9pnet: Insufficient options for proto=fd
[  356.701179][ T7145] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  356.718962][ T7145] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.881134][   T26] audit: type=1326 audit(1780725865.710:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  359.003380][ T7176] loop2: detected capacity change from 0 to 512
[  359.036185][ T7179] loop0: detected capacity change from 0 to 512
[  359.090998][ T7176] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.692: missing EA_INODE flag
[  359.093145][ T7179] EXT4-fs (loop0): Test dummy encryption mode enabled
[  359.142015][ T7179] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.688: inode has both inline data and extents flags
[  359.157076][ T7176] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.692: error while reading EA inode 12 err=-117
[  359.273061][ T7176] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.692: inode #1025: comm syz.2.692: iget: illegal inode #
[  359.288345][ T7176] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.692: error while reading EA inode 1025 err=-117
[  359.303651][ T7176] EXT4-fs (loop2): 1 orphan inode deleted
[  359.307125][ T7179] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.688: couldn't read orphan inode 15 (err -117)
[  359.321761][ T7176] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  359.457981][   T26] kauditd_printk_skb: 106 callbacks suppressed
[  359.458012][   T26] audit: type=1326 audit(1780725870.970:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  359.610772][   T26] audit: type=1326 audit(1780725871.000:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  359.635037][   T26] audit: type=1326 audit(1780725871.000:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  359.956850][ T7179] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  359.987020][   T26] audit: type=1326 audit(1780725871.000:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  360.043211][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'.
[  360.212771][   T26] audit: type=1326 audit(1780725871.000:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  360.231411][ T7191] loop4: detected capacity change from 0 to 512
[  360.243738][   T26] audit: type=1326 audit(1780725871.000:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  360.267751][    C0] vkms_vblank_simulate: vblank timer overrun
[  360.867860][ T7191] EXT4-fs (loop4): Ignoring removed bh option
[  360.959176][ T7191] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  360.996930][   T26] audit: type=1326 audit(1780725871.010:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  361.011006][ T7191] EXT4-fs (loop4): 1 truncate cleaned up
[  361.020928][    C0] vkms_vblank_simulate: vblank timer overrun
[  361.028235][   T26] audit: type=1326 audit(1780725871.010:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  361.066684][ T7191] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  361.081063][   T26] audit: type=1326 audit(1780725871.010:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  361.357918][   T26] audit: type=1326 audit(1780725871.010:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f462b4cf68e code=0x7ffc0000
[  361.381937][    C0] vkms_vblank_simulate: vblank timer overrun
[  362.394238][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'.
[  365.221604][ T7247] loop2: detected capacity change from 0 to 512
[  365.398077][ T7247] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.705: missing EA_INODE flag
[  366.455382][ T7247] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.705: error while reading EA inode 12 err=-117
[  366.501720][ T7247] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.705: inode #1025: comm syz.2.705: iget: illegal inode #
[  367.776873][ T7247] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.705: error while reading EA inode 1025 err=-117
[  367.840524][ T7247] EXT4-fs (loop2): 1 orphan inode deleted
[  367.896697][ T7247] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  367.974209][   T26] kauditd_printk_skb: 63 callbacks suppressed
[  367.974754][   T26] audit: type=1326 audit(1780725879.470:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  368.008102][   T26] audit: type=1326 audit(1780725879.470:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  368.033235][   T26] audit: type=1326 audit(1780725879.470:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  368.521591][   T26] audit: type=1326 audit(1780725879.470:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  368.545656][    C0] vkms_vblank_simulate: vblank timer overrun
[  368.669308][   T26] audit: type=1326 audit(1780725879.470:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  368.693305][    C0] vkms_vblank_simulate: vblank timer overrun
[  368.825001][ T7295] loop0: detected capacity change from 0 to 2048
[  370.083329][   T26] audit: type=1326 audit(1780725879.470:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  370.114372][   T26] audit: type=1326 audit(1780725879.470:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  370.194543][ T7295] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  370.212143][ T7295] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  370.330912][   T26] audit: type=1326 audit(1780725879.470:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  370.386688][   T26] audit: type=1326 audit(1780725879.470:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  370.427996][   T26] audit: type=1326 audit(1780725879.480:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.1.710" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f462b50ee59 code=0x7ffc0000
[  371.283484][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.717'.
