last executing test programs:

21.977809165s ago: executing program 2 (id=95):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

19.366004264s ago: executing program 2 (id=100):
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f0000000100))
io_uring_setup(0xdac, &(0x7f0000000180))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

16.059246174s ago: executing program 0 (id=106):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="611576000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

15.942273804s ago: executing program 2 (id=107):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a133f969e0594d70a1b98e61bed565e34f3cd997040fe04a3259c409f0f5e0508f45bd23bf63ba65b20df98c34e561b6e820f83ecf47add09fc8bb21b550dc14233bcb5f16194ae6", 0xb5, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
rt_tgsigqueueinfo(r0, 0xffffffffffffffff, 0x1d, 0x0)
socket(0x10, 0x3, 0x0)
r4 = syz_open_dev$vcsa(0x0, 0x1, 0x40402)
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340), 0x2, 0x0)
writev(r4, &(0x7f00000001c0), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/18, @ANYRES32=0x0, @ANYRES32], 0x38}}, 0x0)

14.075194496s ago: executing program 2 (id=113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, 0x0}])
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x103042, 0xeaff)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[], 0x29f)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000})

11.475534416s ago: executing program 2 (id=121):
connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20048080}, 0x8094)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x3000000, @mcast2, 0x6}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11.414146354s ago: executing program 3 (id=122):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x6e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x5)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c)
listen(r1, 0xb)
listen(r0, 0x50)

11.127060264s ago: executing program 0 (id=123):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10.832262484s ago: executing program 0 (id=124):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a133f969e0594d70a1b98e61bed565e34f3cd997040fe04a3259c409f0f5e0508f45bd23bf63ba65b20df98c34e561b6e820f83ecf47add09fc8bb21b550dc14233bcb5f16194ae6", 0xb5, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
rt_tgsigqueueinfo(r0, 0xffffffffffffffff, 0x1d, 0x0)
socket(0x10, 0x3, 0x0)
r4 = syz_open_dev$vcsa(0x0, 0x1, 0x40402)
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340), 0x2, 0x0)
writev(r4, &(0x7f00000001c0), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/18, @ANYRES32=0x0, @ANYRES32], 0x38}}, 0x0)

10.327395975s ago: executing program 1 (id=125):
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000002c0)={0x3, {0x7, 0x5, 0x8001, 0x10000}, {0x4, 0x9, 0x7, 0x200}, {0x0, 0xeb}})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
read(r0, 0x0, 0x0)

9.878363861s ago: executing program 3 (id=127):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a133f969e0594d70a1b98e61bed565e34f3cd997040fe04a3259c409f0f5e0508f45bd23bf63ba65b20df98c34e561b6e820f83ecf47add09fc8bb21b550dc14233bcb5f16194ae6", 0xb5, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
rt_tgsigqueueinfo(r0, 0xffffffffffffffff, 0x1d, 0x0)
socket(0x10, 0x3, 0x0)
r4 = syz_open_dev$vcsa(0x0, 0x1, 0x40402)
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340), 0x2, 0x0)
writev(r4, &(0x7f00000001c0), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/18, @ANYRES32=0x0, @ANYRES32], 0x38}}, 0x0)

8.932581509s ago: executing program 0 (id=128):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, r1, 0xe5994000)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
wait4(r2, 0x0, 0x40000000, 0x0)
pipe(&(0x7f0000000040))
ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0)

8.048747801s ago: executing program 3 (id=129):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0x4000, 0x43180})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8000, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x6, 0x75, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0x1e, 0x5, 0x8, 0x7, 0x0, 0x9, 0x1, 0x24, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0x4, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x4, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0xffff1000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x0, [0x6800000000000000, 0x5, 0x2, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.664823346s ago: executing program 4 (id=130):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x4, 0x8, 0xa, 0x4, 0x3, 0x80, 0xdf9, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0xa, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

6.019151247s ago: executing program 3 (id=131):
r0 = socket(0x27, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x8000, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x819, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x8000, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x1, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x103, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x918)
sendmsg$nl_generic(r2, 0x0, 0x4008094)
getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280))

5.821674384s ago: executing program 1 (id=132):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, 0x0)
ioctl$TCSETAW(r0, 0x5407, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
syz_emit_ethernet(0x40, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
timerfd_settime(r2, 0x3, &(0x7f0000000100)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
readv(r2, &(0x7f0000000000), 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="200300001f00010000000000000000000f0300800c000100ff"], 0x320}], 0x1}, 0x0)
write$rfkill(r1, 0x0, 0x0)

5.192391571s ago: executing program 3 (id=133):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="400802000000c3dc"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000380)={0x40, 0x1a, 0x2, "b4c4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

4.695935224s ago: executing program 4 (id=134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

4.544197692s ago: executing program 1 (id=135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x10)
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
dup(r1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x404c800)

3.986919962s ago: executing program 4 (id=136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec7eb88e008ec02d1aa88000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x6528, 0x4)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000)
recvmmsg(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000d00)}, 0x4cc5a29b}], 0x1, 0x40002020, 0x0)

3.312539574s ago: executing program 1 (id=137):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)
pipe(0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

3.098365182s ago: executing program 0 (id=138):
getpid()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x444100)
ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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")
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x0, 0x373, &(0x7f0000000a40)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==")
read$FUSE(0xffffffffffffffff, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
lchown(&(0x7f0000000040)='./file1\x00', 0x0, r2)

