last executing test programs:

7m0.926259714s ago: executing program 1 (id=288):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r4=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xfbff, 0x4e24, 0xfffe, 0xa, 0x80, 0xc0, 0x67, r4, r5}, {0x1, 0x6, 0x7, 0x401, 0x47f, 0xa, 0x4, 0x3ff}, {0x40, 0x0, 0x1, 0x1c}, 0x1, 0x6e6bb2, 0x1, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d6, 0xff}, 0xa, @in=@multicast1, 0x3501, 0x0, 0x3, 0x2, 0x2, 0x7, 0xd79}}, 0xe8)
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000080)={0x800006dc, 0x0, 0x6, 0xfff, 0x37, '\x00\x00\rg\b\b\r\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115200000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r9 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)

7m0.003218276s ago: executing program 1 (id=302):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x4)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
r3 = accept4$inet(r1, 0x0, 0x0, 0x80000)
sendmsg$inet(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="a88c95", 0x3}], 0x1}, 0x80)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0)

6m59.106703028s ago: executing program 1 (id=303):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc_mnt\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/net/ip_vs_conn\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/1024, 0x400)
read(r0, &(0x7f0000000100)=""/1024, 0x400)
lseek(r0, 0x1, 0x0)
read(r0, &(0x7f0000000100)=""/1024, 0x400)

6m59.106385708s ago: executing program 1 (id=304):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="96baa9bd293f32a4be21fdffc77440a9d9c7e16c6c51d63e8ba964b01e06c4ad80d5ba81bf754b2f63dd49ffac2f96d2be9ab12be13dc3bd59217be281d895795a047ce3258eb171bd1200000000000000a112eb61edbb22074fb2464c2c040aa73dc1cccff5291d669049a8e13b373c0960d91ad00e2765cf73b478067d073524b1515e0cf674b54ab1945a77534ca0c321c00bc82e1eec0d6ea55eab950800b5c12b71f10f76", @ANYRESOCT, @ANYRES8], 0x1, 0x1be, &(0x7f0000000640)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000000700)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x11e)
write(r0, &(0x7f0000000000)='7', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setfsuid(0xee00)

6m58.905254193s ago: executing program 1 (id=305):
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)

6m58.545588768s ago: executing program 1 (id=309):
socket(0x2, 0x2, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m58.513244332s ago: executing program 32 (id=309):
socket(0x2, 0x2, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m17.702951342s ago: executing program 0 (id=837):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='3', 0x1)
pread64(r0, &(0x7f0000000100)=""/43, 0x2b, 0x5)

6m17.651140319s ago: executing program 0 (id=838):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084)

6m17.650891741s ago: executing program 0 (id=839):
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8800)

6m17.575648715s ago: executing program 0 (id=840):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x2200892, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20080522}, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
readv(r1, &(0x7f0000000340)=[{0x0}], 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)

6m17.490526012s ago: executing program 0 (id=841):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)

6m17.148782441s ago: executing program 0 (id=847):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "bbd011749e87ca5a", "f7ba24746d0dbb6ef1f30ab24c223a43", "9710ee24", "7bbd24411c7d422b"}, 0x28)

6m17.129834778s ago: executing program 33 (id=847):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "bbd011749e87ca5a", "f7ba24746d0dbb6ef1f30ab24c223a43", "9710ee24", "7bbd24411c7d422b"}, 0x28)

6m10.445701321s ago: executing program 2 (id=959):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
timer_create(0x2, 0x0, &(0x7f0000000080)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000), 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)

6m9.867298984s ago: executing program 2 (id=960):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000380)=0x40, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

6m9.866976981s ago: executing program 2 (id=961):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")

6m9.811130999s ago: executing program 2 (id=963):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x2200892, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20080522}, 0x0)
r0 = fanotify_init(0x200, 0x0)
fanotify_mark(r0, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000340)=[{0x0}], 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)

6m9.73561731s ago: executing program 2 (id=966):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000)

6m8.624550847s ago: executing program 2 (id=972):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x2200892, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
readv(r1, &(0x7f0000000340)=[{0x0}], 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)

6m8.55731911s ago: executing program 34 (id=972):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x2200892, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
readv(r1, &(0x7f0000000340)=[{0x0}], 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)

3.185874721s ago: executing program 3 (id=7576):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

3.18552506s ago: executing program 3 (id=7577):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588)

3.111312444s ago: executing program 3 (id=7578):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000080)={@any, 0x3})

3.111114545s ago: executing program 3 (id=7579):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9)
ppoll(&(0x7f0000000000)=[{r1, 0x8463}], 0x1, 0x0, 0x0, 0x0)
close(r0)

2.147770229s ago: executing program 3 (id=7589):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x800, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000300)=""/54, &(0x7f0000000340)=0x36)

1.967162753s ago: executing program 3 (id=7592):
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xec, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffff7}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xe, 0x1a, 'syzkaller\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond_slave_0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9c99}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x30002041}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x1, 0x0, 'client0\x00', 0x4000000c, "0dc10165c835f68d", "e440ace1dbb8539e525bbb21f8cd613a397a23df49fb87df49793f264cebbe36", 0x401, 0xffd0})
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x10, 0x40, 0x64, 0x0, 0xff, 0x6, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5, 0x0, 0x1, 0x9, 0x4, 0x4, 0x4e21, 0x4e21, 0x1, 0x1}}}}}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$nci(r0, &(0x7f0000000180)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0xdc}, 0x4)
r1 = timerfd_create(0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000480))
timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xa0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x5, 0xd}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x40, 0x6, 0x2, 0x20, 0xfc}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x0, 0x0}, {0x8b, &(0x7f0000000540)=@string={0x8b, 0x3, "03eba8c34f871f95dd023a0787d7e6a5b570c70c4263e7c5a5a5fa9ba83657ae7ca7cc09a8f018131d3f49cb368c3553709e5e9a96ffd28828c5746a9716d9fdb8a84be25313b69f1653fd9098ab49ad0661a5676cffb4a37e849242c27348a46cbc17e4a3d0331b43521414401d0014dc99621fa23a3d7f5c5de73f5faa376bd59fa8dafebe056549"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x401}}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0)
read$FUSE(r3, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{}, [@jmp={0x5, 0x1, 0xb}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = socket$kcm(0x10, 0x7, 0x4)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1000000000000053}, 0xff0f000020000080)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x3)

706.049842ms ago: executing program 4 (id=7620):
getpid()
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xff09, 0x0)

705.759263ms ago: executing program 4 (id=7621):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r2, &(0x7f0000001a80), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000000c0), &(0x7f0000000380)}, 0x20)

556.392627ms ago: executing program 4 (id=7622):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0xfffffffd}, 0x10)

488.690102ms ago: executing program 4 (id=7623):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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", 0x153}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a", 0x9b}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)

488.568216ms ago: executing program 4 (id=7624):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000810)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0)

395.293021ms ago: executing program 4 (id=7625):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7fffffff}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000540)="04", 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)

213.749423ms ago: executing program 5 (id=7629):

213.638392ms ago: executing program 5 (id=7630):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfdfc, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x1, &(0x7f0000000140)=0x304, 0x4)

105.714224ms ago: executing program 5 (id=7631):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x7, 0x6}, @empty, @rand_addr=0x64010100, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r0, &(0x7f0000000840)={@val={0x0, 0x7}, @void, @mpls={[], @ipv6=@tcp={0x3, 0x6, "9ee722", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xdf, 0x0, 0x3}}}}}}, 0x40)

296.49µs ago: executing program 5 (id=7632):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x7a)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1', 0x1)
syz_emit_ethernet(0x22, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x3, 0x14, 0x65, 0x0, 0x0, 0x84, 0x0, @loopback, @multicast1}}}}}, 0x0)

66.397µs ago: executing program 5 (id=7633):
mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:01.0/remove/file0\x00', 0x1df)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc178fd0b, &(0x7f0000000138)="0400000000000000000000007801")

0s ago: executing program 5 (id=7634):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c5, &(0x7f0000000480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