[  371.846774][ T2303] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  373.657786][ T2303] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  373.749880][ T2303] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  373.807524][ T2303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.191438][ T2303] usb 5-1: config 0 descriptor??
[  374.217281][ T7323] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  374.476759][ T2303] usb 5-1: can't set config #0, error -71
[  374.486314][ T2303] usb 5-1: USB disconnect, device number 11
[  374.764429][ T7363] loop4: detected capacity change from 0 to 512
[  375.140929][ T7370] loop2: detected capacity change from 0 to 2048
[  376.222941][ T7372] netlink: 20 bytes leftover after parsing attributes in process `syz.5.728'.
[  376.693413][ T7363] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.725: missing EA_INODE flag
[  376.724068][ T7363] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.725: error while reading EA inode 12 err=-117
[  376.911843][ T7363] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.725: inode #1025: comm syz.4.725: iget: illegal inode #
[  376.956041][ T7370] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  376.973426][ T7370] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.993533][ T7363] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.725: error while reading EA inode 1025 err=-117
[  377.057463][ T7363] EXT4-fs (loop4): 1 orphan inode deleted
[  377.111097][ T7363] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  378.458820][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.465201][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  382.267906][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'.
[  382.833711][ T7460] loop5: detected capacity change from 0 to 2048
[  383.360518][ T7460] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  383.378139][ T7460] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  384.781887][   T26] kauditd_printk_skb: 64 callbacks suppressed
[  384.781902][   T26] audit: type=1326 audit(1780725896.280:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  385.253024][   T26] audit: type=1326 audit(1780725896.320:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  385.281940][   T26] audit: type=1326 audit(1780725896.330:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  385.306398][   T26] audit: type=1326 audit(1780725896.380:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  385.331138][   T26] audit: type=1326 audit(1780725896.380:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  385.355657][   T26] audit: type=1326 audit(1780725896.390:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  385.381754][   T26] audit: type=1326 audit(1780725896.400:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  385.417166][   T26] audit: type=1326 audit(1780725896.400:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  388.063485][   T26] audit: type=1326 audit(1780725896.410:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  388.590404][   T26] audit: type=1326 audit(1780725896.420:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2263912e59 code=0x7ffc0000
[  388.614618][    C0] vkms_vblank_simulate: vblank timer overrun
[  388.837251][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.5.755'.
[  389.229226][ T7518] loop2: detected capacity change from 0 to 512
[  389.736294][ T7518] EXT4-fs (loop2): Ignoring removed bh option
[  389.742818][ T7518] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  389.779843][ T7518] EXT4-fs (loop2): 1 truncate cleaned up
[  389.793011][ T7518] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  389.975506][ T7536] usb usb8: usbfs: process 7536 (syz.1.760) did not claim interface 0 before use
[  390.257541][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'.
[  392.860644][ T7582] loop0: detected capacity change from 0 to 512
[  393.047035][ T7582] EXT4-fs (loop0): Test dummy encryption mode enabled
[  393.109032][ T7588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'.
[  393.494141][ T7582] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.766: inode has both inline data and extents flags
[  393.576993][ T7582] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.766: couldn't read orphan inode 15 (err -117)
[  393.619040][ T7582] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  394.159301][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'.
[  395.424488][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'.