2.876265913s ago: executing program 2 (id=139):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x40, 0x17, 0x43, "002eb1a46a13f7ce1e6ee41edcf87ad940fd2e27290d6f485e9a9e396419e8cf7ffc803ff563cbbf5ba32ab1075922597f26ae76cc0600b91e99aefd2fc6b0d8d6db11"}, 0x0, 0x0, 0x0, 0x0})
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x2000009)
statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x500, 0x400, 0x0)
fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000)
mount$overlay(0x0, 0x0, 0x0, 0x200005, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0x11, 0x19, "e77cb9fe31da08000000000000ef760554060000d600000000"}, 0x0, 0x0, 0x0, 0x0})

2.797100117s ago: executing program 1 (id=140):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
pselect6(0x0, 0x0, &(0x7f00000007c0)={0x5, 0xffffffff, 0xa, 0x1, 0x58, 0x3, 0x5, 0x81}, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r2, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000)

2.592876174s ago: executing program 4 (id=141):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

1.710390056s ago: executing program 0 (id=142):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x22c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0x5408, 0x13500}, &(0x7f0000000240), &(0x7f0000002a80), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1)

1.374889152s ago: executing program 4 (id=143):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_emit_ethernet(0x1be, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbb07bbbbaaaaaaaaaabb86dd6000021001883a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800000000608fff"], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfee9}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x51, 0x0, 0x0, 0x2c}, 0x4028805)
io_uring_enter(r0, 0x2b5c, 0xa902, 0x16, 0x0, 0x0)

461.100265ms ago: executing program 4 (id=144):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x2, 0x0)

322.87218ms ago: executing program 3 (id=145):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)