45731][T15126]  ? __task_pid_nr_ns+0x399/0x470
[  294.445740][T15126]  proc_self_get_link+0xe5/0x180
[  294.445749][T15126]  ? __pfx_proc_self_get_link+0x10/0x10
[  294.445757][T15126]  pick_link+0x782/0xfe0
[  294.445774][T15126]  step_into_slowpath+0x58a/0x820
[  294.445787][T15126]  ? __pfx_step_into_slowpath+0x10/0x10
[  294.445802][T15126]  link_path_walk+0xd5e/0x1910
[  294.445820][T15126]  path_openat+0x1c9/0x1d60
[  294.445835][T15126]  do_file_open+0x23e/0x4a0
[  294.445845][T15126]  ? __pfx_do_file_open+0x10/0x10
[  294.445861][T15126]  ? _raw_spin_unlock+0x28/0x50
[  294.445870][T15126]  ? alloc_fd+0x651/0x6c0
[  294.445884][T15126]  do_sys_openat2+0x115/0x200
[  294.445894][T15126]  ? __se_sys_futex+0x3a8/0x450
[  294.445904][T15126]  ? __pfx_do_sys_openat2+0x10/0x10
[  294.445914][T15126]  ? ksys_write+0x242/0x270
[  294.445920][T15126]  ? __pfx___se_sys_futex+0x10/0x10
[  294.445930][T15126]  ? __pfx_ksys_write+0x10/0x10
[  294.445939][T15126]  __x64_sys_openat+0x138/0x170
[  294.445952][T15126]  do_syscall_64+0x166/0x520
[  294.445962][T15126]  ? trace_irq_disable+0x3b/0x140
[  294.445970][T15126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.445980][T15126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.445987][T15126] RIP: 0033:0x7ff41f35e98e
[  294.445996][T15126] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  294.446005][T15126] RSP: 002b:00007ff42030ef18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  294.446019][T15126] RAX: ffffffffffffffda RBX: 00007ff42030f6c0 RCX: 00007ff41f35e98e
[  294.446027][T15126] RDX: 0000000000000000 RSI: 00007ff41f4347a6 RDI: ffffffffffffff9c
[  294.446034][T15126] RBP: 00007ff41f43506b R08: 0000000000000000 R09: 0000000000000000
[  294.446041][T15126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.446048][T15126] R13: 00007ff41f626038 R14: 00007ff41f625fa0 R15: 00007fffc94be2c8
[  294.446067][T15126]  </TASK>
[  294.758505][T15140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3981'.
[  294.827493][T15144] loop4: detected capacity change from 0 to 4096
[  294.846076][T15144] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  294.846094][T15144] NILFS (loop4): mounting unchecked fs
[  294.846099][T15144] NILFS (loop4): recovery required for readonly filesystem
[  294.846104][T15144] NILFS (loop4): write access will be enabled during recovery
[  294.852919][T14486] udevd[14486]: incorrect nilfs2 checksum on /dev/loop4
[  294.877965][T14486] udevd[14486]: incorrect nilfs2 checksum on /dev/loop4
[  294.895572][T15144] NILFS (loop4): recovery complete
[  294.976612][T15147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3984'.
[  294.976631][T15147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3984'.
[  295.021654][T15152] FAULT_INJECTION: forcing a failure.
[  295.021654][T15152] name failslab, interval 1, probability 0, space 0, times 0
[  295.021689][T15152] CPU: 1 UID: 0 PID: 15152 Comm: syz.4.3987 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.021702][T15152] Tainted: [L]=SOFTLOCKUP
[  295.021705][T15152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.021710][T15152] Call Trace:
[  295.021714][T15152]  <TASK>
[  295.021718][T15152]  dump_stack_lvl+0xe8/0x150
[  295.021734][T15152]  should_fail_ex+0x410/0x560
[  295.021746][T15152]  should_failslab+0xa8/0x100
[  295.021758][T15152]  ? security_inode_alloc+0x39/0x310
[  295.021770][T15152]  kmem_cache_alloc_noprof+0xa1/0x600
[  295.021779][T15152]  ? security_inode_alloc+0x39/0x310
[  295.021793][T15152]  security_inode_alloc+0x39/0x310
[  295.021805][T15152]  inode_init_always_gfp+0x97e/0xd30
[  295.021818][T15152]  alloc_inode+0x82/0x1b0
[  295.021829][T15152]  path_from_stashed+0x205/0x580
[  295.021841][T15152]  proc_ns_get_link+0x16b/0x2a0
[  295.021856][T15152]  ? __pfx_proc_ns_get_link+0x10/0x10
[  295.021865][T15152]  ? bpf_lsm_inode_follow_link+0x9/0x20
[  295.021876][T15152]  ? __pfx_proc_ns_get_link+0x10/0x10
[  295.021884][T15152]  pick_link+0x72f/0xfe0
[  295.021900][T15152]  step_into_slowpath+0x58a/0x820
[  295.021914][T15152]  ? __pfx_step_into_slowpath+0x10/0x10
[  295.021929][T15152]  path_openat+0x98e/0x1d60
[  295.021945][T15152]  do_file_open+0x23e/0x4a0
[  295.021956][T15152]  ? __pfx_do_file_open+0x10/0x10
[  295.021973][T15152]  ? _raw_spin_unlock+0x28/0x50
[  295.021983][T15152]  ? alloc_fd+0x651/0x6c0
[  295.021998][T15152]  do_sys_openat2+0x115/0x200
[  295.022008][T15152]  ? __se_sys_futex+0x3a8/0x450
[  295.022018][T15152]  ? __pfx_do_sys_openat2+0x10/0x10
[  295.022031][T15152]  ? rcu_is_watching+0x16/0xb0
[  295.022043][T15152]  __x64_sys_openat+0x138/0x170
[  295.022056][T15152]  do_syscall_64+0x166/0x520
[  295.022067][T15152]  ? trace_irq_disable+0x3b/0x140
[  295.022076][T15152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.022085][T15152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.022092][T15152] RIP: 0033:0x7ff41f35e98e
[  295.022100][T15152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  295.022107][T15152] RSP: 002b:00007ff42030ef18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  295.022116][T15152] RAX: ffffffffffffffda RBX: 00007ff42030f6c0 RCX: 00007ff41f35e98e
[  295.022121][T15152] RDX: 0000000000000000 RSI: 00007ff41f4347a6 RDI: ffffffffffffff9c
[  295.022126][T15152] RBP: 00007ff41f43506b R08: 0000000000000000 R09: 0000000000000000
[  295.022131][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.022135][T15152] R13: 00007ff41f626038 R14: 00007ff41f625fa0 R15: 00007fffc94be2c8
[  295.022147][T15152]  </TASK>
[  295.356034][T15169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3995'.
[  295.576106][ T4989] Bluetooth: hci1: unexpected event for opcode 0x0413
[  296.421114][T15209] loop4: detected capacity change from 0 to 128
[  296.429817][T15209] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  296.432659][T15209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.758383][T15254] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  298.957321][T15264] loop4: detected capacity change from 0 to 4096
[  298.974440][T15265] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  299.226179][   T34] audit: type=1326 audit(1791037450.738:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.4.4044" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff41f39e159 code=0x0
[  300.964400][T15033] asus 0003:0B05:18C6.0004: timeout initializing reports
[  300.991933][   T10] usb 6-1: USB disconnect, device number 23
[  301.159304][T15338] device-mapper: ioctl: name not supplied when creating device
[  301.506810][   T33] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  301.699513][   T33] usb 5-1: Using ep0 maxpacket: 16
[  301.723450][   T33] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  301.738716][   T33] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.738733][   T33] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  301.738744][   T33] usb 5-1: config 0 interface 0 has no altsetting 0
[  301.738758][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.761796][   T33] usb 5-1: config 0 descriptor??
[  302.196746][   T33] usbhid 5-1:0.0: can't add hid device: -71
[  302.196798][   T33] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  302.199505][   T33] usb 5-1: USB disconnect, device number 24
[  302.672265][   T33] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  302.735518][T15374] xt_hashlimit: size too large, truncated to 1048576
[  302.735573][T15374] xt_hashlimit: max too large, truncated to 1048576
[  302.853574][   T33] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  302.859102][   T33] usb 6-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0xD8, changing to 0x88
[  302.859128][   T33] usb 6-1: config 2 interface 0 altsetting 178 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  302.859144][   T33] usb 6-1: config 2 interface 0 altsetting 178 endpoint 0x88 has invalid wMaxPacketSize 0
[  302.859159][   T33] usb 6-1: config 2 interface 0 has no altsetting 0
[  302.861468][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.861489][   T33] usb 6-1: Product: syz
[  302.861499][   T33] usb 6-1: Manufacturer: syz
[  302.861508][   T33] usb 6-1: SerialNumber: syz
[  303.123137][   T33] ims_pcu 6-1:2.0: Incorrect number of endpoints on data interface (1)
[  303.123179][   T33] ims_pcu 6-1:2.0: probe with driver ims_pcu failed with error -22
[  303.126391][   T33] usb 6-1: USB disconnect, device number 24
[  304.123259][ T4989] Bluetooth: hci1: unexpected event 0x2f length: 509 > 255
[  304.131090][T15395] jffs2: notice: (15395) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  304.163000][ T5654] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  304.319079][ T5654] usb 5-1: Using ep0 maxpacket: 16
[  304.319991][ T5654] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  304.321708][ T5654] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.321727][ T5654] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  304.321737][ T5654] usb 5-1: config 0 interface 0 has no altsetting 0
[  304.321751][ T5654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.323667][ T5654] usb 5-1: config 0 descriptor??
[  304.726267][   T33] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  304.760172][ T5654] usbhid 5-1:0.0: can't add hid device: -71
[  304.760223][ T5654] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  304.766850][ T5654] usb 5-1: USB disconnect, device number 25
[  304.885239][   T33] usb 6-1: Using ep0 maxpacket: 16
[  304.886664][   T33] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  304.887817][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.887837][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.887851][   T33] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  304.887879][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.892824][   T33] usb 6-1: config 0 descriptor??
[  305.326626][   T33] usbhid 6-1:0.0: can't add hid device: -71
[  305.326676][   T33] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  305.333176][   T33] usb 6-1: USB disconnect, device number 25
[  305.417747][T15436] loop4: detected capacity change from 0 to 128
[  305.419182][T15436] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  305.431457][T15436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  306.062174][T15448] loop5: detected capacity change from 0 to 512
[  306.566513][T15458] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  306.891532][T15476] device-mapper: ioctl: name not supplied when creating device
[  307.026483][T15488] loop5: detected capacity change from 0 to 4096
[  307.029469][T15488] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  307.122889][T15488] overlayfs: failed to resolve './file1:dont_appraise': -2
[  307.190484][T15496] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  307.279333][T15504] device-mapper: ioctl: name not supplied when creating device
[  308.275896][T15527] loop5: detected capacity change from 0 to 256
[  308.376924][T15531] loop4: detected capacity change from 0 to 4096
[  308.625476][T15549] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  310.343133][ T4989] Bluetooth: unknown link type 162
[  310.343161][ T4989] Bluetooth: hci0: connection err: -111
[  311.780402][    T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  311.942293][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  311.944114][    T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  311.944296][    T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  311.944326][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.948326][T15614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  311.955736][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  312.123077][ T5669] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  312.184973][    T9] usb 5-1: USB disconnect, device number 26
[  312.314946][ T5669] usb 6-1: Using ep0 maxpacket: 32
[  312.316645][ T5669] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  312.318755][ T5669] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  312.318772][ T5669] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  312.318783][ T5669] usb 6-1: config 0 interface 0 has no altsetting 0
[  312.318796][ T5669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.321639][ T5669] usb 6-1: config 0 descriptor??
[  312.541823][ T4989] Bluetooth: hci0: unexpected event for opcode 0x2024
[  312.543919][ T5669] usbhid 6-1:0.0: can't add hid device: -71
[  312.543977][ T5669] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  312.547294][ T5669] usb 6-1: USB disconnect, device number 26
[  313.678063][T15676] loop4: detected capacity change from 0 to 128
[  313.679386][T15676] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  313.681817][T15676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  314.748939][T15705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4233'.
[  314.748952][T15705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4233'.
[  314.808361][T15709] block2mtd: illegal erase size
[  315.713018][T15738] LUN: removable file: (no medium)
[  315.773028][T15745] loop4: detected capacity change from 0 to 512
[  315.824603][T15745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.824690][T15745] ext4 filesystem being mounted at /1063/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.113383][ T5669] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  316.316102][ T5669] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  316.317941][ T5669] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  316.317972][ T5669] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  316.318000][ T5669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.322530][T15743] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  316.354979][ T5669] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  316.560197][    T9] usb 6-1: USB disconnect, device number 27
[  316.791330][ T7757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.128275][T15783] netlink: 'syz.4.4265': attribute type 1 has an invalid length.
[  317.160284][T15783] 8021q: adding VLAN 0 to HW filter on device bond3
[  317.534462][T15818] loop3: detected capacity change from 0 to 7
[  317.536981][T15818] Dev loop3: unable to read RDB block 7
[  317.537001][T15818]  loop3: unable to read partition table
[  317.537087][T15818] loop3: partition table beyond EOD, truncated
[  317.537103][T15818] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5)
[  317.887464][T15842] loop5: detected capacity change from 0 to 128
[  317.894647][T15837] loop4: detected capacity change from 0 to 40427
[  317.901479][T15837] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  317.901493][T15837] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  317.911082][T15837] F2FS-fs (loop4): invalid crc value
[  317.915170][T15842] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  317.915345][T15842] ext4 filesystem being mounted at /938/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  317.958371][ T8056] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  317.971305][T15837] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  317.995249][T15837] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  317.995275][T15837] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  318.076344][ T7757] syz-executor: attempt to access beyond end of device
[  318.076344][ T7757] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  318.087888][ T7757] CPU: 1 UID: 0 PID: 7757 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  318.087921][ T7757] Tainted: [L]=SOFTLOCKUP
[  318.087925][ T7757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  318.087930][ T7757] Call Trace:
[  318.087934][ T7757]  <TASK>
[  318.087938][ T7757]  dump_stack_lvl+0xe8/0x150
[  318.087954][ T7757]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  318.087975][ T7757]  f2fs_write_end_bio+0x1211/0x16e0
[  318.087986][ T7757]  ? blkg_put+0x22/0x240
[  318.088003][ T7757]  __submit_merged_bio+0x258/0x6a0
[  318.088014][ T7757]  ? rcu_is_watching+0x16/0xb0
[  318.088026][ T7757]  f2fs_submit_merged_write+0x27d/0x380
[  318.088039][ T7757]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  318.088056][ T7757]  f2fs_sync_node_pages+0x1055/0x1210
[  318.088075][ T7757]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  318.088127][ T7757]  f2fs_write_checkpoint+0xf91/0x2710
[  318.088138][ T7757]  ? __lock_acquire+0x747/0x2de0
[  318.088158][ T7757]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  318.088188][ T7757]  kill_f2fs_super+0x2dd/0x700