[  395.435856][ T7604] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  395.444597][ T7604] overlayfs: overlapping lowerdir path
[  395.486921][ T7608] 9pnet: Insufficient options for proto=fd
[  396.379810][ T7618] Can't find ip_set type hash:ip,por

[  397.031991][ T7629] loop1: detected capacity change from 0 to 512
[  397.856844][ T7629] EXT4-fs (loop1): Ignoring removed bh option
[  397.912616][ T7629] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  398.463481][ T7629] EXT4-fs (loop1): 1 truncate cleaned up
[  398.470231][ T7629] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  400.368470][ T7652] loop4: detected capacity change from 0 to 512
[  400.421629][ T7652] EXT4-fs (loop4): Test dummy encryption mode enabled
[  400.763565][ T7652] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.779: inode has both inline data and extents flags
[  400.841773][ T7652] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.779: couldn't read orphan inode 15 (err -117)
[  400.864371][ T7652] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  400.901246][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'.
[  401.047262][ T1107] Bluetooth: hci5: command 0x0406 tx timeout
[  402.335919][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'.
[  402.364559][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.784'.
[  402.377276][ T7676] blktrace: Concurrent blktraces are not allowed on sg0
[  403.882988][ T7685] device syzkaller0 entered promiscuous mode
[  404.661339][ T7693] loop2: detected capacity change from 0 to 512
[  404.716951][ T7693] EXT4-fs (loop2): Ignoring removed bh option
[  404.731626][ T7693] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  405.250914][ T7693] EXT4-fs (loop2): 1 truncate cleaned up
[  405.258526][ T7693] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  407.084226][ T7717] Can't find ip_set type hash:ip,por

[  410.844208][ T7749] loop5: detected capacity change from 0 to 512
[  410.896829][ T4234] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  411.375583][ T7749] EXT4-fs (loop5): Ignoring removed bh option
[  411.420304][ T7749] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  411.466822][ T4234] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  412.283105][ T7759] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  412.296687][ T4234] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  412.310663][ T4234] usb 1-1: config 0 has no interface number 0
[  412.358528][ T7749] EXT4-fs (loop5): 1 truncate cleaned up
[  412.368531][ T7749] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  412.536792][ T4234] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  413.271217][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.279601][ T4234] usb 1-1: Product: syz
[  413.284328][ T4234] usb 1-1: Manufacturer: syz
[  413.289318][ T4234] usb 1-1: SerialNumber: syz
[  413.295638][ T4234] usb 1-1: config 0 descriptor??
[  413.326873][ T4234] usb 1-1: can't set config #0, error -71
[  413.337941][ T4234] usb 1-1: USB disconnect, device number 6
[  414.337969][ T7779] loop1: detected capacity change from 0 to 512
[  414.451719][ T7779] EXT4-fs (loop1): Test dummy encryption mode enabled
[  414.549201][ T7779] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.806: inode has both inline data and extents flags
[  414.930920][ T7779] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.806: couldn't read orphan inode 15 (err -117)
[  415.012787][ T7779] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  416.589789][ T7805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  416.600934][ T7805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  417.160494][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'.
[  419.370648][ T7820] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  419.608586][ T7825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.820'.
[  420.854680][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.691056][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.713890][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.996080][ T7816] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.005218][ T7816] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.014266][ T7816] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.023236][ T7816] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.088532][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'.
[  422.599174][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.833'.
[  423.210330][ T7881] Can't find ip_set type hash:ip,por

[  423.237711][ T7889] loop5: detected capacity change from 0 to 512
[  423.546738][    T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  424.139239][ T7889] EXT4-fs (loop5): Test dummy encryption mode enabled
[  424.324834][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.838'.
[  424.337636][ T7897] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  424.345912][ T7897] overlayfs: overlapping lowerdir path
[  424.356527][ T7889] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.836: inode has both inline data and extents flags
[  424.363118][ T7900] netlink: 52 bytes leftover after parsing attributes in process `syz.4.839'.
[  424.378476][ T7897] 9pnet: Insufficient options for proto=fd
[  424.384835][ T7889] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.836: couldn't read orphan inode 15 (err -117)
[  424.406948][    T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  424.421864][    T7] usb 1-1: config 0 has no interface number 0
[  424.430296][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.839'.