0s ago: executing program 1 (id=146):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts.
[   88.913998][ T5589] cgroup: Unknown subsys name 'net'
[   89.153463][ T5589] cgroup: Unknown subsys name 'cpuset'
[   89.208766][ T5589] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   91.205081][ T5589] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   92.043552][   T10] cfg80211: failed to load regulatory.db
[   93.883098][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.905974][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.937676][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.938782][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.941200][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.943174][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.950550][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.950601][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.951370][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.952110][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.973393][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.976376][ T4922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.991277][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.991431][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.992524][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.004318][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.095721][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.097100][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.106105][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.176608][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.183805][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   94.208819][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   94.210002][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   94.235419][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.248170][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   96.069233][ T5615] Bluetooth: hci1: command tx timeout
[   96.069702][ T5609] Bluetooth: hci0: command tx timeout
[   96.228499][ T5615] Bluetooth: hci3: command tx timeout
[   96.228676][ T5609] Bluetooth: hci2: command tx timeout
[   96.310779][ T5609] Bluetooth: hci4: command tx timeout
[   96.886867][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.888083][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.888977][ T5603] bridge_slave_0: entered allmulticast mode
[   96.903999][ T5603] bridge_slave_0: entered promiscuous mode
[   96.979205][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.979469][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.979677][ T5603] bridge_slave_1: entered allmulticast mode
[   96.982125][ T5603] bridge_slave_1: entered promiscuous mode
[   97.160398][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.160732][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.160995][ T5604] bridge_slave_0: entered allmulticast mode
[   97.165356][ T5604] bridge_slave_0: entered promiscuous mode
[   97.209144][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.209438][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.209916][ T5605] bridge_slave_0: entered allmulticast mode
[   97.212424][ T5605] bridge_slave_0: entered promiscuous mode
[   97.243778][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.244532][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.244868][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.245171][ T5604] bridge_slave_1: entered allmulticast mode
[   97.252313][ T5604] bridge_slave_1: entered promiscuous mode
[   97.311895][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.312159][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.312361][ T5605] bridge_slave_1: entered allmulticast mode
[   97.314842][ T5605] bridge_slave_1: entered promiscuous mode
[   97.338351][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.455571][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.456054][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.456300][ T5606] bridge_slave_0: entered allmulticast mode
[   97.461888][ T5606] bridge_slave_0: entered promiscuous mode
[   97.546043][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.546496][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.546856][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.547134][ T5606] bridge_slave_1: entered allmulticast mode
[   97.581823][ T5606] bridge_slave_1: entered promiscuous mode
[   97.583238][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.583484][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.583692][ T5607] bridge_slave_0: entered allmulticast mode
[   97.586137][ T5607] bridge_slave_0: entered promiscuous mode
[   97.622367][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.634450][ T5603] team0: Port device team_slave_0 added
[   97.649454][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.681305][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.681541][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.681743][ T5607] bridge_slave_1: entered allmulticast mode
[   97.684288][ T5607] bridge_slave_1: entered promiscuous mode
[   97.700069][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.715612][ T5603] team0: Port device team_slave_1 added
[   97.844135][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.907863][ T5604] team0: Port device team_slave_0 added
[   97.913280][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.920275][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.933351][ T5605] team0: Port device team_slave_0 added
[   97.950218][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.950229][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.950248][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.955399][ T5604] team0: Port device team_slave_1 added
[   98.015334][ T5605] team0: Port device team_slave_1 added
[   98.025158][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.026838][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.026848][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.026867][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.149455][ T5609] Bluetooth: hci0: command tx timeout
[   98.149490][ T5609] Bluetooth: hci1: command tx timeout
[   98.178679][ T5606] team0: Port device team_slave_0 added
[   98.308149][ T5615] Bluetooth: hci2: command tx timeout
[   98.308184][ T5615] Bluetooth: hci3: command tx timeout
[   98.388141][ T5609] Bluetooth: hci4: command tx timeout
[   98.610905][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.610919][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.610938][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.614692][ T5606] team0: Port device team_slave_1 added
[   98.616434][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.616444][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.616462][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.629636][ T5607] team0: Port device team_slave_0 added
[   98.643762][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.643849][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.643990][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.753982][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.754024][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.754094][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.780772][ T5607] team0: Port device team_slave_1 added
[   98.929791][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.929804][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.929823][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.997755][ T5603] hsr_slave_0: entered promiscuous mode
[   99.004957][ T5603] hsr_slave_1: entered promiscuous mode
[   99.015470][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.015481][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.015500][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.025970][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.026015][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.026088][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.145390][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.145403][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.145421][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.259334][ T5604] hsr_slave_0: entered promiscuous mode
[   99.268702][ T5604] hsr_slave_1: entered promiscuous mode
[   99.270233][ T5604] debugfs: 'hsr0' already exists in 'hsr'
[   99.270319][ T5604] Cannot create hsr debugfs directory
[   99.287649][ T5605] hsr_slave_0: entered promiscuous mode
[   99.293872][ T5605] hsr_slave_1: entered promiscuous mode
[   99.298612][ T5605] debugfs: 'hsr0' already exists in 'hsr'
[   99.298687][ T5605] Cannot create hsr debugfs directory
[   99.501281][ T5606] hsr_slave_0: entered promiscuous mode