[  318.088200][ T7757]  ? __pfx_kill_f2fs_super+0x10/0x10
[  318.088212][ T7757]  ? call_rcu+0x64d/0x8b0
[  318.088221][ T7757]  ? lockdep_hardirqs_on+0x7b/0x110
[  318.088237][ T7757]  deactivate_locked_super+0xbe/0x110
[  318.088249][ T7757]  cleanup_mnt+0x3d3/0x460
[  318.088259][ T7757]  task_work_run+0x1d9/0x270
[  318.088269][ T7757]  ? __pfx_task_work_run+0x10/0x10
[  318.088280][ T7757]  exit_to_user_mode_loop+0x204/0x770
[  318.088289][ T7757]  ? rcu_is_watching+0x16/0xb0
[  318.088299][ T7757]  do_syscall_64+0x328/0x520
[  318.088309][ T7757]  ? trace_irq_disable+0x3b/0x140
[  318.088317][ T7757]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.088326][ T7757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.088333][ T7757] RIP: 0033:0x7ff41f39f397
[  318.088341][ T7757] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  318.088347][ T7757] RSP: 002b:00007fffc94bd538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  318.088357][ T7757] RAX: 0000000000000000 RBX: 00007ff41f4344bb RCX: 00007ff41f39f397
[  318.088362][ T7757] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc94bd5f0
[  318.088366][ T7757] RBP: 00007fffc94bd5f0 R08: 00007fffc94be5f0 R09: 00000000ffffffff
[  318.088371][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc94be680
[  318.088376][ T7757] R13: 00007ff41f4344bb R14: 000000000004a217 R15: 00007fffc94be6c0
[  318.088388][ T7757]  </TASK>
[  318.088456][ T7757] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  319.303277][T15896] loop5: detected capacity change from 0 to 8192
[  319.364936][T15896] Bluetooth: hci0: unsupported parameter 16642
[  319.364948][T15896] Bluetooth: hci0: invalid len left 4, exp >= 188
[  319.781289][T15910] loop5: detected capacity change from 0 to 164
[  320.062880][T15912] rock: directory entry would overflow storage
[  320.062948][T15912] rock: sig=0x4f50, size=4, remaining=3
[  320.063015][T15912] iso9660: Corrupted directory entry in block 5 of inode 1792
[  320.066178][T15912] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4320'.
[  320.387545][   T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  320.558125][   T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  320.559390][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.559428][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  320.559467][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.614894][T15930] xt_time: invalid argument - start or stop time greater than 23:59:59
[  321.336996][T15954] trusted_key: encrypted_key: keyword 'nea' not recognized
[  321.435547][   T10] rtsx_usb 6-1:1.0: probe with driver rtsx_usb failed with error -110
[  321.438654][T15960] loop4: detected capacity change from 0 to 8192
[  321.635279][T15974] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  321.689373][T15978] loop4: detected capacity change from 0 to 4096
[  321.694568][T15978] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  321.719193][T15978] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  321.721417][T15978] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  322.810326][T15999] loop4: detected capacity change from 0 to 128
[  322.838295][T15999] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  322.838771][T15999] ext4 filesystem being mounted at /1124/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  322.874651][ T7757] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  323.039234][    T9] usb 6-1: USB disconnect, device number 28
[  323.174714][T16016] loop5: detected capacity change from 0 to 128
[  323.183750][T16016] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  323.186150][T16016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.775322][T16026] fuse: fd is not a fuse device
[  324.213881][   T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  324.332631][T16048] loop3: detected capacity change from 0 to 7
[  324.333914][T16048] Dev loop3: unable to read RDB block 7
[  324.334075][T16048]  loop3: unable to read partition table
[  324.334219][T16048] loop3: partition table beyond EOD, truncated
[  324.334261][T16048] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5)
[  324.374617][   T25] usb 5-1: Using ep0 maxpacket: 16
[  324.378492][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  324.378531][   T25] usb 5-1: New USB device found, idVendor=0e8d, idProduct=7102, bcdDevice=93.12
[  324.390640][   T25] usb 5-1: config 7 has an invalid interface number: 201 but max is 0
[  324.390654][   T25] usb 5-1: config 7 has no interface number 0
[  324.392309][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.392320][   T25] usb 5-1: Product: syz
[  324.392326][   T25] usb 5-1: Manufacturer: syz
[  324.392331][   T25] usb 5-1: SerialNumber: syz
[  324.622524][   T25] option 5-1:7.201: GSM modem (1-port) converter detected
[  324.626360][   T25] usb 5-1: USB disconnect, device number 27
[  324.630273][   T25] option 5-1:7.201: device disconnected
[  324.908797][    T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  325.070551][    T9] usb 6-1: Using ep0 maxpacket: 16
[  325.071223][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  325.072128][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.072140][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.072149][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  325.072167][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.073515][    T9] usb 6-1: config 0 descriptor??
[  325.426701][T16085] loop4: detected capacity change from 0 to 1024
[  325.524340][    T9] hid_parser_main: 10 callbacks suppressed
[  325.524354][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.524365][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.524374][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.524382][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.524391][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.524399][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.524408][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.524416][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.524425][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.524433][    T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  325.537660][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0006/input/input29
[  325.616137][    T9] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  325.744514][ T5654] usb 6-1: USB disconnect, device number 29
[  325.815770][T16098] IPVS: persistence engine module ip_vs_pe_ not found
[  327.010554][T16128] loop4: detected capacity change from 0 to 32768
[  327.283877][T16134] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4421'.
[  327.287869][T16134] vlan0: entered promiscuous mode
[  327.341088][T16136] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4422'.
[  327.537837][T16132] loop4: detected capacity change from 0 to 40427
[  327.549307][T16132] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  327.549321][T16132] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  327.554965][T16132] F2FS-fs (loop4): invalid crc value
[  327.621538][T16132] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  327.637009][T16132] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  327.637034][T16132] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  327.656131][    T9] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  327.842798][    T9] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  327.881550][    T9] usb 6-1: config 8 has an invalid interface number: 188 but max is 0
[  327.881667][    T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  327.881724][    T9] usb 6-1: config 8 has no interface number 0
[  327.881886][    T9] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  327.882261][    T9] usb 6-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  327.909864][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.909891][    T9] usb 6-1: Product: syz
[  327.909902][    T9] usb 6-1: Manufacturer: syz
[  327.909911][    T9] usb 6-1: SerialNumber: syz
[  328.172177][    T9] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  328.174905][    T9] usb 6-1: USB disconnect, device number 30
[  329.077180][T16162] loop4: detected capacity change from 0 to 1024
[  329.085094][T16162] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  329.086040][T16162] hfsplus: hfsplus: invalid btree header node
[  329.086047][T16162] hfsplus: (loop4): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only.
[  329.086055][T16162] hfsplus: Run fsck.hfsplus to repair.
[  329.321774][T16172] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  329.762014][    T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  329.923040][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  329.924092][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.926247][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.926265][    T9] usb 6-1: Product: syz
[  329.926275][    T9] usb 6-1: Manufacturer: syz
[  329.926284][    T9] usb 6-1: SerialNumber: syz
[  330.817132][T16211] jffs2: notice: (16211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  331.013185][    T9] cdc_ncm 6-1:1.0: bind() failure
[  331.016298][    T9] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  331.016679][    T9] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  331.017250][    T9] usbtest 6-1:1.1: probe with driver usbtest failed with error -71
[  331.022174][    T9] usb 6-1: USB disconnect, device number 31
[  331.403445][T16214] nbd: must specify at least one socket
[  331.639360][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4465'.
[  332.443637][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  332.443818][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  332.512730][ T4989] Bluetooth: hci1: unexpected event 0x2f length: 509 > 255
[  332.517425][T16268] jffs2: notice: (16268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  333.116492][ T4989] Bluetooth: hci1: unexpected event 0x2f length: 509 > 255
[  333.127367][T16275] jffs2: notice: (16275) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  333.254807][T16278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4486'.
[  333.514442][   T10] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  333.676698][   T10] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  333.677629][   T10] usb 6-1: config 8 has an invalid interface number: 188 but max is 0
[  333.677646][   T10] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  333.677659][   T10] usb 6-1: config 8 has no interface number 0
[  333.677685][   T10] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  333.677702][   T10] usb 6-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  333.679716][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.679726][   T10] usb 6-1: Product: syz
[  333.679732][   T10] usb 6-1: Manufacturer: syz
[  333.679738][   T10] usb 6-1: SerialNumber: syz
[  333.917370][   T10] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  333.920152][   T10] usb 6-1: USB disconnect, device number 32
[  334.864195][T16325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4508'.
[  334.868442][T16325] vlan0: entered promiscuous mode
[  335.169247][T16329] loop4: detected capacity change from 0 to 2048
[  335.195825][T16329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.218233][ T7757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.249580][T16334] loop4: detected capacity change from 0 to 128
[  335.254466][T16334] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  335.254654][T16334] ext4 filesystem being mounted at /1182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.287417][ T7757] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  335.340373][T16337] jffs2: notice: (16337) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  335.479245][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4516'.
[  335.479259][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4516'.
[  335.479264][T16346] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[  335.479270][T16346] iwpm_hello_cb: Unable to parse nlmsg
[  336.128395][T16366] loop4: detected capacity change from 0 to 128
[  336.235135][T16366] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  336.235697][T16366] ext4 filesystem being mounted at /1188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.268512][ T7757] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.445940][T16426] loop4: detected capacity change from 0 to 128
[  337.450481][T16426] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  337.465006][T16426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  338.299988][ T4989] Bluetooth: unknown link type 162
[  338.300005][ T4989] Bluetooth: hci0: connection err: -111
[  339.530765][T16507] tmpfs: Bad value for 'mpol'
[  340.152379][T16529] loop5: detected capacity change from 0 to 128
[  340.157347][T16529] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  340.158641][T16529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  340.546600][   T34] audit: type=1326 audit(1791037745.389:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.4612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x7ffc0000
[  340.546627][   T34] audit: type=1326 audit(1791037745.389:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.4612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x7ffc0000
[  340.547750][   T34] audit: type=1326 audit(1791037745.389:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.4612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x7ffc0000
[  340.547874][   T34] audit: type=1326 audit(1791037745.389:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.4612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x7ffc0000
[  340.547951][   T34] audit: type=1326 audit(1791037745.389:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.4612" exe="/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7ff41f39e159 code=0x7ffc0000
[  340.548082][   T34] audit: type=1326 audit(1791037745.389:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.4612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x7ffc0000
[  340.548186][   T34] audit: type=1326 audit(1791037745.389:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.4612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x7ffc0000
[  340.548472][   T34] audit: type=1326 audit(1791037745.389:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.4612" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff41f39e159 code=0x7ffc0000
[  340.548575][   T34] audit: type=1326 audit(1791037745.389:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.4612" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff41f39e159 code=0x7ffc0000
[  340.646940][T16564] loop4: detected capacity change from 0 to 128
[  340.652899][T16564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  340.662502][T16564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  340.805932][ T5669] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  340.968581][ T5669] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  340.970563][ T5669] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  340.970586][ T5669] usb 6-1: config 0 interface 0 has no altsetting 0
[  340.970608][ T5669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.975963][ T5669] usb 6-1: config 0 descriptor??
[  340.978718][T16558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  341.420420][ T5669] hid_parser_main: 5 callbacks suppressed
[  341.420432][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.420444][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.420453][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.420462][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.420470][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.420479][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.420489][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.420498][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.420507][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.420516][ T5669] lenovo 0003:17EF:6062.0007: unknown main item tag 0x0
[  341.469470][ T5669] lenovo 0003:17EF:6062.0007: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.5-1/input0
[  341.642773][ T5669] usb 6-1: USB disconnect, device number 33
[  341.691882][T16589] loop4: detected capacity change from 0 to 128