[  424.431923][ T7889] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  424.718433][    T7] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  424.718506][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.836'.
[  424.733916][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.978814][    T7] usb 1-1: Product: syz
[  424.983166][    T7] usb 1-1: Manufacturer: syz
[  425.027139][    T7] usb 1-1: SerialNumber: syz
[  425.451273][    T7] usb 1-1: config 0 descriptor??
[  426.546849][    T7] dvb_usb_ec168: probe of 1-1:0.1 failed with error -110
[  426.835108][    T7] usb 1-1: USB disconnect, device number 7
[  428.247828][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'.
[  428.558557][ T7937] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  428.619480][ T7937] overlayfs: overlapping lowerdir path
[  428.647929][ T7937] 9pnet: Insufficient options for proto=fd
[  428.940920][    T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  429.296730][    T7] usb 6-1: Using ep0 maxpacket: 32
[  429.416907][    T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.464954][    T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  429.646824][    T7] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  429.667673][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.702183][    T7] usb 6-1: Product: syz
[  429.714713][    T7] usb 6-1: Manufacturer: syz
[  429.734232][    T7] usb 6-1: SerialNumber: syz
[  430.023836][    T7] usb 6-1: config 0 descriptor??
[  430.753790][ T7961] loop1: detected capacity change from 0 to 512
[  430.947288][ T7961] EXT4-fs (loop1): Test dummy encryption mode enabled
[  431.186785][ T7961] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.856: inode has both inline data and extents flags
[  432.052696][ T7961] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.856: couldn't read orphan inode 15 (err -117)
[  432.162345][ T7961] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  432.457713][ T1110] usb 6-1: USB disconnect, device number 3
[  432.473767][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'.
[  433.220729][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'.
[  434.310516][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'.
[  434.414915][ T7995] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  434.433326][ T7995] overlayfs: overlapping lowerdir path
[  434.443086][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  434.448776][ T7995] 9pnet: Insufficient options for proto=fd
[  434.453346][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.198970][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.207049][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.216096][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.223573][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.231013][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.236659][ T4232] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  435.240959][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.255532][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.276678][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.302547][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.336985][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.352548][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.360533][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.368697][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.376675][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.384684][ T4237] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0