[   99.502874][ T5606] hsr_slave_1: entered promiscuous mode
[   99.504165][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   99.504188][ T5606] Cannot create hsr debugfs directory
[   99.600750][ T5607] hsr_slave_0: entered promiscuous mode
[   99.602343][ T5607] hsr_slave_1: entered promiscuous mode
[   99.603876][ T5607] debugfs: 'hsr0' already exists in 'hsr'
[   99.603906][ T5607] Cannot create hsr debugfs directory
[  100.238283][ T5609] Bluetooth: hci1: command tx timeout
[  100.238301][ T5615] Bluetooth: hci0: command tx timeout
[  100.389144][ T5615] Bluetooth: hci3: command tx timeout
[  100.389173][ T5615] Bluetooth: hci2: command tx timeout
[  100.468137][ T5609] Bluetooth: hci4: command tx timeout
[  100.555115][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  100.602573][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.617937][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  100.644752][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.648345][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  100.695299][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.723665][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  100.764451][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.881509][ T5604] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.920611][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.927123][ T5604] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  100.993909][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.007439][ T5604] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  101.044604][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.078650][ T5604] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  101.123596][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.265856][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  101.304920][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.325597][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  101.367523][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.386821][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  101.414210][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.445077][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  101.463454][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.637668][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  101.688855][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.707314][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  101.742351][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.757294][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  101.784207][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.833696][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  101.863848][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.076665][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.113319][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.131387][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.162510][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.186228][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.225738][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.246122][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.247626][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.272374][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.308197][ T5615] Bluetooth: hci1: command tx timeout
[  102.308241][ T5609] Bluetooth: hci0: command tx timeout
[  102.422594][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.426330][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[  102.478254][ T5615] Bluetooth: hci3: command tx timeout
[  102.478295][ T5609] Bluetooth: hci2: command tx timeout
[  102.531710][  T835] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.532006][  T835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.548104][ T5609] Bluetooth: hci4: command tx timeout
[  102.603197][  T835] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.603365][  T835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.657466][ T5604] 8021q: adding VLAN 0 to HW filter on device team0
[  102.690096][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.735110][  T835] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.735293][  T835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.805175][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.805460][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.882452][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[  102.953546][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.971540][  T835] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.971717][  T835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.035682][  T835] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.035938][  T835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.179949][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[  103.275312][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.298590][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.298763][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.383322][   T95] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.383454][   T95] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.500816][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[  103.585205][   T95] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.585460][   T95] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.667788][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.681969][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.492428][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.887284][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.067243][ T5603] veth0_vlan: entered promiscuous mode
[  105.166585][ T5603] veth1_vlan: entered promiscuous mode
[  105.228163][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.454873][ T5604] veth0_vlan: entered promiscuous mode
[  105.490916][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.567759][ T5604] veth1_vlan: entered promiscuous mode
[  105.635515][ T5603] veth0_macvtap: entered promiscuous mode
[  105.691336][ T5603] veth1_macvtap: entered promiscuous mode
[  105.737251][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.791417][ T5605] veth0_vlan: entered promiscuous mode
[  105.899377][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.940347][ T5605] veth1_vlan: entered promiscuous mode
[  105.957818][ T5604] veth0_macvtap: entered promiscuous mode
[  105.973461][ T5606] veth0_vlan: entered promiscuous mode
[  106.008682][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.072722][ T5604] veth1_macvtap: entered promiscuous mode
[  106.105929][   T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.121753][   T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.138766][   T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.142251][ T5606] veth1_vlan: entered promiscuous mode
[  106.196533][   T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.324572][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.437601][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.599254][ T5605] veth0_macvtap: entered promiscuous mode
[  106.693854][   T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.696944][   T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.749167][   T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.753877][ T5605] veth1_macvtap: entered promiscuous mode
[  106.800564][   T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.873708][ T5606] veth0_macvtap: entered promiscuous mode
[  106.917423][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.917447][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.027190][ T5606] veth1_macvtap: entered promiscuous mode
[  107.161589][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.318909][ T5607] veth0_vlan: entered promiscuous mode
[  107.356965][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.366391][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.366420][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.481517][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.542521][  T835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.578811][  T835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.595485][  T835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.596854][ T5607] veth1_vlan: entered promiscuous mode
[  107.636315][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.637328][  T835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.640145][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.640170][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.790622][ T1406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.837269][ T1406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.858999][ T1406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.883328][ T1406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.981394][ T1406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.981415][ T1406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.085273][ T5798] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  108.832302][ T5607] veth0_macvtap: entered promiscuous mode