[  341.702652][T16589] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  341.705830][T16589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  342.034867][    T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  342.195724][    T9] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  342.196784][    T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.196829][    T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  342.196844][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  342.196865][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.200141][    T9] usb 5-1: config 0 descriptor??
[  342.307136][T16597] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4629'.
[  342.454429][T16603] pim6reg: entered allmulticast mode
[  342.472433][T16605] loop5: detected capacity change from 0 to 64
[  342.496363][T16605] BFS-fs: bfs_fill_super(): Impossible last inode number 24379551 > 513 on loop5
[  342.640488][    T9] hid-multitouch 0003:0EEF:72C4.0008: unbalanced collection at end of report description
[  342.640936][    T9] hid-multitouch 0003:0EEF:72C4.0008: probe with driver hid-multitouch failed with error -22
[  342.851986][   T33] usb 5-1: USB disconnect, device number 28
[  343.334679][T16633] pim6reg: entered allmulticast mode
[  343.613295][T16660] loop4: detected capacity change from 0 to 128
[  343.629055][T16660] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  343.629296][T16660] ext4 filesystem being mounted at /1232/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.668634][ T7757] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  343.876210][T16682] loop5: detected capacity change from 0 to 128
[  343.887469][T16682] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  343.887686][T16682] ext4 filesystem being mounted at /1031/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.912451][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4668'.
[  343.928798][ T8056] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  344.030124][T16694] loop5: detected capacity change from 0 to 128
[  344.037331][T16694] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  344.041329][T16694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.230575][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4697'.
[  345.292269][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4699'.
[  345.328958][T16753] gretap1: entered promiscuous mode
[  345.794399][T16769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.143979][T16797] loop4: detected capacity change from 0 to 128
[  346.158311][T16797] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  346.163659][T16797] ext4 filesystem being mounted at /1250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.192722][ T7757] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  346.425572][T16818] xt_hashlimit: max too large, truncated to 1048576
[  346.425844][T16818] No such timeout policy "syz1"
[  346.599888][   T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  346.761017][   T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  346.762069][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  346.762091][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  346.762112][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.764382][   T10] usb 5-1: config 0 descriptor??
[  346.765026][T16812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  346.814338][ T5669] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  346.996964][ T5669] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  346.998054][ T5669] usb 6-1: config 8 has an invalid interface number: 188 but max is 0
[  346.998072][ T5669] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  346.998084][ T5669] usb 6-1: config 8 has no interface number 0
[  346.998112][ T5669] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  346.998129][ T5669] usb 6-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  347.000646][ T5669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.000664][ T5669] usb 6-1: Product: syz
[  347.000673][ T5669] usb 6-1: Manufacturer: syz
[  347.000682][ T5669] usb 6-1: SerialNumber: syz
[  347.198208][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  347.198272][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  347.206336][   T10] usb 5-1: USB disconnect, device number 29
[  347.272686][ T5669] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  347.278684][ T5669] usb 6-1: USB disconnect, device number 34
[  348.014516][T16860] loop5: detected capacity change from 0 to 32768
[  348.019566][T16860] OCFS2: ERROR (device loop5): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 65: chain list count 0
[  348.019581][T16860] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  348.019585][T16860] OCFS2: File system is now read-only.
[  348.019589][T16860] (syz.5.4751,16860,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[  348.019633][T16860] (syz.5.4751,16860,1):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  348.019642][T16860] (syz.5.4751,16860,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  348.019650][T16860] (syz.5.4751,16860,1):ocfs2_initialize_super:2194 ERROR: status = -30
[  348.019691][T16860] (syz.5.4751,16860,1):ocfs2_fill_super:1177 ERROR: status = -30
[  348.152255][T16865] io-wq is not configured for unbound workers
[  348.502661][ T5669] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  348.548599][T16897] loop4: detected capacity change from 0 to 1024
[  348.685116][ T5669] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  348.686323][ T5669] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  348.686345][ T5669] usb 6-1: config 0 interface 0 has no altsetting 0
[  348.686367][ T5669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.688587][ T5669] usb 6-1: config 0 descriptor??
[  348.689394][T16873] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  348.762403][T16907] ip_tables: iptables: counters copy to user failed while replacing table
[  348.820096][T16908] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4773'.
[  349.124542][ T5669] usbhid 6-1:0.0: can't add hid device: -71
[  349.124589][ T5669] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  349.128401][ T5669] usb 6-1: USB disconnect, device number 35
[  349.515195][T16943] 9pnet: Found fid 0 not clunked
[  349.802163][T16961] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  349.845261][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4800'.
[  350.151117][T16984] gretap1: entered promiscuous mode
[  350.198229][T16986] loop4: detected capacity change from 0 to 512
[  350.228254][T16986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.228342][T16986] ext4 filesystem being mounted at /1277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.251132][T16991] cgroup2: Unknown parameter '18446744073709551615'
[  350.530382][T16997] 9pnet: Found fid 0 not clunked
[  351.104770][ T7757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.187199][T17010] loop4: detected capacity change from 0 to 1024
[  351.188045][T17010] EXT4-fs: Ignoring removed nomblk_io_submit option
[  351.188082][T17010] EXT4-fs: Ignoring removed nomblk_io_submit option
[  351.201292][T17010] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  351.227605][T17010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.266741][ T7757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.308145][T17014] loop4: detected capacity change from 0 to 16
[  351.312757][T17014] erofs (device loop4): mounted with root inode @ nid 36.
[  351.883442][T17055] loop4: detected capacity change from 0 to 256
[  351.886942][T17055] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  352.058197][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4842'.
[  352.157270][T17068] gretap2: entered promiscuous mode
[  352.227528][T17074] geneve1: entered promiscuous mode
[  352.403213][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4851'.
[  353.662615][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'.
[  353.814711][T17110] loop5: detected capacity change from 0 to 128
[  353.820273][T17110] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  353.823625][T17110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  353.870373][T17112] loop5: detected capacity change from 0 to 16
[  353.875727][T17112] erofs (device loop5): mounted with root inode @ nid 36.
[  353.970016][T17118] loop5: detected capacity change from 0 to 16
[  353.975217][T17118] erofs (device loop5): mounted with root inode @ nid 36.
[  354.274262][T17126] loop4: detected capacity change from 0 to 16
[  354.280621][T17126] erofs (device loop4): mounted with root inode @ nid 36.
[  354.410561][T17132] loop4: detected capacity change from 0 to 16
[  354.413011][T17132] erofs (device loop4): mounted with root inode @ nid 36.
[  354.475227][T17134] loop4: detected capacity change from 0 to 128
[  354.478978][T17134] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  354.480231][T17134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  354.576603][T17138] geneve1: entered promiscuous mode
[  354.697598][T17153] loop4: detected capacity change from 0 to 512
[  354.711272][T17153] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.4885: bg 0: block 5: invalid block bitmap
[  354.711296][T17153] loop4: lost filesystem error report for type 5 error -117
[  354.714470][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  354.714481][    C0] EXT4-fs (loop4): initial error at time 1791037758: ext4_validate_block_bitmap:436
[  354.714491][    C0] EXT4-fs (loop4): last error at time 1791037758: ext4_validate_block_bitmap:436
[  354.716931][T17153] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  354.716948][T17153] loop4: lost filesystem error report for type 5 error -117
[  354.717155][T17153] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4885: invalid indirect mapped block 3 (level 2)
[  354.717169][T17153] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  354.717351][T17153] EXT4-fs (loop4): 1 orphan inode deleted
[  354.717359][T17153] EXT4-fs (loop4): 1 truncate cleaned up
[  354.718179][T17153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.829577][ T7757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.020786][T17172] loop4: detected capacity change from 0 to 1024
[  355.137284][T17181] loop5: detected capacity change from 0 to 16
[  355.159372][T17181] erofs (device loop5): mounted with root inode @ nid 36.
[  355.313242][T17192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.313310][T17192] ext4 filesystem being mounted at /1315/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.369852][T17192] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  355.386402][T17192] Quota error (device loop4): write_blk: dquota write failed
[  355.386469][T17192] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  355.386484][T17192] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.4903: Failed to acquire dquot type 1
[  355.432175][ T7757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.534384][T17201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.534444][T17201] ext4 filesystem being mounted at /1317/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.781492][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4910'.
[  355.781505][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4910'.
[  355.829552][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4910'.
[  355.829565][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4910'.
[  355.847561][T13787] netdevsim netdevsim2 eth8: set [0, 0] type 1 family 0 port 8472 - 0
[  355.847587][T13787] netdevsim netdevsim2 eth7: set [0, 0] type 1 family 0 port 8472 - 0
[  355.847599][T13787] netdevsim netdevsim2 eth6: set [0, 0] type 1 family 0 port 8472 - 0
[  355.847611][T13787] netdevsim netdevsim2 eth5: set [0, 0] type 1 family 0 port 8472 - 0
[  355.854125][T13787] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  355.854158][T13787] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.854172][T13787] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.854184][T13787] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  356.475251][ T7757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.604590][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4913'.
[  357.093269][T17252] syz.5.4920: attempt to access beyond end of device
[  357.093269][T17252] loop5: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  357.093590][T17252] syz.5.4920: attempt to access beyond end of device
[  357.093590][T17252] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  357.093727][   T34] audit: type=1800 audit(1791037760.870:73): pid=17252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4920" name="file2" dev="loop5" ino=1048761 res=0 errno=0
[  357.097590][T17252] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00)
[  357.097640][T17252] FAT-fs (loop5): Filesystem has been set read-only
[  357.097661][T17252] syz.5.4920: attempt to access beyond end of device
[  357.097661][T17252] loop5: rw=8388608, sector=17179852715, nr_sectors = 1 limit=512
[  357.100167][T17252] syz.5.4920: attempt to access beyond end of device
[  357.100167][T17252] loop5: rw=2049, sector=17179852706, nr_sectors = 8 limit=512
[  357.358713][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4926'.
[  357.456854][T17269] netlink: 'syz.3.4928': attribute type 2 has an invalid length.
[  358.016007][T17276] xt_IDLETIMER: timeout value is too big
[  358.649640][T17295] set_capacity_and_notify: 3 callbacks suppressed
[  358.649651][T17295] loop5: detected capacity change from 0 to 1024
[  358.693508][T17295] loop5: detected capacity change from 0 to 4096
[  358.694786][T17295] ntfs3(loop5): Primary boot: invalid bytes per MFT record 0 (0).
[  358.694962][T17295] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  358.711836][T17295] netlink: 'syz.5.4938': attribute type 2 has an invalid length.
[  358.750284][T17295] loop5: detected capacity change from 0 to 1024
[  358.755569][T17295] EXT4-fs: Ignoring removed bh option
[  358.783731][T17295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.860889][T17295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.962648][T17307] loop5: detected capacity change from 0 to 1024
[  359.014985][T17307] loop5: detected capacity change from 0 to 4096
[  359.018430][T17307] ntfs3(loop5): Primary boot: invalid bytes per MFT record 0 (0).
[  359.021366][T17307] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  359.057308][T17307] netlink: 'syz.5.4943': attribute type 2 has an invalid length.
[  359.094412][T17307] loop5: detected capacity change from 0 to 1024
[  359.105693][T17307] EXT4-fs: Ignoring removed bh option
[  359.122439][T17307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.151206][T17307] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.174552][T17316] netlink: zone id is out of range
[  359.174561][T17316] netlink: zone id is out of range
[  359.174564][T17316] netlink: zone id is out of range
[  359.174567][T17316] netlink: zone id is out of range
[  359.174570][T17316] netlink: zone id is out of range
[  359.174603][T17316] netlink: zone id is out of range
[  359.174839][T17316] netlink: zone id is out of range
[  359.174844][T17316] netlink: zone id is out of range
[  359.174847][T17316] netlink: zone id is out of range
[  359.174850][T17316] netlink: zone id is out of range
[  360.192682][   T34] audit: type=1326 audit(1791037763.770:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.4.4942" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x7fc00000
[  360.587144][T17342] loop5: detected capacity change from 0 to 1024
[  360.614967][T17342] loop5: detected capacity change from 0 to 4096
[  360.616376][T17342] ntfs3(loop5): Primary boot: invalid bytes per MFT record 0 (0).
[  360.618806][T17342] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  360.630141][T17342] netlink: 'syz.5.4957': attribute type 2 has an invalid length.
[  360.642996][T17342] loop5: detected capacity change from 0 to 1024
[  360.643492][T17342] EXT4-fs: Ignoring removed bh option
[  360.672713][T17342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.703878][T17342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.042948][ T1294] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  361.203429][ T1294] usb 6-1: Using ep0 maxpacket: 8
[  361.204095][ T1294] usb 6-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40
[  361.205267][ T1294] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10
[  361.205286][ T1294] usb 6-1: config 1 interface 0 has no altsetting 0
[  361.207389][ T1294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.207399][ T1294] usb 6-1: Product: syz
[  361.207404][ T1294] usb 6-1: Manufacturer: syz
[  361.207410][ T1294] usb 6-1: SerialNumber: syz