[  435.521505][ T4237] hid-generic 0006:0008:0001.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  435.537750][ T4232] usb 6-1: Using ep0 maxpacket: 8
[  435.576878][ T8011] ==================================================================
[  435.582761][ T8007] loop0: detected capacity change from 0 to 512
[  435.585355][ T8011] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370
[  435.598796][ T8011] Read of size 8 at addr ffff88802a15e218 by task syz.4.871/8011
[  435.606612][ T8011] 
[  435.608948][ T8011] CPU: 1 PID: 8011 Comm: syz.4.871 Not tainted syzkaller #0
[  435.616248][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  435.626326][ T8011] Call Trace:
[  435.629625][ T8011]  <TASK>
[  435.632572][ T8011]  dump_stack_lvl+0x188/0x250
[  435.637311][ T8011]  ? show_regs_print_info+0x20/0x20
[  435.642532][ T8011]  ? _printk+0xda/0x130
[  435.646726][ T8011]  ? dvb_device_open+0xc6/0x370
[  435.651597][ T8011]  ? load_image+0x400/0x400
[  435.656107][ T8011]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  435.661689][ T8011]  print_address_description+0x60/0x2d0
[  435.667252][ T8011]  ? dvb_device_open+0xc6/0x370
[  435.672134][ T8011]  kasan_report+0xdf/0x130
[  435.676646][ T8011]  ? dvb_device_open+0xc6/0x370
[  435.681596][ T8011]  dvb_device_open+0xc6/0x370
[  435.686265][ T8011]  ? do_raw_spin_unlock+0x11d/0x230
[  435.691482][ T8011]  chrdev_open+0x5c5/0x6a0
[  435.696219][ T8011]  ? cd_forget+0x160/0x160
[  435.700628][ T8011]  ? fsnotify_perm+0x3a7/0x560
[  435.705458][ T8011]  ? cd_forget+0x160/0x160
[  435.709863][ T8011]  do_dentry_open+0x7ff/0xf80
[  435.714603][ T8011]  path_openat+0x26f5/0x2fa0
[  435.719251][ T8011]  ? verify_lock_unused+0x140/0x140
[  435.724537][ T8011]  ? slab_post_alloc_hook+0x4c/0x380
[  435.729818][ T8011]  ? do_filp_open+0x410/0x410
[  435.734491][ T8011]  do_filp_open+0x1e2/0x410
[  435.739016][ T8011]  ? vfs_tmpfile+0x300/0x300
[  435.743606][ T8011]  ? _raw_spin_unlock+0x24/0x40
[  435.748632][ T8011]  ? alloc_fd+0x598/0x630
[  435.752980][ T8011]  do_sys_openat2+0x150/0x4b0
[  435.757667][ T8011]  ? __lock_acquire+0x7d10/0x7d10
[  435.762694][ T8011]  ? do_sys_open+0xe0/0xe0
[  435.767137][ T8011]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  435.773120][ T8011]  ? lock_chain_count+0x20/0x20
[  435.777983][ T8011]  ? vtime_user_exit+0x2c8/0x3e0
[  435.783023][ T8011]  __x64_sys_openat+0x135/0x160
[  435.787867][ T8011]  do_syscall_64+0x4c/0xa0
[  435.792340][ T8011]  ? clear_bhb_loop+0x30/0x80
[  435.797011][ T8011]  ? clear_bhb_loop+0x30/0x80
[  435.801676][ T8011]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  435.807570][ T8011] RIP: 0033:0x7f22638d368e
[  435.811976][ T8011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  435.831582][ T8011] RSP: 002b:00007f2261b6bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  435.839992][ T8011] RAX: ffffffffffffffda RBX: 00007f2261b6c6c0 RCX: 00007f22638d368e
[  435.847956][ T8011] RDX: 0000000000002000 RSI: 00007f2261b6bc00 RDI: ffffffffffffff9c
[  435.856007][ T8011] RBP: 00007f2261b6bc00 R08: 0000000000000000 R09: 0000000000000000
[  435.863979][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  435.871951][ T8011] R13: 00007f2263b8c038 R14: 00007f2263b8bfa0 R15: 00007ffe73bc23f8
[  435.879931][ T8011]  </TASK>
[  435.882951][ T8011] 
[  435.885259][ T8011] Allocated by task 1:
[  435.889316][ T8011]  __kasan_kmalloc+0xb5/0xf0
[  435.893899][ T8011]  dvb_register_device+0x311/0x2170
[  435.899094][ T8011]  dvb_register_frontend+0x645/0x920