[  109.055470][ T5607] veth1_macvtap: entered promiscuous mode
[  109.094560][ T1406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.094579][ T1406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.314261][ T1406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.314283][ T1406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.531505][   T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.531523][   T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.557178][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.824056][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.971107][ T5810] loop3: detected capacity change from 0 to 40427
[  110.013517][ T5810] F2FS-fs (loop3): invalid crc value
[  110.074050][  T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.074071][  T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.133232][   T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.134149][   T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.136711][   T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.176813][   T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.209574][ T5810] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  110.223795][ T5810] F2FS-fs (loop3): Start checkpoint disabled!
[  110.301210][ T5810] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  110.309109][ T5810] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  110.610550][ T5810] syz.3.7: attempt to access beyond end of device
[  110.610550][ T5810] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  111.267417][   T13] kworker/u8:1: attempt to access beyond end of device
[  111.267417][   T13] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  111.315037][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  111.315072][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  111.315087][   T13] Workqueue: writeback wb_workfn (flush-7:3)
[  111.315134][   T13] Call Trace:
[  111.315143][   T13]  <TASK>
[  111.315153][   T13]  dump_stack_lvl+0xe8/0x150
[  111.315183][   T13]  f2fs_stop_checkpoint+0x383/0x540
[  111.315235][   T13]  f2fs_write_end_io+0x1274/0x1740
[  111.315285][   T13]  __submit_merged_bio+0x256/0x6a0
[  111.315316][   T13]  __submit_merged_write_cond+0x3c9/0x4e0
[  111.315363][   T13]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  111.315425][   T13]  f2fs_write_data_pages+0x287e/0x34f0
[  111.315492][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.315517][   T13]  ? __kasan_check_byte+0x12/0x40
[  111.315558][   T13]  ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0
[  111.315630][   T13]  ? __lock_acquire+0x6b5/0x2d10
[  111.315729][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.315758][   T13]  do_writepages+0x32e/0x550
[  111.315786][   T13]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  111.315809][   T13]  ? reacquire_held_locks+0x104/0x190
[  111.315832][   T13]  ? rt_spin_lock+0x1e0/0x400
[  111.315866][   T13]  __writeback_single_inode+0x133/0x10e0
[  111.315895][   T13]  ? rt_spin_unlock+0x160/0x200
[  111.315922][   T13]  writeback_sb_inodes+0x97f/0x1980
[  111.315964][   T13]  ? lockdep_hardirqs_on+0x7a/0x110
[  111.316003][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  111.316068][   T13]  ? rcu_is_watching+0x15/0xb0
[  111.316101][   T13]  wb_writeback+0x445/0xb00
[  111.316141][   T13]  ? queue_io+0x251/0x440
[  111.316170][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  111.316232][   T13]  wb_workfn+0x3fd/0xf20
[  111.316260][   T13]  ? look_up_lock_class+0x57/0x110
[  111.316308][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  111.316341][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.316373][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  111.316405][   T13]  ? process_one_work+0x8b7/0x1710
[  111.316433][   T13]  ? process_one_work+0x8b7/0x1710
[  111.316473][   T13]  ? process_one_work+0x8b7/0x1710
[  111.316499][   T13]  process_one_work+0x9a3/0x1710
[  111.316550][   T13]  ? __pfx_process_one_work+0x10/0x10
[  111.316575][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.316622][   T13]  worker_thread+0xba8/0x11e0
[  111.316679][   T13]  kthread+0x388/0x470
[  111.316713][   T13]  ? __pfx_worker_thread+0x10/0x10
[  111.316739][   T13]  ? __pfx_kthread+0x10/0x10
[  111.316774][   T13]  ret_from_fork+0x514/0xb70
[  111.316805][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  111.316834][   T13]  ? __switch_to+0xc79/0x1410
[  111.316861][   T13]  ? __pfx_kthread+0x10/0x10
[  111.316896][   T13]  ret_from_fork_asm+0x1a/0x30
[  111.316946][   T13]  </TASK>
[  111.382475][   T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  111.383010][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  111.383075][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  111.383116][   T13] Workqueue: writeback wb_workfn (flush-7:3)
[  111.383237][   T13] Call Trace:
[  111.383275][   T13]  <TASK>
[  111.383298][   T13]  dump_stack_lvl+0xe8/0x150
[  111.383383][   T13]  f2fs_stop_checkpoint+0x383/0x540
[  111.383526][   T13]  f2fs_write_end_io+0x1274/0x1740
[  111.383657][   T13]  __submit_merged_bio+0x256/0x6a0
[  111.383769][   T13]  __submit_merged_write_cond+0x3c9/0x4e0
[  111.383889][   T13]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  111.384080][   T13]  f2fs_write_data_pages+0x287e/0x34f0
[  111.384244][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.384311][   T13]  ? __kasan_check_byte+0x12/0x40
[  111.384421][   T13]  ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0
[  111.384598][   T13]  ? __lock_acquire+0x6b5/0x2d10
[  111.384807][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.384892][   T13]  do_writepages+0x32e/0x550
[  111.384960][   T13]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  111.385022][   T13]  ? reacquire_held_locks+0x104/0x190
[  111.385083][   T13]  ? rt_spin_lock+0x1e0/0x400
[  111.385171][   T13]  __writeback_single_inode+0x133/0x10e0
[  111.385245][   T13]  ? rt_spin_unlock+0x160/0x200
[  111.385318][   T13]  writeback_sb_inodes+0x97f/0x1980
[  111.385427][   T13]  ? lockdep_hardirqs_on+0x7a/0x110
[  111.385525][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  111.385688][   T13]  ? rcu_is_watching+0x15/0xb0
[  111.385775][   T13]  wb_writeback+0x445/0xb00
[  111.385876][   T13]  ? queue_io+0x251/0x440
[  111.385952][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  111.386059][   T13]  wb_workfn+0x3fd/0xf20
[  111.386118][   T13]  ? look_up_lock_class+0x57/0x110
[  111.386270][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  111.386359][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.386439][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  111.386521][   T13]  ? process_one_work+0x8b7/0x1710
[  111.386596][   T13]  ? process_one_work+0x8b7/0x1710
[  111.386692][   T13]  ? process_one_work+0x8b7/0x1710
[  111.386765][   T13]  process_one_work+0x9a3/0x1710
[  111.386922][   T13]  ? __pfx_process_one_work+0x10/0x10
[  111.386980][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.387108][   T13]  worker_thread+0xba8/0x11e0
[  111.387263][   T13]  kthread+0x388/0x470
[  111.387358][   T13]  ? __pfx_worker_thread+0x10/0x10
[  111.387424][   T13]  ? __pfx_kthread+0x10/0x10
[  111.387523][   T13]  ret_from_fork+0x514/0xb70
[  111.387598][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  111.387685][   T13]  ? __switch_to+0xc79/0x1410
[  111.387749][   T13]  ? __pfx_kthread+0x10/0x10
[  111.387843][   T13]  ret_from_fork_asm+0x1a/0x30
[  111.387910][   T13]  </TASK>
[  111.487424][   T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  112.263001][  T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.263022][  T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.342040][ T5819] block nbd2: shutting down sockets
[  112.384855][ T5814] loop1: detected capacity change from 0 to 32768
[  112.600344][ T5817] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  112.600494][ T5817] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  112.873589][ T5814] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  112.900110][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.900131][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.292253][ T5817] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  113.464395][ T5814] XFS (loop1): Ending clean mount
[  113.467410][ T5817] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  113.481809][ T5817] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  114.328111][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout
[  115.158204][ T5603] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.176105][ T5817] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  115.593019][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout
[  115.743863][ T5817] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  115.743977][ T5817] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  115.880271][ T5817] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  115.983994][ T5817] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  115.984098][ T5817] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  116.101306][ T5817] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  116.187849][ T5817] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  116.189932][ T5817] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  116.432863][ T5817] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  117.188180][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout
[  117.354245][ T5858] loop3: detected capacity change from 0 to 64
[  117.439533][ T5860] netlink: 'syz.2.13': attribute type 4 has an invalid length.
[  117.488583][ T5862] netlink: 'syz.2.13': attribute type 4 has an invalid length.
[  117.737444][ T5863] hfs: request for non-existent node 131072 in B*Tree
[  117.737464][ T5863] hfs: request for non-existent node 131072 in B*Tree
[  117.747695][ T5863] hfs: request for non-existent node 131072 in B*Tree
[  117.747715][ T5863] hfs: request for non-existent node 131072 in B*Tree
[  117.769114][ T5863] hfs: request for non-existent node 131072 in B*Tree
[  117.769135][ T5863] hfs: request for non-existent node 131072 in B*Tree
[  117.771351][ T5858] hfs: request for non-existent node 131072 in B*Tree
[  117.771367][ T5858] hfs: request for non-existent node 131072 in B*Tree
[  117.772801][ T5858] hfs: request for non-existent node 131072 in B*Tree
[  117.772816][ T5858] hfs: request for non-existent node 131072 in B*Tree
[  117.774861][ T5858] hfs: request for non-existent node 131072 in B*Tree
[  117.774878][ T5858] hfs: request for non-existent node 131072 in B*Tree
[  117.776168][ T5858] hfs: request for non-existent node 12 in B*Tree
[  117.776183][ T5858] hfs: request for non-existent node 12 in B*Tree
[  117.786804][ T5858] hfs: request for non-existent node 13 in B*Tree
[  117.786825][ T5858] hfs: request for non-existent node 13 in B*Tree
[  117.788481][ T5855] loop4: detected capacity change from 0 to 32768
[  117.811324][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout
[  117.811359][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout
[  117.993316][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout
[  118.001219][ T5858] hfs: request for non-existent node 14 in B*Tree
[  118.001238][ T5858] hfs: request for non-existent node 14 in B*Tree
[  118.050273][ T5855] (syz.4.15,5855,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  118.101098][ T5855] (syz.4.15,5855,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  118.198881][ T5855] JBD2: Ignoring recovery information on journal
[  118.232391][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout
[  118.331869][ T5855] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  119.269304][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout
[  119.324819][ T5873] faux_driver vkms: [drm] Unknown color mode 2048; guessing buffer size.
[  119.832737][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout
[  119.832803][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout
[  120.068956][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout
[  120.308363][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout
[  120.463833][ T5886] loop2: detected capacity change from 0 to 64
[  120.592348][ T5886] =======================================================
[  120.592348][ T5886] WARNING: The mand mount option has been deprecated and
[  120.592348][ T5886]          and is ignored by this kernel. Remove the mand
[  120.592348][ T5886]          option from the mount to silence this warning.
[  120.592348][ T5886] =======================================================
[  120.592439][ T5886] hfs: Unknown parameter 'iochar²œ]Òcp437'
[  121.084496][ T5607] ocfs2: Unmounting device (7,4) on (node local)
[  121.587422][ T5905] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET)
[  121.908080][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout
[  122.160198][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout
[  122.369138][ T5918] Zero length message leads to an empty skb
[  122.397851][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout
[  123.514969][ T5930] loop2: detected capacity change from 0 to 128
[  123.769570][ T5923] block nbd0: shutting down sockets
[  123.781661][ T5930] EXT4-fs (loop2): Test dummy encryption mode enabled
[  124.262093][ T5930] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.325861][ T5930] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.437362][ T5930] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  124.522611][ T5943] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  124.893382][   T37] audit: type=1804 audit(1777395857.371:2): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.33" name="/newroot/5/mnt/file0" dev="loop2" ino=12 res=1 errno=0
[  125.551628][ T5613] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  125.634226][ T5606] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.863713][ T5613] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  125.863745][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  125.863765][ T5613] usb 4-1: Product: syz
[  125.954724][ T5613] usb 4-1: config 0 descriptor??
[  126.288020][ T5613] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  126.579027][ T5613] usb 4-1: Detected FT232H
[  126.631587][ T5613] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  126.839165][ T5613] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32
[  126.861000][ T5613] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  127.127307][ T1011] usb 4-1: USB disconnect, device number 2
[  128.687945][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  128.847960][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  129.047950][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  129.719190][ T1011] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  129.826795][ T1011] ftdi_sio 4-1:0.0: device disconnected
[  130.535834][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.673065][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.236008][ T6002] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003
[  131.508030][ T5898] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  131.760596][ T5898] usb 3-1: not running at top speed; connect to a high speed hub
[  131.764871][ T5898] usb 3-1: config 3 has no interfaces?
[  131.797188][ T5898] usb 3-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26
[  131.797219][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.797240][ T5898] usb 3-1: Product: syz
[  131.797255][ T5898] usb 3-1: Manufacturer: syz
[  131.797269][ T5898] usb 3-1: SerialNumber: syz
[  132.367799][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.500254][ T5898] usb 3-1: USB disconnect, device number 2
[  132.518336][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.971788][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  132.971929][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  133.948217][ T5717] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  134.170009][ T5717] usb 3-1: Using ep0 maxpacket: 16
[  134.186103][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  134.186207][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  134.241817][ T5717] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  134.241850][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.241871][ T5717] usb 3-1: Product: syz
[  134.241887][ T5717] usb 3-1: Manufacturer: syz
[  134.241902][ T5717] usb 3-1: SerialNumber: syz
[  134.329284][ T5717] usb 3-1: config 0 descriptor??
[  134.504169][ T5717] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  134.504205][ T5717] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  135.131652][ T5717] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  135.143887][ T5717] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  135.790414][ T5717] em28xx 3-1:0.0: AC97 command still being executed: not handled properly!
[  135.790441][ T5717] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  135.882262][ T6047] loop3: detected capacity change from 0 to 32768
[  135.986130][ T6047] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.008091][ T5717] em28xx 3-1:0.0: AC97 command still being executed: not handled properly!