[  361.351022][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4963'.
[  361.351036][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4963'.
[  361.351169][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4963'.
[  361.351175][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4963'.
[  361.401206][T17361] program syz.4.4964 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  361.436109][ T1294] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input30
[  361.448797][ T5025] bcm5974 6-1:1.0: could not read from device
[  361.454899][ T5025] bcm5974 6-1:1.0: could not read from device
[  361.464403][ T1294] usb 6-1: USB disconnect, device number 36
[  361.465257][ T5025] bcm5974 6-1:1.0: could not read from device
[  361.485537][ T5025] bcm5974 6-1:1.0: could not read from device
[  361.525647][T14348] udevd[14348]: Error opening device "/dev/input/event3": No such file or directory
[  361.525742][T14348] udevd[14348]: Unable to EVIOCGABS device "/dev/input/event3"
[  361.525847][T14348] udevd[14348]: Unable to EVIOCGABS device "/dev/input/event3"
[  361.526039][T14348] udevd[14348]: Unable to EVIOCGABS device "/dev/input/event3"
[  361.526108][T14348] udevd[14348]: Unable to EVIOCGABS device "/dev/input/event3"
[  361.917938][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4972'.
[  362.063395][T17384] xt_CT: No such helper "syz1"
[  362.088922][T17384] loop5: detected capacity change from 0 to 2048
[  362.093148][T17384] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  362.093165][T17384] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  362.093176][T17384] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  362.093188][T17384] EXT4-fs (loop5): group descriptors corrupted!
[  363.184161][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5018'.
[  363.259227][T17482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.259306][T17482] ext4 filesystem being mounted at /1129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.647331][T17509] netlink: 'syz.3.5032': attribute type 2 has an invalid length.
[  364.117979][ T8056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.381005][T17548] netlink: 'syz.5.5050': attribute type 11 has an invalid length.
[  364.699215][ T1294] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  364.859552][ T1294] usb 6-1: Using ep0 maxpacket: 8
[  364.860062][ T1294] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  364.860970][ T1294] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  364.860981][ T1294] usb 6-1: config 179 has no interface number 0
[  364.860998][ T1294] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  364.861009][ T1294] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  364.861021][ T1294] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  364.861030][ T1294] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  364.861041][ T1294] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  364.861059][ T1294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.862912][T17550] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  365.089564][ T5647] usb 6-1: USB disconnect, device number 37
[  365.089571][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  365.089593][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  365.850451][T17587] set_capacity_and_notify: 1 callbacks suppressed
[  365.850461][T17587] loop5: detected capacity change from 0 to 32768
[  365.861940][T17587] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  365.877133][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5067'.
[  365.899950][T17587] XFS (loop5): Ending clean mount
[  365.939952][ T8056] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  367.495946][T17639] loop5: detected capacity change from 0 to 1024
[  367.539607][T17639] loop5: detected capacity change from 0 to 4096
[  367.548936][T17639] ntfs3(loop5): Primary boot: invalid bytes per MFT record 0 (0).
[  367.551436][T17639] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  367.571790][T17639] netlink: 'syz.5.5081': attribute type 2 has an invalid length.
[  367.619525][T17641] net_ratelimit: 128 callbacks suppressed
[  367.619539][T17641] ip_tables: iptables: counters copy to user failed while replacing table
[  367.633662][T17641] xt_CT: No such helper "syz1"
[  367.738095][   T34] audit: type=1326 audit(1791037770.823:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.738128][   T34] audit: type=1326 audit(1791037770.823:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.739245][   T34] audit: type=1326 audit(1791037770.823:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.739265][   T34] audit: type=1326 audit(1791037770.823:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.739281][   T34] audit: type=1326 audit(1791037770.823:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.739734][   T34] audit: type=1326 audit(1791037770.823:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.739753][   T34] audit: type=1326 audit(1791037770.823:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.740061][   T34] audit: type=1326 audit(1791037770.823:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.740079][   T34] audit: type=1326 audit(1791037770.823:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.740095][   T34] audit: type=1326 audit(1791037770.823:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.5.5085" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f564679e159 code=0x7ffc0000
[  367.883579][T17654] loop5: detected capacity change from 0 to 1024
[  367.928247][T17654] loop5: detected capacity change from 0 to 4096
[  367.929109][T17654] ntfs3(loop5): Primary boot: invalid bytes per MFT record 0 (0).
[  367.929196][T17654] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  367.932047][T17654] netlink: 'syz.5.5088': attribute type 2 has an invalid length.
[  368.071652][T17668] netlink: 35 bytes leftover after parsing attributes in process `syz.4.5092'.
[  368.138440][T17676] ip_tables: iptables: counters copy to user failed while replacing table
[  368.176799][T17676] xt_CT: No such helper "syz1"
[  368.439983][T17704] ip_tables: iptables: counters copy to user failed while replacing table
[  368.460261][T17704] xt_CT: No such helper "syz1"
[  368.470035][T17704] loop5: detected capacity change from 0 to 2048
[  368.471279][T17704] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  368.471291][T17704] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  368.471297][T17704] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  368.471305][T17704] EXT4-fs (loop5): group descriptors corrupted!
[  368.618298][T17713] loop5: detected capacity change from 0 to 128
[  368.629210][T17713] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  368.629422][T17713] ext4 filesystem being mounted at /1172/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  368.654025][ T8056] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  368.856498][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5114'.
[  368.896998][T17722] ip_tables: iptables: counters copy to user failed while replacing table
[  368.922917][T17722] xt_CT: No such helper "syz1"
[  368.939386][T17722] loop5: detected capacity change from 0 to 2048
[  368.946011][T17722] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  368.946025][T17722] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  368.946032][T17722] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  368.946039][T17722] EXT4-fs (loop5): group descriptors corrupted!
[  369.931851][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5121'.
[  369.966704][T17749] loop5: detected capacity change from 0 to 128
[  369.981553][T17749] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  369.983190][T17749] ext4 filesystem being mounted at /1178/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  370.042254][ T8056] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  370.446664][T17782] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.465122][T17780] loop5: detected capacity change from 0 to 40427
[  370.466384][T17780] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  370.466398][T17780] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  370.469876][T17780] F2FS-fs (loop5): invalid crc value
[  370.528410][T17780] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  370.547744][T17780] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  370.547759][T17780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  370.548413][T17782] 8021q: adding VLAN 0 to HW filter on device bond3
[  370.758234][T13787] ip6_tunnel: K xmit: Local address not yet configured!
[  370.759156][T13787] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  371.585127][T17802] 8021q: adding VLAN 0 to HW filter on device bond2
[  371.588219][T17802] syz_tun: entered promiscuous mode
[  371.591827][ T5426] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  371.642837][T17805] FAULT_INJECTION: forcing a failure.
[  371.642837][T17805] name failslab, interval 1, probability 0, space 0, times 0
[  371.642879][T17805] CPU: 1 UID: 0 PID: 17805 Comm: syz.5.5140 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  371.642898][T17805] Tainted: [L]=SOFTLOCKUP
[  371.642903][T17805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  371.642912][T17805] Call Trace:
[  371.642918][T17805]  <TASK>
[  371.642925][T17805]  dump_stack_lvl+0xe8/0x150
[  371.642951][T17805]  should_fail_ex+0x410/0x560
[  371.642971][T17805]  should_failslab+0xa8/0x100
[  371.642989][T17805]  ? alloc_empty_file+0x5b/0x1d0
[  371.643007][T17805]  kmem_cache_alloc_noprof+0xa1/0x600
[  371.643021][T17805]  ? stack_depot_save_flags+0x33/0x7f0
[  371.643037][T17805]  ? alloc_empty_file+0x5b/0x1d0
[  371.643056][T17805]  ? kmem_cache_alloc_noprof+0x156/0x600
[  371.643072][T17805]  alloc_empty_file+0x5b/0x1d0
[  371.643091][T17805]  path_openat+0xa2/0x1d60
[  371.643111][T17805]  ? __lock_acquire+0x747/0x2de0
[  371.643132][T17805]  do_file_open+0x23e/0x4a0
[  371.643148][T17805]  ? __pfx_do_file_open+0x10/0x10
[  371.643174][T17805]  ? _raw_spin_unlock+0x28/0x50
[  371.643190][T17805]  ? alloc_fd+0x651/0x6c0
[  371.643216][T17805]  do_sys_openat2+0x115/0x200
[  371.643235][T17805]  ? __se_sys_futex+0x3a8/0x450
[  371.643253][T17805]  ? __pfx_do_sys_openat2+0x10/0x10
[  371.643272][T17805]  ? ksys_write+0x242/0x270
[  371.643285][T17805]  ? __pfx___se_sys_futex+0x10/0x10
[  371.643302][T17805]  ? rcu_is_watching+0x16/0xb0
[  371.643323][T17805]  __x64_sys_openat+0x138/0x170
[  371.643344][T17805]  do_syscall_64+0x166/0x520
[  371.643361][T17805]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.643377][T17805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.643390][T17805] RIP: 0033:0x7f564675e98e
[  371.643403][T17805] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  371.643443][T17805] RSP: 002b:00007f5647693ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  371.643460][T17805] RAX: ffffffffffffffda RBX: 00007f56476946c0 RCX: 00007f564675e98e
[  371.643470][T17805] RDX: 0000000000000002 RSI: 00007f5647693f90 RDI: ffffffffffffff9c
[  371.643478][T17805] RBP: 00007f564683506b R08: 0000000000000000 R09: 0000000000000000
[  371.643486][T17805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.643493][T17805] R13: 00007f5646a26038 R14: 00007f5646a25fa0 R15: 00007ffe099576b8
[  371.643535][T17805]  </TASK>
[  371.772665][ T4989] Bluetooth: unknown link type 162
[  371.772688][ T4989] Bluetooth: hci0: connection err: -111
[  372.428892][T13787] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  372.429237][T13787] ip6_tunnel: K xmit: Local address not yet configured!
[  373.478134][T17851] loop5: detected capacity change from 0 to 256
[  373.530273][T17848] netlink: 'syz.3.5165': attribute type 2 has an invalid length.
[  373.607224][T17856] x_tables: duplicate underflow at hook 3
[  373.614257][T17858] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  373.713231][T17866] loop5: detected capacity change from 0 to 1024
[  373.804971][T17866] loop5: detected capacity change from 0 to 4096
[  373.806149][T17866] ntfs3(loop5): Primary boot: invalid bytes per MFT record 0 (0).
[  373.806369][T17866] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  373.821745][T17866] netlink: 'syz.5.5174': attribute type 2 has an invalid length.
[  373.828073][T17866] loop5: detected capacity change from 0 to 1024
[  373.828532][T17866] EXT4-fs: Ignoring removed bh option
[  373.855738][T17866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.897469][ T5669] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  373.918759][T17866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.963380][T17872] netlink: 'syz.3.5176': attribute type 2 has an invalid length.
[  373.981107][T17875] FAULT_INJECTION: forcing a failure.
[  373.981107][T17875] name failslab, interval 1, probability 0, space 0, times 0
[  373.981136][T17875] CPU: 0 UID: 0 PID: 17875 Comm: syz.5.5177 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  373.981154][T17875] Tainted: [L]=SOFTLOCKUP
[  373.981159][T17875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  373.981167][T17875] Call Trace:
[  373.981173][T17875]  <TASK>
[  373.981179][T17875]  dump_stack_lvl+0xe8/0x150
[  373.981204][T17875]  should_fail_ex+0x410/0x560
[  373.981225][T17875]  should_failslab+0xa8/0x100
[  373.981279][T17875]  __kmalloc_cache_noprof+0xa3/0x600
[  373.981296][T17875]  ? proc_thread_self_get_link+0xfc/0x190
[  373.981311][T17875]  ? proc_thread_self_get_link+0xfc/0x190
[  373.981327][T17875]  ? __task_pid_nr_ns+0x399/0x470
[  373.981344][T17875]  proc_thread_self_get_link+0xfc/0x190
[  373.981360][T17875]  ? __pfx_proc_thread_self_get_link+0x10/0x10
[  373.981376][T17875]  pick_link+0x782/0xfe0
[  373.981433][T17875]  step_into_slowpath+0x58a/0x820
[  373.981457][T17875]  ? __pfx_step_into_slowpath+0x10/0x10
[  373.981484][T17875]  link_path_walk+0xd5e/0x1910
[  373.981518][T17875]  path_openat+0x1c9/0x1d60
[  373.981547][T17875]  do_file_open+0x23e/0x4a0
[  373.981567][T17875]  ? __pfx_do_file_open+0x10/0x10
[  373.981597][T17875]  ? _raw_spin_unlock+0x28/0x50
[  373.981614][T17875]  ? alloc_fd+0x651/0x6c0
[  373.981639][T17875]  do_sys_openat2+0x115/0x200
[  373.981657][T17875]  ? __se_sys_futex+0x3a8/0x450
[  373.981698][T17875]  ? __pfx_do_sys_openat2+0x10/0x10
[  373.981716][T17875]  ? ksys_write+0x242/0x270
[  373.981730][T17875]  ? rcu_is_watching+0x16/0xb0
[  373.981751][T17875]  __x64_sys_openat+0x138/0x170
[  373.981773][T17875]  do_syscall_64+0x166/0x520
[  373.981792][T17875]  ? trace_irq_disable+0x3b/0x140
[  373.981807][T17875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.981825][T17875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.981838][T17875] RIP: 0033:0x7f564675e98e
[  373.981851][T17875] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  373.981863][T17875] RSP: 002b:00007f5647693ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  373.981879][T17875] RAX: ffffffffffffffda RBX: 00007f56476946c0 RCX: 00007f564675e98e
[  373.981888][T17875] RDX: 0000000000000002 RSI: 00007f5647693f90 RDI: ffffffffffffff9c
[  373.981897][T17875] RBP: 00007f564683506b R08: 0000000000000000 R09: 0000000000000000
[  373.981906][T17875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.981914][T17875] R13: 00007f5646a26038 R14: 00007f5646a25fa0 R15: 00007ffe099576b8
[  373.981936][T17875]  </TASK>
[  374.067903][ T5669] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  374.092825][ T5669] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.092852][ T5669] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  374.092861][ T5669] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  374.118551][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  374.118566][ T5669] usb 5-1: Product: syz
[  374.118572][ T5669] usb 5-1: Manufacturer: syz
[  374.122432][T17860] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  374.123453][ T5669] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected
[  374.142997][ T5669] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  374.332998][T17890] 9pnet_fd: p9_fd_create_unix (17890): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  374.362322][ T5647] usb 5-1: USB disconnect, device number 30
[  374.424509][T17892] netlink: 'syz.3.5185': attribute type 1 has an invalid length.
[  374.440115][T17892] bond4: entered promiscuous mode
[  374.440366][T17892] 8021q: adding VLAN 0 to HW filter on device bond4
[  374.444265][ T5647] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  374.472421][ T5647] garmin_gps 5-1:1.0: device disconnected