[  435.904373][ T8011]  vidtv_bridge_probe+0x9a1/0xf70
[  435.909479][ T8011]  platform_probe+0x137/0x1c0
[  435.914223][ T8011]  really_probe+0x284/0xc80
[  435.918714][ T8011]  __driver_probe_device+0x1ef/0x390
[  435.923985][ T8011]  driver_probe_device+0x4f/0x420
[  435.928999][ T8011]  __driver_attach+0x46b/0x670
[  435.933748][ T8011]  bus_for_each_dev+0x182/0x1f0
[  435.938653][ T8011]  bus_add_driver+0x30a/0x5a0
[  435.943332][ T8011]  driver_register+0x32d/0x430
[  435.948090][ T8011]  vidtv_bridge_init+0x39/0x70
[  435.952881][ T8011]  do_one_initcall+0x272/0x730
[  435.957641][ T8011]  do_initcall_level+0x137/0x1f0
[  435.962579][ T8011]  do_initcalls+0x4b/0x90
[  435.966896][ T8011]  kernel_init_freeable+0x3e9/0x570
[  435.972082][ T8011]  kernel_init+0x19/0x1b0
[  435.976400][ T8011]  ret_from_fork+0x1f/0x30
[  435.980822][ T8011] 
[  435.983140][ T8011] Freed by task 7820:
[  435.987100][ T8011]  kasan_set_track+0x4b/0x70
[  435.991676][ T8011]  kasan_set_free_info+0x1f/0x40
[  435.996599][ T8011]  ____kasan_slab_free+0xd5/0x110
[  436.001615][ T8011]  slab_free_freelist_hook+0xea/0x170
[  436.006975][ T8011]  kfree+0xef/0x2a0
[  436.010783][ T8011]  dvb_device_open+0x2e7/0x370
[  436.015533][ T8011]  chrdev_open+0x5c5/0x6a0
[  436.019934][ T8011]  do_dentry_open+0x7ff/0xf80
[  436.024597][ T8011]  path_openat+0x26f5/0x2fa0
[  436.029172][ T8011]  do_filp_open+0x1e2/0x410
[  436.033662][ T8011]  do_sys_openat2+0x150/0x4b0
[  436.038323][ T8011]  __x64_sys_openat+0x135/0x160
[  436.043345][ T8011]  do_syscall_64+0x4c/0xa0
[  436.047773][ T8011]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  436.053660][ T8011] 
[  436.055963][ T8011] The buggy address belongs to the object at ffff88802a15e200
[  436.055963][ T8011]  which belongs to the cache kmalloc-256 of size 256
[  436.070001][ T8011] The buggy address is located 24 bytes inside of
[  436.070001][ T8011]  256-byte region [ffff88802a15e200, ffff88802a15e300)
[  436.083184][ T8011] The buggy address belongs to the page:
[  436.088808][ T8011] page:ffffea0000a85780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a15e
[  436.098967][ T8011] head:ffffea0000a85780 order:1 compound_mapcount:0
[  436.105552][ T8011] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  436.113536][ T8011] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41b40
[  436.122117][ T8011] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  436.130676][ T8011] page dumped because: kasan: bad access detected
[  436.137074][ T8011] page_owner tracks the page as allocated
[  436.142777][ T8011] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2840, ts 16046511089, free_ts 0
[  436.161210][ T8011]  get_page_from_freelist+0x1bbd/0x1ca0
[  436.166775][ T8011]  __alloc_pages+0x1ee/0x480
[  436.171347][ T8011]  new_slab+0xc0/0x4b0
[  436.175400][ T8011]  ___slab_alloc+0x80a/0xdd0
[  436.179970][ T8011]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  436.185322][ T8011]  kthread+0x10b/0x520
[  436.189474][ T8011]  ret_from_fork+0x1f/0x30
[  436.193898][ T8011] page_owner free stack trace missing
[  436.199244][ T8011] 
[  436.201547][ T8011] Memory state around the buggy address:
[  436.207173][ T8011]  ffff88802a15e100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  436.215218][ T8011]  ffff88802a15e180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  436.223297][ T8011] >ffff88802a15e200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  436.231351][ T8011]                             ^