[  136.008131][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  136.173762][ T1190] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.202682][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  136.203130][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  136.203597][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  136.204415][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  136.306212][ T6047] XFS (loop3): Ending clean mount
[  136.308549][ T5717] usb 3-1: USB disconnect, device number 3
[  136.818570][ T6070] binder_alloc: 6069: binder_alloc_buf size 4294968248 failed, no address space
[  136.818691][ T6070] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192)
[  136.908040][ T1190] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.931842][ T1190] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.985244][ T1190] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.254976][ T6078] netlink: 72 bytes leftover after parsing attributes in process `syz.4.70'.
[  138.938045][ T5738] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  139.088078][ T5796] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  139.095832][ T5738] usb 5-1: unable to get BOS descriptor or descriptor too short
[  139.096763][ T5738] usb 5-1: not running at top speed; connect to a high speed hub
[  139.923527][ T5738] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  139.923556][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.923576][ T5738] usb 5-1: Product: syz
[  139.923590][ T5738] usb 5-1: Manufacturer: syz
[  139.923605][ T5738] usb 5-1: SerialNumber: syz
[  140.040498][ T5796] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  140.040531][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.040552][ T5796] usb 3-1: Product: syz
[  140.040566][ T5796] usb 3-1: Manufacturer: syz
[  140.040582][ T5796] usb 3-1: SerialNumber: syz
[  140.151175][ T5717] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  140.151238][ T5717] XFS (loop3): Unmount and run xfs_repair
[  140.151252][ T5717] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  140.151269][ T5717] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  140.151285][ T5717] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10  ................
[  140.151300][ T5717] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  140.151314][ T5717] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01  ....lK..........
[  140.151328][ T5717] 00000040: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00  ................
[  140.151341][ T5717] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  140.151355][ T5717] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  140.151369][ T5717] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  140.151592][ T5717] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x14 len 4 error 74
[  140.566349][ T5604] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  140.593903][ T5717] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  140.593943][ T5717] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  140.594033][ T5717] loop3: lost filesystem error report for type 5 error -108
[  140.594107][ T5717] loop3: lost filesystem error report for type 5 error -117
[  140.611347][ T5738] usb 5-1: can't set config #1, error -71
[  140.754676][ T5738] usb 5-1: USB disconnect, device number 2
[  141.329394][ T5796] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  141.329462][ T5796] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  143.153294][ T5796] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  143.364089][ T5796] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[  143.365493][ T5796] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  143.365541][ T5796] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  143.550055][ T5796] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  143.662827][ T6121] binder: 6120:6121 ioctl c0306201 200000000680 returned -14
[  143.698512][ T1011] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  143.908500][ T5796] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  144.271148][ T5796] usb 3-1: USB disconnect, device number 4
[  145.098037][ T1011] usb 2-1: Using ep0 maxpacket: 16
[  145.127061][ T1011] usb 2-1: config 0 has no interfaces?
[  145.127103][ T1011] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  145.127128][ T1011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.376635][ T1011] usb 2-1: config 0 descriptor??
[  147.161142][ T1011] usb 2-1: USB disconnect, device number 2
[  147.337194][   T32] kernel read not supported for file /81/pagemap (pid: 32 comm: kworker/1:0)
[  147.765030][ T6150] loop2: detected capacity change from 0 to 512
[  148.250904][ T6150] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.95: inode has both inline data and extents flags
[  148.251071][ T6150] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  148.258115][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  148.258138][    C0] EXT4-fs (loop2): initial error at time 1777395880: ext4_orphan_get:1397: inode 15
[  148.258183][    C0] EXT4-fs (loop2): last error at time 1777395880: ext4_orphan_get:1397: inode 15
[  148.282837][ T6150] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.95: couldn't read orphan inode 15 (err -117)
[  148.282961][ T6150] loop2: lost filesystem error report for type 5 error -117
[  148.447915][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  148.507921][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  148.665470][ T6150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.167090][ T6164] loop0: detected capacity change from 0 to 32768
[  150.258339][ T6164] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.98 (6164)
[  150.266125][   T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  150.397390][ T6164] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.397438][ T6164] BTRFS info (device loop0): using sha256 checksum algorithm
[  150.464391][   T32] usb 5-1: Using ep0 maxpacket: 32
[  150.505659][   T32] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  150.505690][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.505710][   T32] usb 5-1: Product: syz
[  150.505726][   T32] usb 5-1: Manufacturer: syz
[  150.505740][   T32] usb 5-1: SerialNumber: syz
[  150.613713][   T32] usb 5-1: config 0 descriptor??
[  150.669953][   T32] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  150.904182][ T6164] BTRFS info (device loop0): rebuilding free space tree
[  151.191455][ T6164] BTRFS info (device loop0): disabling free space tree
[  151.191691][ T6164] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  151.191720][ T6164] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.247248][ T6164] BTRFS info (device loop0): setting nodatasum
[  151.247278][ T6164] BTRFS info (device loop0): setting nodatacow
[  151.247297][ T6164] BTRFS info (device loop0): turning off barriers
[  151.247320][ T6164] BTRFS info (device loop0): force clearing of disk cache
[  151.379799][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.390612][ T6164] loop0: detected capacity change from 32768 to 0
[  153.098897][   T32] gspca_ov534_9: sccb_write failed
[  153.431962][ T6206] loop2: detected capacity change from 0 to 512
[  153.582113][   T32] gspca_ov534_9: reg_w failed -71
[  153.818320][   T32] gspca_ov534_9: Unknown sensor 0000
[  153.818422][   T32] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  153.845425][ T6206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.845600][ T6206] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.258284][   T32] usb 5-1: USB disconnect, device number 3
[  155.025046][   T13] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  155.153025][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.234808][ T6216] loop3: detected capacity change from 0 to 32768
[  155.565145][ T6224] netlink: 'syz.4.112': attribute type 5 has an invalid length.
[  155.770327][ T5605] BTRFS error (device loop0 state A): Transaction aborted (error -5)
[  155.787693][ T5605] BTRFS: error (device loop0 state A) in __btrfs_run_delayed_items:1161: errno=-5 IO failure
[  155.787724][ T5605] BTRFS info (device loop0 state EA): forced readonly
[  155.824952][ T5605] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction.
[  155.825143][ T5605] BTRFS: error (device loop0 state EA) in cleanup_transaction:2068: errno=-5 IO failure
[  155.900401][ T5605] BTRFS info (device loop0 state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  155.939472][ T6229] loop2: detected capacity change from 0 to 32768
[  155.940761][ T6229] btrfs: Deprecated parameter 'usebackuproot'
[  155.940781][ T6229] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  155.959725][ T6229] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.113 (6229)
[  156.012758][ T6229] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.012793][ T6229] BTRFS info (device loop2): using crc32c checksum algorithm
[  156.238458][ T1406] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  156.238588][ T6229] BTRFS error (device loop2): failed to load root extent