[  374.533065][T17892] bond4: (slave bridge2): making interface the new active one
[  374.533087][T17892] bridge2: entered promiscuous mode
[  374.541609][T17892] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  374.940844][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  374.961304][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5189'.
[  375.022277][T17904] loop4: detected capacity change from 0 to 1024
[  375.104200][T17904] netlink: 'syz.4.5191': attribute type 2 has an invalid length.
[  375.158308][T17914] netlink: 'syz.4.5195': attribute type 3 has an invalid length.
[  375.168749][T17916] loop5: detected capacity change from 0 to 128
[  375.193002][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5197'.
[  375.193835][T17916] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  375.194760][T17916] ext4 filesystem being mounted at /1205/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  375.197138][    C0] ip6_tunnel: K xmit: Local address not yet configured!
[  375.363143][ T8056] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  376.052495][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  376.197123][T17938] netlink: 'syz.3.5205': attribute type 2 has an invalid length.
[  376.329377][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5210'.
[  376.754345][T17994] ip_tables: iptables: counters copy to user failed while replacing table
[  376.822804][    C0] ip6_tunnel: K xmit: Local address not yet configured!
[  376.993275][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  377.024325][T18017] syz_tun: entered allmulticast mode
[  377.028600][T18016] syz_tun: left allmulticast mode
[  377.228447][ T5669] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  377.400783][ T5669] usb 5-1: Using ep0 maxpacket: 8
[  377.401301][ T5669] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  377.402224][ T5669] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.404014][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.404024][ T5669] usb 5-1: Product: syz
[  377.404030][ T5669] usb 5-1: Manufacturer: syz
[  377.404036][ T5669] usb 5-1: SerialNumber: syz
[  377.406201][ T5669] usb 5-1: config 0 descriptor??
[  377.409673][ T5669] gspca_main: stk014-2.14.0 probing 05e1:0893
[  377.409710][ T5669] usb 5-1: selecting invalid altsetting 1
[  377.553685][T18038] netlink: 'syz.3.5244': attribute type 2 has an invalid length.
[  377.662814][ T5669] gspca_stk014: reg_r err -71
[  377.662855][ T5669] stk014 5-1:0.0: probe with driver stk014 failed with error -71
[  377.671302][ T5669] usb 5-1: USB disconnect, device number 31
[  377.673595][T17945] syz.4.5207 (17945) used greatest stack depth: 16288 bytes left
[  377.938708][T18058] loop5: detected capacity change from 0 to 1024
[  377.991736][T18058] loop5: detected capacity change from 0 to 4096
[  377.992815][T18058] ntfs3(loop5): Primary boot: invalid bytes per MFT record 0 (0).
[  377.992954][T18058] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  378.013120][T18058] netlink: 'syz.5.5254': attribute type 2 has an invalid length.
[  378.028063][T18058] loop5: detected capacity change from 0 to 1024
[  378.029375][T18058] EXT4-fs: Ignoring removed bh option
[  378.056648][T18058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.081761][T18058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.193218][T18066] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5257'.
[  378.193234][T18066] netlink: 'syz.5.5257': attribute type 6 has an invalid length.
[  378.435646][T18074] xt_TPROXY: Can be used only with -p tcp or -p udp
[  378.559058][T18082] loop5: detected capacity change from 0 to 128
[  378.561833][T18082] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  378.563194][T18082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.613630][T18086] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  379.605495][T18138] loop5: detected capacity change from 0 to 512
[  379.629264][T18138] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.5290: bg 0: block 5: invalid block bitmap
[  379.629289][T18138] loop5: lost filesystem error report for type 5 error -117
[  379.634468][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  379.634487][    C1] EXT4-fs (loop5): initial error at time 1791037781: ext4_validate_block_bitmap:436
[  379.634504][    C1] EXT4-fs (loop5): last error at time 1791037781: ext4_validate_block_bitmap:436
[  379.635525][T18138] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  379.635542][T18138] loop5: lost filesystem error report for type 5 error -117
[  379.635738][T18138] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5290: invalid indirect mapped block 3 (level 2)
[  379.635759][T18138] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  379.636074][T18138] EXT4-fs (loop5): 1 orphan inode deleted
[  379.636086][T18138] EXT4-fs (loop5): 1 truncate cleaned up
[  379.640713][T18138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.693252][ T8056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.738364][T18145] ip_tables: iptables: counters copy to user failed while replacing table
[  379.757975][T18145] loop5: detected capacity change from 0 to 2048
[  379.763667][T18145] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  379.763679][T18145] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  379.763686][T18145] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  379.763692][T18145] EXT4-fs (loop5): group descriptors corrupted!
[  379.820214][T18149] loop5: detected capacity change from 0 to 1024
[  379.830682][T18149] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  379.831390][T18149] JBD2: no valid journal superblock found
[  379.835641][T18149] EXT4-fs (loop5): Could not load journal inode
[  380.967013][T18163] loop5: detected capacity change from 0 to 32768
[  380.967836][T18163] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5297 (18163)
[  380.971966][T18163] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  380.971980][T18163] BTRFS info (device loop5): using blake2b checksum algorithm
[  381.024752][T18163] BTRFS info (device loop5): enabling ssd optimizations
[  381.024767][T18163] BTRFS info (device loop5): turning on async discard
[  381.024774][T18163] BTRFS info (device loop5): enabling free space tree
[  381.024781][T18163] BTRFS info (device loop5): use zstd compression, level 3
[  381.127174][ T8056] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  381.234955][T18181] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  381.326538][T18183] ip_tables: iptables: counters copy to user failed while replacing table
[  381.563130][T18194] loop5: detected capacity change from 0 to 32768
[  381.566928][T18194] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5304 (18194)
[  381.582133][T18194] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  381.582153][T18194] BTRFS info (device loop5): using blake2b checksum algorithm
[  381.653909][T18194] BTRFS info (device loop5): enabling ssd optimizations
[  381.653924][T18194] BTRFS info (device loop5): turning on async discard
[  381.653931][T18194] BTRFS info (device loop5): enabling free space tree
[  381.653939][T18194] BTRFS info (device loop5): use zstd compression, level 3
[  382.164476][ T8056] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  383.065510][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  383.638489][T18253] 9pnet: p9_errstr2errno: server reported unknown error 
[  384.293737][T18279] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  384.404492][T18289] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'.
[  384.404505][T18289] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'.
[  384.407535][T18289] syzkaller0: entered promiscuous mode
[  384.407545][T18289] syzkaller0: entered allmulticast mode
[  384.434503][    C0] ip6_tunnel: K xmit: Local address not yet configured!
[  384.652662][T18311] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  384.684177][T18313] loop5: detected capacity change from 0 to 64
[  384.699877][T18313] Bad inode number on dev loop5: 6 is out of range
[  385.118294][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  385.185214][T18345] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5364'.
[  385.308872][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5369'.
[  385.315839][T18357] fuse: fd is not a fuse device
[  385.571985][T18367] xt_bpf: check failed: parse error
[  385.819854][T18393] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  386.226993][T18417] validate_nla: 2 callbacks suppressed
[  386.227005][T18417] netlink: 'syz.3.5399': attribute type 1 has an invalid length.
[  386.486823][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  386.487036][    C0] ip6_tunnel: K xmit: Local address not yet configured!
[  386.881170][T18432] fuse: fd is not a fuse device
[  387.176119][T18447] netlink: 'syz.5.5414': attribute type 2 has an invalid length.
[  387.412611][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5426'.
[  387.732376][T18499] fuse: fd is not a fuse device
[  387.805572][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5439'.
[  387.941110][T18517] fuse: fd is not a fuse device
[  388.000106][T18520] fuse: fd is not a fuse device
[  388.104950][T18530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5451'.
[  388.104987][T18530] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5451'.
[  388.299869][   T34] kauditd_printk_skb: 9 callbacks suppressed
[  388.299880][   T34] audit: type=1326 audit(1791037790.054:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18541 comm="syz.3.5457" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x0
[  389.166233][T18601] ip_tables: iptables: counters copy to user failed while replacing table
[  389.347921][   T34] audit: type=1326 audit(1791037791.037:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18613 comm="syz.3.5488" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x0
[  390.264302][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5496'.
[  390.264314][T18641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5496'.
[  390.629134][   T34] audit: type=1326 audit(1791037792.234:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.4.5511" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x0
[  391.142898][ T4989] Bluetooth: hci1: unexpected event for opcode 0x1003
[  391.700824][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'.
[  391.709247][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'.
[  391.730579][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'.
[  391.739325][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'.
[  391.742941][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'.
[  391.745640][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'.
[  391.747315][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'.
[  391.909961][T18719] ip_tables: iptables: counters copy to user failed while replacing table
[  391.963211][T18717] netlink: 'syz.4.5528': attribute type 2 has an invalid length.
[  392.075304][T18732] ip_tables: iptables: counters copy to user failed while replacing table
[  392.186214][T18739] netlink: 'syz.3.5541': attribute type 2 has an invalid length.
[  392.265454][T18749] ip_tables: iptables: counters copy to user failed while replacing table
[  392.512801][T18765] ip_tables: iptables: counters copy to user failed while replacing table
[  394.039713][   T34] audit: type=1326 audit(1791037795.424:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18805 comm="syz.4.5571" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff41f39e159 code=0x0
[  394.450547][T18834] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5584'.
[  394.567455][ T4989] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  395.206190][   T34] audit: type=1326 audit(1791037796.518:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18874 comm="syz.4.5602" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x0
[  395.219114][T18877] xt_hashlimit: size too large, truncated to 1048576
[  395.995485][T18898] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  396.007613][T18898] bond5: (slave macvlan4): making interface the new active one
[  396.008166][T18898] bond5: (slave macvlan4): Enslaving as an active interface with an up link
[  396.008527][    T9] : entered promiscuous mode
[  396.008545][    T9] bond_slave_1: entered promiscuous mode
[  396.633989][T18940] fuse: fd is not a fuse device
[  396.657333][T18944] overlayfs: failed to clone upperpath
[  397.019942][T18987] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  397.182170][   T34] audit: type=1326 audit(1791037798.370:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19008 comm="syz.5.5663" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x0
[  397.541781][T19031] fuse: fd is not a fuse device
[  398.063709][T19045] netlink: 'syz.3.5679': attribute type 2 has an invalid length.
[  398.122229][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  398.122278][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  398.136705][T19049] fuse: Bad value for 'fd'
[  398.356825][T19066] 9p: Bad value for 'rfdno'
[  398.802252][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  402.223597][    C0] ip6_tunnel: K xmit: Local address not yet configured!
[  402.640144][T19148] erspan0: entered promiscuous mode
[  402.642914][T19150] fuse: fd is not a fuse device
[  402.907372][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  403.285390][T19188] overlayfs: failed to clone lowerpath
[  404.069849][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5769'.
[  404.464192][T19283] xt_l2tp: wrong L2TP version: 6
[  404.928776][T19301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5793'.
[  404.959909][    C0] ip6_tunnel: K xmit: Local address not yet configured!
[  405.062358][T19308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5796'.
[  405.132157][T19312] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  405.644092][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  405.989423][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5809'.
[  406.232788][T19349] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.507862][T19369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5822'.
[  406.782907][T19396] xt_CT: No such helper "snmp_trap"
[  407.534745][T19438] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5852'.
[  408.347590][T19452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.653255][   T34] audit: type=1326 audit(1791037809.099:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.4.5867" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff41f39e159 code=0x0
[  409.211857][T19480] bond6: entered promiscuous mode
[  409.211880][T19480] bond6: entered allmulticast mode
[  409.212307][T19480] 8021q: adding VLAN 0 to HW filter on device bond6
[  409.811038][ T4989] Bluetooth: hci0: unexpected event for opcode 0x0c1a
[  410.272616][ T4989] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  411.500088][T19557] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes.
[  412.102150][T19580] ip_tables: iptables: counters copy to user failed while replacing table
[  413.065546][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5934'.
[  413.065559][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5934'.
[  413.294646][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5937'.
[  413.294691][T19626] bond2: left allmulticast mode
[  413.294737][T19626] bond2: left promiscuous mode
[  413.294924][T19626] bridge0: port 5(bond2) entered disabled state
[  413.953068][T19626] bond1: left allmulticast mode
[  413.953138][T19626] bond1: left promiscuous mode
[  413.953338][T19626] bridge0: port 4(bond1) entered disabled state
[  413.981777][T19626] bridge_slave_1: left allmulticast mode
[  413.986238][T19626] bridge_slave_1: left promiscuous mode
[  413.991458][T19626] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.017749][T19626] bridge_slave_0: left allmulticast mode
[  414.017773][T19626] bridge_slave_0: left promiscuous mode
[  414.017968][T19626] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.148965][T19638] netlink: 25 bytes leftover after parsing attributes in process `syz.3.5941'.
[  414.151776][T19638] eql: entered promiscuous mode
[  414.153161][T19638] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.5941'.
[  414.153358][T19638] 0XD: renamed from eql
[  414.172057][T19638] 0XD: remember to turn off Van-Jacobson compression on your slave devices
[  414.172084][T19638] 0XD: left promiscuous mode
[  414.172093][T19638] 0XD: entered allmulticast mode