[  436.236189][ T8011]  ffff88802a15e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  436.244234][ T8011]  ffff88802a15e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  436.252282][ T8011] ==================================================================
[  436.260337][ T8011] Disabling lock debugging due to kernel taint
[  436.294788][ T4232] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  436.376941][ T8011] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  436.384167][ T8011] CPU: 0 PID: 8011 Comm: syz.4.871 Tainted: G    B             syzkaller #0
[  436.386512][ T8007] EXT4-fs (loop0): Test dummy encryption mode enabled
[  436.392847][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  436.392862][ T8011] Call Trace:
[  436.392869][ T8011]  <TASK>
[  436.392875][ T8011]  dump_stack_lvl+0x188/0x250
[  436.392899][ T8011]  ? show_regs_print_info+0x20/0x20
[  436.426279][ T8011]  ? load_image+0x400/0x400
[  436.430803][ T8011]  panic+0x2e5/0x810
[  436.434807][ T8011]  ? bpf_jit_dump+0xd0/0xd0
[  436.439336][ T8011]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  436.444988][ T8011]  ? check_panic_on_warn+0x6c/0xa0
[  436.450228][ T8011]  ? dvb_device_open+0xc6/0x370
[  436.455093][ T8011]  check_panic_on_warn+0x80/0xa0
[  436.460051][ T8011]  ? dvb_device_open+0xc6/0x370
[  436.464923][ T8011]  end_report+0x6d/0xf0
[  436.469095][ T8011]  kasan_report+0x102/0x130
[  436.473614][ T8011]  ? dvb_device_open+0xc6/0x370
[  436.478490][ T8011]  dvb_device_open+0xc6/0x370
[  436.483193][ T8011]  ? do_raw_spin_unlock+0x11d/0x230
[  436.488418][ T8011]  chrdev_open+0x5c5/0x6a0
[  436.492859][ T8011]  ? cd_forget+0x160/0x160
[  436.497271][ T8011]  ? fsnotify_perm+0x3a7/0x560
[  436.502024][ T8011]  ? cd_forget+0x160/0x160
[  436.506424][ T8011]  do_dentry_open+0x7ff/0xf80
[  436.511109][ T8011]  path_openat+0x26f5/0x2fa0
[  436.515689][ T8011]  ? verify_lock_unused+0x140/0x140
[  436.520876][ T8011]  ? slab_post_alloc_hook+0x4c/0x380
[  436.526149][ T8011]  ? do_filp_open+0x410/0x410
[  436.530813][ T8011]  do_filp_open+0x1e2/0x410
[  436.535301][ T8011]  ? vfs_tmpfile+0x300/0x300
[  436.539875][ T8011]  ? _raw_spin_unlock+0x24/0x40
[  436.544715][ T8011]  ? alloc_fd+0x598/0x630
[  436.549033][ T8011]  do_sys_openat2+0x150/0x4b0
[  436.553704][ T8011]  ? __lock_acquire+0x7d10/0x7d10
[  436.558737][ T8011]  ? do_sys_open+0xe0/0xe0
[  436.563140][ T8011]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  436.569110][ T8011]  ? lock_chain_count+0x20/0x20
[  436.573963][ T8011]  ? vtime_user_exit+0x2c8/0x3e0
[  436.578974][ T8011]  __x64_sys_openat+0x135/0x160
[  436.583830][ T8011]  do_syscall_64+0x4c/0xa0
[  436.588236][ T8011]  ? clear_bhb_loop+0x30/0x80
[  436.592917][ T8011]  ? clear_bhb_loop+0x30/0x80
[  436.597689][ T8011]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  436.603568][ T8011] RIP: 0033:0x7f22638d368e
[  436.607967][ T8011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  436.627556][ T8011] RSP: 002b:00007f2261b6bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  436.635956][ T8011] RAX: ffffffffffffffda RBX: 00007f2261b6c6c0 RCX: 00007f22638d368e
[  436.643918][ T8011] RDX: 0000000000002000 RSI: 00007f2261b6bc00 RDI: ffffffffffffff9c
[  436.651882][ T8011] RBP: 00007f2261b6bc00 R08: 0000000000000000 R09: 0000000000000000
[  436.659839][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  436.667799][ T8011] R13: 00007f2263b8c038 R14: 00007f2263b8bfa0 R15: 00007ffe73bc23f8
[  436.675786][ T8011]  </TASK>
[  436.679044][ T8011] Kernel Offset: disabled
[  436.683386][ T8011] Rebooting in 86400 seconds..