[  414.554415][T19650] tmpfs: Bad value for 'mpol'
[  415.452259][T19684] ip_tables: iptables: counters copy to user failed while replacing table
[  415.964593][T19729] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5978'.
[  415.966675][T19729] unsupported nlmsg_type 40
[  416.841688][T19791] netlink: 'syz.4.6007': attribute type 2 has an invalid length.
[  416.841701][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6007'.
[  416.843281][T19790] netlink: 'syz.3.6006': attribute type 14 has an invalid length.
[  416.915719][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6011'.
[  416.915731][T19798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6011'.
[  419.153777][T19859] ip_tables: iptables: counters copy to user failed while replacing table
[  419.400375][T19881] netlink: 25 bytes leftover after parsing attributes in process `syz.3.6050'.
[  419.406657][T19881] gretap0: entered promiscuous mode
[  419.411483][T19881] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.6050'.
[  419.411586][T19881] 0XD: renamed from gretap0
[  419.412956][T19881] 0XD: left promiscuous mode
[  419.412970][T19881] 0XD: entered allmulticast mode
[  419.897042][T19912] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6064'.
[  419.897063][T19912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6064'.
[  420.086407][T19930] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6073'.
[  420.086419][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6073'.
[  420.265268][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6077'.
[  421.339741][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6099'.
[  421.487751][T20005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6108'.
[  421.755933][T20031] overlayfs: failed to clone lowerpath
[  421.758326][T20031] overlayfs: failed to clone lowerpath
[  421.859100][T20048] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  421.943066][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6135'.
[  421.943080][T20060] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  421.943089][T20060] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  423.177147][T20075] ceph: No mds server is up or the cluster is laggy
[  424.696906][T20138] netlink: 'syz.3.6168': attribute type 1 has an invalid length.
[  424.827015][T20152] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  425.256346][T20177] __nla_validate_parse: 1 callbacks suppressed
[  425.256356][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6188'.
[  425.617331][ T5592] Bluetooth: hci1: Malformed Event: 0x02
[  426.089267][T20213] tipc: Started in network mode
[  426.089287][T20213] tipc: Node identity 1000001, cluster identity 4711
[  426.089296][T20213] tipc: Node number set to 16777217
[  426.526142][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6220'.
[  426.700317][T20266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6227'.
[  427.201352][T20322] 9p: Bad value for 'wfdno'
[  427.206307][T20324] 9p: Bad value for 'wfdno'
[  427.211108][ T5592] Bluetooth: hci1: unexpected event for opcode 0x0c26
[  427.710469][ T5592] Bluetooth: hci0: command 0x0405 tx timeout
[  427.789636][T20330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6259'.
[  428.068565][T20368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.641200][T20439] overlayfs: failed to clone upperpath
[  430.069563][T20444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6311'.
[  430.097096][T20446] 9p: Bad value for 'wfdno'
[  430.097565][ T4989] Bluetooth: hci0: unexpected event for opcode 0x0c26
[  430.275399][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  430.434773][   T34] audit: type=1326 audit(1791037829.463:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.3.6315" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x0
[  430.802393][T20484] 9p: Bad value for 'wfdno'
[  430.802830][ T4989] Bluetooth: hci0: unexpected event for opcode 0x0c26
[  430.873451][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6333'.
[  431.214562][T20515] overlayfs: failed to clone lowerpath
[  431.890013][T20546] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  432.144680][T20566] tipc: Started in network mode
[  432.144696][T20566] tipc: Node identity 1000001, cluster identity 4711
[  432.144701][T20566] tipc: Node number set to 16777217
[  432.702799][T20611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6390'.
[  432.837504][T20552] ceph: No mds server is up or the cluster is laggy
[  433.217257][T20658] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6412'.
[  433.714482][T20704] overlayfs: failed to clone lowerpath
[  433.804343][   T34] audit: type=1326 audit(1791037832.625:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20712 comm="syz.4.6439" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff41f39e159 code=0x0
[  433.937444][T20729] netlink: 'syz.5.6446': attribute type 10 has an invalid length.
[  434.276993][T20755] overlayfs: failed to clone lowerpath
[  435.189905][T20766] xt_hashlimit: size too large, truncated to 1048576
[  435.265369][T20771] netlink: 'syz.3.6466': attribute type 24 has an invalid length.
[  435.316130][T20774] overlayfs: failed to clone lowerpath
[  436.236418][T20815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6486'.
[  436.286679][T20818] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6487'.
[  436.310662][T20820] xt_hashlimit: size too large, truncated to 1048576
[  436.433724][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  436.484070][T20828] batadv_slave_1: entered promiscuous mode
[  436.484527][T20826] batadv_slave_1: left promiscuous mode
[  437.050524][T20863] 9p: Bad value for 'wfdno'
[  437.051019][ T4989] Bluetooth: hci1: unexpected event for opcode 0x0c26
[  437.117361][    C0] ip6_tunnel: K xmit: Local address not yet configured!
[  437.155199][T20870] xt_hashlimit: size too large, truncated to 1048576
[  437.391454][T20890] batadv_slave_1: entered promiscuous mode
[  437.391990][T20890] batadv_slave_1: left promiscuous mode
[  437.637809][T20909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6528'.
[  438.129304][T20954] overlayfs: failed to clone lowerpath
[  438.762896][T20965] fuse: fd is not a fuse device
[  438.812477][T20970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6555'.
[  438.812521][T20970] bridge_slave_1: left allmulticast mode
[  438.812531][T20970] bridge_slave_1: left promiscuous mode
[  438.812661][T20970] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.816019][T20970] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.175752][ T1111] IPVS: starting estimator thread 0...
[  440.175772][T21044] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6590'.
[  440.203793][T21047] xt_hashlimit: size too large, truncated to 1048576
[  440.270921][T21045] IPVS: using max 89 ests per chain, 213600 per kthread
[  440.350840][ T4989] Bluetooth: hci0: unexpected event for opcode 0x0c26
[  440.361499][T21060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6597'.
[  440.361514][T21060] netlink: 'syz.3.6597': attribute type 4 has an invalid length.
[  440.416506][T21064] netlink: 'syz.4.6599': attribute type 24 has an invalid length.
[  440.538332][    C0] ip6_tunnel: K xmit: Local address not yet configured!
[  440.604901][T21071] netlink: 'syz.3.6602': attribute type 1 has an invalid length.
[  440.604967][T21071] netlink: 'syz.3.6602': attribute type 4 has an invalid length.
[  440.604973][T21071] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6602'.
[  440.714569][   T34] audit: type=1326 audit(1791037839.088:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6604" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x0
[  440.915832][T21083] overlayfs: failed to clone lowerpath
[  441.081177][T21093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6611'.
[  441.199154][ T4989] Bluetooth: hci0: unexpected event for opcode 0x0c26
[  441.811700][T21115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6621'.
[  441.843405][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6622'.
[  442.562875][T21148] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6635'.
[  442.590065][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6637'.
[  442.611934][T21153] hsr_slave_1 (unregistering): left promiscuous mode
[  442.664251][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6639'.
[  443.116479][T21196] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6658'.
[  443.510637][   T34] audit: type=1326 audit(1791037841.707:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21216 comm="syz.5.6667" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f564679e159 code=0x0
[  443.718229][T21228] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  443.959273][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  444.671861][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6686'.
[  444.701211][T21271] hsr_slave_1 (unregistering): left promiscuous mode
[  444.915700][T21277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6689'.
[  444.954208][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6690'.
[  444.954251][T21287] bond1: left allmulticast mode
[  444.954290][T21287] bond1: left promiscuous mode
[  444.954401][T21287] bridge0: port 3(bond1) entered disabled state
[  444.955856][T21287] bridge_slave_1: left allmulticast mode
[  444.955867][T21287] bridge_slave_1: left promiscuous mode
[  444.955956][T21287] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.957099][T21287] bridge_slave_0: left allmulticast mode
[  444.957109][T21287] bridge_slave_0: left promiscuous mode
[  444.957184][T21287] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.100448][   T34] audit: type=1326 audit(1791037843.185:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.4.6693" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff41f39e159 code=0x0
[  445.161772][T21300] overlayfs: failed to clone lowerpath
[  445.479942][T21315] ip6erspan0: entered allmulticast mode
[  445.577112][   T34] audit: type=1326 audit(1791037843.634:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21320 comm="syz.3.6704" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x0
[  446.509125][T21327] overlayfs: failed to clone lowerpath
[  446.714391][   T34] audit: type=1326 audit(1791037844.701:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.3.6712" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x0
[  448.117273][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6727'.
[  448.117285][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6727'.
[  448.346742][   T34] audit: type=1326 audit(1791037846.225:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21376 comm="syz.4.6729" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff41f39e159 code=0x0
[  448.562201][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6731'.
[  448.775180][T21391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6735'.
[  449.116595][T21398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6738'.
[  449.866457][   T34] audit: type=1326 audit(1791037847.647:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.5.6753" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f564679e159 code=0x0
[  450.708772][T21449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6762'.
[  450.708791][T21449] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  451.717221][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6777'.
[  451.717235][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6777'.
[  451.717242][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6777'.
[  451.717248][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6777'.
[  451.894162][T21500] netlink: 'syz.3.6779': attribute type 24 has an invalid length.
[  451.927295][T21503] fuse: Bad value for 'fd'
[  452.049968][   T34] audit: type=1326 audit(1791037849.686:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21513 comm="syz.4.6787" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff41f39e159 code=0x0
[  452.126644][T21522] sctp: [Deprecated]: syz.5.6790 (pid 21522) Use of int in max_burst socket option deprecated.
[  452.126644][T21522] Use struct sctp_assoc_value instead
[  452.418751][T21541] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  452.465176][T21543] netlink: 'syz.5.6800': attribute type 24 has an invalid length.
[  452.710619][T21555] overlayfs: failed to clone upperpath
[  453.040080][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.074689][T21564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.074713][T21564] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.075941][T21564] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.076026][T21564] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.249723][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.380425][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.526717][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.626056][T21597] __nla_validate_parse: 1 callbacks suppressed
[  453.626067][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6826'.
[  453.729995][T21602] overlayfs: failed to clone upperpath
[  454.254510][ T5426] netdevsim netdevsim0 eth9: set [0, 0] type 1 family 0 port 8472 - 0
[  454.463960][   T12] bridge_slave_1: left allmulticast mode
[  454.463975][   T12] bridge_slave_1: left promiscuous mode
[  454.464083][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.477600][   T12] bridge_slave_0: left allmulticast mode
[  454.477615][   T12] bridge_slave_0: left promiscuous mode
[  454.477772][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.791707][T21621] tmpfs: Group quota inode hardlimit too large.
[  454.902292][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.913337][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  454.914456][   T12] bond0 (unregistering): Released all slaves
[  454.938524][T13787] netdevsim netdevsim0 eth11: set [0, 0] type 1 family 0 port 8472 - 0
[  454.938547][T13787] netdevsim netdevsim0 eth10: set [0, 0] type 1 family 0 port 8472 - 0
[  454.938559][T13787] netdevsim netdevsim0 eth12: set [0, 0] type 1 family 0 port 8472 - 0
[  455.027935][T21626] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6835'.
[  455.027950][T21626] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6835'.
[  455.027956][T21626] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6835'.
[  455.494400][   T12] hsr_slave_0: left promiscuous mode
[  455.494887][   T12] hsr_slave_1: left promiscuous mode
[  455.495295][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.495305][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.496256][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.496265][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.571987][   T12] veth1_macvtap: left allmulticast mode
[  455.572008][   T12] veth1_macvtap: left promiscuous mode
[  455.572029][   T12] veth0_macvtap: left promiscuous mode
[  455.572095][   T12] veth1_vlan: left promiscuous mode
[  455.572153][   T12] veth0_vlan: left promiscuous mode
[  455.742834][T21655] netlink: 'syz.4.6847': attribute type 24 has an invalid length.
[  455.958637][   T12] team0 (unregistering): Port device team_slave_1 removed
[  455.983959][   T12] team0 (unregistering): Port device team_slave_0 removed
[  456.118523][ T5336] 8021q: adding VLAN 0 to HW filter on device eth9
[  456.432852][ T5336] 8021q: adding VLAN 0 to HW filter on device eth10
[  456.452579][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6868'.
[  456.635034][   T34] audit: type=1326 audit(1791037853.980:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21719 comm="syz.3.6872" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x0
[  456.676878][ T5336] 8021q: adding VLAN 0 to HW filter on device eth11
[  456.801941][ T5336] 8021q: adding VLAN 0 to HW filter on device eth12
[  457.558970][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6878'.
[  457.737478][   T34] audit: type=1326 audit(1791037855.009:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21759 comm="syz.3.6882" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x0
[  458.650619][   T34] audit: type=1326 audit(1791037855.869:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21783 comm="syz.3.6891" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x0
[  459.261363][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6901'.
[  459.261384][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6901'.
[  459.373967][   T34] audit: type=1326 audit(1791037856.533:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.4.6905" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff41f39e159 code=0x0
[  459.929373][T21823] Option 'TXƮ' to dns_resolver key: bad/missing value
[  461.814881][T21886] xt_ecn: cannot match TCP bits for non-tcp packets
[  461.845895][T21888] 9p: Bad value for 'wfdno'
[  461.983592][   T34] audit: type=1326 audit(1791037858.975:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21903 comm="syz.5.6946" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f564679e159 code=0x0
[  461.992705][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6947'.
[  462.042568][T21910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6948'.
[  462.779804][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6956'.
[  463.176098][   T34] audit: type=1326 audit(1791037860.097:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21950 comm="syz.4.6967" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff41f39e159 code=0x0
[  463.813599][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  463.813645][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  464.862629][T21970] fuse: fd is not a fuse device
[  466.462460][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6990'.
[  466.727296][T22030] netlink: 1988 bytes leftover after parsing attributes in process `syz.4.6996'.
[  467.085362][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7011'.
[  467.860461][T22105] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.7027'.
[  467.860475][T22105] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.7027'.
[  468.553827][T22158] xt_HMARK: spi-set and port-set can't be combined
[  468.609463][T22162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7053'.
[  469.462532][T22189] fuse: Bad value for 'fd'
[  469.593971][T22196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7062'.
[  470.219098][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7079'.
[  470.256888][   T34] audit: type=1326 audit(1791037866.720:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.256929][   T34] audit: type=1326 audit(1791037866.720:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.256956][   T34] audit: type=1326 audit(1791037866.720:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.256984][   T34] audit: type=1326 audit(1791037866.720:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.257090][   T34] audit: type=1326 audit(1791037866.720:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.257120][   T34] audit: type=1326 audit(1791037866.720:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.257259][   T34] audit: type=1326 audit(1791037866.720:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.257288][   T34] audit: type=1326 audit(1791037866.720:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.257458][   T34] audit: type=1326 audit(1791037866.720:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.257485][   T34] audit: type=1326 audit(1791037866.720:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22249 comm="syz.3.7080" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  470.344044][T22254] 9p: Bad value for 'wfdno'
[  471.427934][T22306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7103'.
[  471.469064][T22308] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  471.641551][T22325] ip_tables: iptables: counters copy to user failed while replacing table
[  471.782709][T22342] ip_tables: iptables: counters copy to user failed while replacing table
[  472.636093][T22379] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7134'.
[  473.835489][T22410] overlayfs: failed to clone upperpath
[  475.874681][T22483] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7179'.
[  475.878182][T22473] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7179'.
[  475.878366][T22478] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7179'.
[  476.133026][   T34] kauditd_printk_skb: 1 callbacks suppressed
[  476.133042][   T34] audit: type=1800 audit(1791037872.220:128): pid=22503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7192" name="nullb0" dev="tmpfs" ino=10705 res=0 errno=0
[  476.304333][T22513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7197'.
[  476.381413][   T34] audit: type=1804 audit(1791037872.444:129): pid=22515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7198" name="bus" dev="ramfs" ino=59594 res=1 errno=0
[  476.382304][   T34] audit: type=1804 audit(1791037872.444:130): pid=22515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7198" name="bus" dev="ramfs" ino=59594 res=1 errno=0
[  477.065480][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7204'.
[  477.159525][T22537] SET target dimension over the limit!
[  478.419191][T22630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7251'.
[  478.419222][T22630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7251'.
[  479.001896][T22683] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7277'.
[  479.062215][T22683] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7277'.
[  480.211337][T22736] netlink: 'syz.5.7296': attribute type 46 has an invalid length.
[  480.689471][   T34] audit: type=1326 audit(1791037876.476:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.3.7310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  480.689963][   T34] audit: type=1326 audit(1791037876.476:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.3.7310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  480.689996][   T34] audit: type=1326 audit(1791037876.476:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.3.7310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  480.690023][   T34] audit: type=1326 audit(1791037876.476:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.3.7310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  480.690471][   T34] audit: type=1326 audit(1791037876.476:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.3.7310" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  480.691307][   T34] audit: type=1326 audit(1791037876.476:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.3.7310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  480.691339][   T34] audit: type=1326 audit(1791037876.476:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22765 comm="syz.3.7310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b579e159 code=0x7ffc0000
[  480.977507][T22783] overlayfs: failed to clone upperpath
[  481.038275][T22783] bond1: entered allmulticast mode
[  481.074994][T22783] 8021q: adding VLAN 0 to HW filter on device bond1
[  482.402217][T22881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  482.402232][T22881] IPv6: NLM_F_CREATE should be set when creating new route
[  482.402279][T22881] IPv6: NLM_F_CREATE should be set when creating new route
[  482.402298][T22881] IPv6: NLM_F_CREATE should be set when creating new route
[  482.407095][T22881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  482.631240][T22890] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  482.940979][T22901] fuse: fd is not a fuse device
[  483.810509][T22964] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7380'.
[  484.003750][T22974] overlayfs: failed to clone upperpath
[  484.108450][T22978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7385'.
[  484.151191][T22982] netlink: 'syz.4.7387': attribute type 10 has an invalid length.
[  484.172415][T22982] netlink: 'syz.4.7387': attribute type 10 has an invalid length.
[  484.301770][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7392'.
[  484.579350][T23015] overlayfs: failed to clone upperpath
[  486.373648][T23083] IPVS: Scheduler module ip_vs_sip not found
[  486.823843][T23098] netlink: 'syz.4.7441': attribute type 23 has an invalid length.
[  487.009482][T23108] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.7445'.
[  487.009502][T23108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7445'.
[  487.177609][   T34] kauditd_printk_skb: 3 callbacks suppressed
[  487.177621][   T34] audit: type=1326 audit(1791037882.547:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23119 comm="syz.5.7451" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f564679e159 code=0x0
[  487.550282][   T34] audit: type=1800 audit(1791037882.893:142): pid=23130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7455" name="file1" dev="tmpfs" ino=11128 res=0 errno=0
[  487.634705][T23136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7458'.
[  488.415195][T23180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7479'.
[  489.879396][T23236] netlink: Failed to add wlan0 helper -22
[  489.879422][T23236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  490.868871][T23291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7528'.
[  491.754212][T23345] bond7: entered promiscuous mode
[  492.676742][T23397] ipt_ECN: cannot use operation on non-tcp rule
[  493.889449][   T34] audit: type=1326 audit(1791037888.823:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23436 comm="syz.3.7592" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b579e159 code=0x0
[  495.884581][ T4989] 
[  495.885414][ T4989] ======================================================
[  495.887636][ T4989] WARNING: possible circular locking dependency detected
[  495.889827][ T4989] syzkaller #0 Tainted: G             L     
[  495.891828][ T4989] ------------------------------------------------------
[  495.894033][ T4989] kworker/u11:1/4989 is trying to acquire lock:
[  495.895987][ T4989] ffffffff903fffe0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x90/0x820
[  495.899184][ T4989] 
[  495.899184][ T4989] but task is already holding lock:
[  495.901713][ T4989] ffffffff903dbc00 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x318/0xc80
[  495.904857][ T4989] 
[  495.904857][ T4989] which lock already depends on the new lock.
[  495.904857][ T4989] 
[  495.908125][ T4989] 
[  495.908125][ T4989] the existing dependency chain (in reverse order) is:
[  495.910941][ T4989] 
[  495.910941][ T4989] -> #2 (hci_cb_list_lock){+.+.}-{4:4}:
[  495.913724][ T4989]        __mutex_lock+0x19d/0x1550
[  495.915519][ T4989]        hci_remote_features_evt+0x53d/0x950
[  495.917685][ T4989]        hci_event_packet+0x6cd/0xf10
[  495.919491][ T4989]        hci_rx_work+0x3ee/0x1020
[  495.921087][ T4989]        process_scheduled_works+0xc3d/0x1630
[  495.923011][ T4989]        worker_thread+0xa47/0xfb0
[  495.924621][ T4989]        kthread+0x38b/0x480
[  495.926086][ T4989]        ret_from_fork+0x514/0xb70
[  495.927725][ T4989]        ret_from_fork_asm+0x1a/0x30
[  495.929679][ T4989] 
[  495.929679][ T4989] -> #1 (&hdev->lock){+.+.}-{4:4}:
[  495.932452][ T4989]        __mutex_lock+0x19d/0x1550
[  495.934241][ T4989]        l2cap_chan_connect+0x9c/0x1110
[  495.936038][ T4989]        l2cap_sock_connect+0x5e4/0x7e0
[  495.937767][ T4989]        kernel_connect+0x141/0x1c0
[  495.939408][ T4989]        rfcomm_dlc_open+0x644/0x1080
[  495.941120][ T4989]        rfcomm_sock_connect+0x2ed/0x650
[  495.942896][ T4989]        __sys_connect+0x316/0x450
[  495.944503][ T4989]        __x64_sys_connect+0x7a/0x90
[  495.946185][ T4989]        do_syscall_64+0x166/0x520
[  495.947798][ T4989]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.949817][ T4989] 
[  495.949817][ T4989] -> #0 (rfcomm_mutex){+.+.}-{4:4}:
[  495.952153][ T4989]        __lock_acquire+0x164c/0x2de0
[  495.953854][ T4989]        lock_acquire+0x115/0x350
[  495.955484][ T4989]        __mutex_lock+0x19d/0x1550
[  495.957139][ T4989]        rfcomm_security_cfm+0x90/0x820
[  495.959010][ T4989]        hci_auth_complete_evt+0x39f/0xc80
[  495.960877][ T4989]        hci_event_packet+0x6cd/0xf10
[  495.962656][ T4989]        hci_rx_work+0x3ee/0x1020
[  495.964276][ T4989]        process_scheduled_works+0xc3d/0x1630
[  495.966208][ T4989]        worker_thread+0xa47/0xfb0
[  495.967818][ T4989]        kthread+0x38b/0x480
[  495.969299][ T4989]        ret_from_fork+0x514/0xb70
[  495.970939][ T4989]        ret_from_fork_asm+0x1a/0x30
[  495.972596][ T4989] 
[  495.972596][ T4989] other info that might help us debug this:
[  495.972596][ T4989] 
[  495.975817][ T4989] Chain exists of:
[  495.975817][ T4989]   rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock
[  495.975817][ T4989] 
[  495.979734][ T4989]  Possible unsafe locking scenario:
[  495.979734][ T4989] 
[  495.982080][ T4989]        CPU0                    CPU1
[  495.983768][ T4989]        ----                    ----
[  495.985447][ T4989]   lock(hci_cb_list_lock);
[  495.986966][ T4989]                                lock(&hdev->lock);
[  495.989215][ T4989]                                lock(hci_cb_list_lock);
[  495.991421][ T4989]   lock(rfcomm_mutex);
[  495.992752][ T4989] 
[  495.992752][ T4989]  *** DEADLOCK ***
[  495.992752][ T4989] 
[  495.995279][ T4989] locks held by kworker/u11:1/4989: 4, last CPU#0:
[  495.997337][ T4989]  #0: ffff8881bc93e940 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  496.000782][ T4989]  #1: ffffc9000f4b7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  496.004505][ T4989]  #2: ffff8881194d80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x95/0xc80
[  496.007598][ T4989]  #3: ffffffff903dbc00 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x318/0xc80
[  496.010797][ T4989] 
[  496.010797][ T4989] stack backtrace:
[  496.012637][ T4989] CPU: 0 UID: 0 PID: 4989 Comm: kworker/u11:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  496.016062][ T4989] Tainted: [L]=SOFTLOCKUP
[  496.017433][ T4989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  496.020568][ T4989] Workqueue: hci0 hci_rx_work
[  496.022076][ T4989] Call Trace:
[  496.023140][ T4989]  <TASK>
[  496.024089][ T4989]  dump_stack_lvl+0xe8/0x150
[  496.025570][ T4989]  print_circular_bug+0x2e2/0x300
[  496.027160][ T4989]  check_noncircular+0x12f/0x150
[  496.028719][ T4989]  __lock_acquire+0x164c/0x2de0
[  496.030261][ T4989]  ? __pfx___mutex_trylock_common+0x10/0x10
[  496.032128][ T4989]  ? rcu_is_watching+0x16/0xb0
[  496.033641][ T4989]  ? trace_contention_end+0x3d/0x140
[  496.035327][ T4989]  lock_acquire+0x115/0x350
[  496.036763][ T4989]  ? rfcomm_security_cfm+0x90/0x820
[  496.038439][ T4989]  __mutex_lock+0x19d/0x1550
[  496.039937][ T4989]  ? rfcomm_security_cfm+0x90/0x820
[  496.041569][ T4989]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  496.043471][ T4989]  ? __pfx___mutex_trylock_common+0x10/0x10
[  496.045331][ T4989]  ? rfcomm_security_cfm+0x90/0x820
[  496.046980][ T4989]  ? __pfx___mutex_lock+0x10/0x10
[  496.048666][ T4989]  ? l2cap_security_cfm+0x10b0/0x1170
[  496.050714][ T4989]  ? __pfx_l2cap_security_cfm+0x10/0x10
[  496.052979][ T4989]  ? hci_auth_complete_evt+0x318/0xc80
[  496.055195][ T4989]  rfcomm_security_cfm+0x90/0x820
[  496.057398][ T4989]  ? __pfx_rfcomm_security_cfm+0x10/0x10
[  496.059748][ T4989]  ? hci_conn_hash_lookup_handle+0x20/0x250
[  496.062232][ T4989]  ? hci_conn_hash_lookup_handle+0x20/0x250
[  496.064669][ T4989]  ? hci_conn_hash_lookup_handle+0x20/0x250
[  496.067090][ T4989]  ? hci_conn_hash_lookup_handle+0x22e/0x250
[  496.069489][ T4989]  ? __pfx_rfcomm_security_cfm+0x10/0x10
[  496.071785][ T4989]  hci_auth_complete_evt+0x39f/0xc80
[  496.073975][ T4989]  ? __pfx_hci_auth_complete_evt+0x10/0x10
[  496.076513][ T4989]  ? skb_pull_data+0xf0/0x200
[  496.078788][ T4989]  hci_event_packet+0x6cd/0xf10
[  496.080895][ T4989]  ? __pfx_hci_auth_complete_evt+0x10/0x10
[  496.083285][ T4989]  ? __pfx_hci_event_packet+0x10/0x10
[  496.085505][ T4989]  ? replace_chunk+0xa70/0xb80
[  496.087489][ T4989]  ? hci_send_to_monitor+0xe2/0x590
[  496.089555][ T4989]  hci_rx_work+0x3ee/0x1020
[  496.091447][ T4989]  ? process_scheduled_works+0x97a/0x1630
[  496.093768][ T4989]  process_scheduled_works+0xc3d/0x1630
[  496.096068][ T4989]  ? __pfx_process_scheduled_works+0x10/0x10
[  496.098487][ T4989]  ? assign_work+0x3cf/0x5d0
[  496.100415][ T4989]  worker_thread+0xa47/0xfb0
[  496.102347][ T4989]  ? __kthread_parkme+0x71/0x1f0
[  496.104405][ T4989]  kthread+0x38b/0x480
[  496.106127][ T4989]  ? __pfx_worker_thread+0x10/0x10
[  496.108209][ T4989]  ? __pfx_kthread+0x10/0x10
[  496.110059][ T4989]  ret_from_fork+0x514/0xb70
[  496.111935][ T4989]  ? __pfx_ret_from_fork+0x10/0x10
[  496.114038][ T4989]  ? __switch_to+0xc89/0x1420
[  496.115974][ T4989]  ? __pfx_kthread+0x10/0x10
[  496.117912][ T4989]  ret_from_fork_asm+0x1a/0x30
[  496.119866][ T4989]  </TASK>
[  496.642755][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  502.116156][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  502.629329][ T5592] Bluetooth: hci0: command 0x0405 tx timeout