[  156.238628][ T6229] BTRFS warning (device loop2): try to load backup roots slot 1
[  156.276034][ T1190] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  156.276188][ T6229] BTRFS warning (device loop2): couldn't read tree root
[  156.276228][ T6229] BTRFS warning (device loop2): try to load backup roots slot 2
[  156.278870][   T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  156.279001][ T6229] BTRFS warning (device loop2): couldn't read tree root
[  156.279023][ T6229] BTRFS warning (device loop2): try to load backup roots slot 3
[  156.422390][ T6229] BTRFS info (device loop2): rebuilding free space tree
[  156.564282][ T6229] BTRFS info (device loop2): checking UUID tree
[  156.567487][ T6229] BTRFS info (device loop2): enabling ssd optimizations
[  156.567511][ T6229] BTRFS info (device loop2): turning on async discard
[  156.567528][ T6229] BTRFS info (device loop2): enabling free space tree
[  156.567544][ T6229] BTRFS info (device loop2): force clearing of disk cache
[  156.567561][ T6229] BTRFS info (device loop2): enabling auto defrag
[  156.567577][ T6229] BTRFS info (device loop2): trying to use backup root at mount time
[  156.567609][ T6229] BTRFS info (device loop2): use zstd compression, level 3
[  156.905332][ T6216] read_mapping_page failed!
[  156.905344][ T6216] diRead: read_metapage failed
[  158.515803][ T6276] loop0: detected capacity change from 0 to 512
[  158.964243][ T6276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.964374][ T6276] ext4 filesystem being mounted at /27/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.800564][   T49] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  159.820569][ T6288] loop3: detected capacity change from 0 to 512
[  159.931289][ T6288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.931459][ T6288] ext4 filesystem being mounted at /30/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.156106][ T6285] loop4: detected capacity change from 0 to 512
[  160.239468][   T49] usb 2-1: Using ep0 maxpacket: 8
[  160.242105][   T49] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  160.269085][ T6285] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  160.269103][ T6285] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  160.748868][   T49] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  160.748900][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.748921][   T49] usb 2-1: Product: syz
[  160.748937][   T49] usb 2-1: Manufacturer: syz
[  160.748952][   T49] usb 2-1: SerialNumber: syz
[  160.829731][ T6285] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.126: bad orphan inode 131083
[  160.829763][ T6285] loop4: lost filesystem error report for type 5 error -117
[  160.863723][ T6285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.902899][   T49] usb 2-1: config 0 descriptor??
[  161.025722][   T49] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  161.025798][   T49] usb 2-1: setting power ON
[  161.026397][   T49] dvb-usb: bulk message failed: -22 (2/0)
[  161.211869][ T5605] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.382829][ T5604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.562783][   T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  161.574735][   T49] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  161.574852][   T49] usb 2-1: media controller created
[  161.671737][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.708231][   T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.765250][   T49] usb 2-1: selecting invalid altsetting 6
[  161.765279][   T49] usb 2-1: digital interface selection failed (-22)
[  161.765298][   T49] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  161.766460][   T49] usb 2-1: setting power OFF
[  161.766595][   T49] dvb-usb: bulk message failed: -22 (2/0)
[  161.766614][   T49] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  161.766627][   T49] (NULL device *): no alternate interface
[  161.849202][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  162.029876][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  162.029924][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.029951][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.029974][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  162.034215][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  162.034242][    T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  162.034262][    T9] usb 1-1: Manufacturer: syz
[  162.036663][ T5606] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.215730][ T6304] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  162.261493][   T49] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  162.912418][    T9] usb 1-1: config 0 descriptor??
[  163.669288][   T49] usb 2-1: USB disconnect, device number 3
[  163.979924][ T6311] netlink: 'syz.1.132': attribute type 1 has an invalid length.
[  163.979947][ T6311] netlink: 768 bytes leftover after parsing attributes in process `syz.1.132'.
[  164.282714][    T9] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  164.538062][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  164.804241][   T10] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  164.804273][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.875122][   T10] usb 4-1: config 0 descriptor??
[  164.926131][    T9] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  164.988854][    T9] usb 1-1: USB disconnect, device number 2
[  166.660001][ T6333] fido_id[6333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  166.766979][ T6336] loop0: detected capacity change from 0 to 4096
[  166.808324][ T5592] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  167.035173][ T6336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.117635][ T5592] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  167.117666][ T5592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.117686][ T5592] usb 3-1: Product: syz
[  167.117701][ T5592] usb 3-1: Manufacturer: syz
[  167.117715][ T5592] usb 3-1: SerialNumber: syz
[  167.272728][ T5592] usb 3-1: config 0 descriptor??
[  167.506887][ T5605] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.621750][   T10] usb 4-1: Cannot set autoneg
[  167.668826][   T10] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  167.798676][   T10] usb 4-1: USB disconnect, device number 3
[  168.656172][ T5609] block nbd0: Receive control failed (result -32)
[  168.700205][ T5609] block nbd0: Receive control failed (result -32)
[  168.856799][ T5592] usb 3-1: Firmware: major: 231, minor: 124, hardware type: UNKNOWN (185)
[  168.920912][ T6342] nbd0: detected capacity change from 0 to 128
[  169.060555][ T5592] usb 3-1: failed to fetch extended address, random address set
[  169.060588][ T5592] usb 3-1: atusb_probe: initialization failed, error = -524
[  169.062551][ T5592] atusb 3-1:0.0: probe with driver atusb failed with error -524
[  170.089241][ T5804] 
[  170.089254][ T5804] ======================================================
[  170.089262][ T5804] WARNING: possible circular locking dependency detected
[  170.089279][ T5804] syzkaller #0 Tainted: G             L     
[  170.089290][ T5804] ------------------------------------------------------
[  170.089298][ T5804] udevd/5804 is trying to acquire lock:
[  170.089309][ T5804] ffff88803ebb2660 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100
[  170.089362][ T5804] 
[  170.089362][ T5804] but task is already holding lock:
[  170.089369][ T5804] ffff8880642551f0 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  170.089413][ T5804] 
[  170.089413][ T5804] which lock already depends on the new lock.
[  170.089413][ T5804] 
[  170.089419][ T5804] 
[  170.089419][ T5804] the existing dependency chain (in reverse order) is:
[  170.089427][ T5804] 
[  170.089427][ T5804] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  170.089454][ T5804]        mutex_lock_nested+0x5a/0x1d0
[  170.089478][ T5804]        nbd_queue_rq+0xc6/0x1100
[  170.089499][ T5804]        blk_mq_dispatch_rq_list+0xa77/0x1910
[  170.089528][ T5804]        __blk_mq_sched_dispatch_requests+0xddb/0x1610
[  170.089558][ T5804]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[  170.089587][ T5804]        blk_mq_run_hw_queue+0x368/0x520
[  170.089612][ T5804]        blk_mq_dispatch_list+0xd1f/0xe20
[  170.089639][ T5804]        blk_mq_flush_plug_list+0x48d/0x570
[  170.089667][ T5804]        __blk_flush_plug+0x3ed/0x4d0
[  170.089694][ T5804]        __submit_bio+0x28d/0x580
[  170.089722][ T5804]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  170.089749][ T5804]        block_read_full_folio+0x7b7/0x830
[  170.089778][ T5804]        filemap_read_folio+0x137/0x3b0
[  170.089807][ T5804]        do_read_cache_folio+0x2bf/0x560
[  170.089836][ T5804]        read_part_sector+0xb8/0x2b0
[  170.089863][ T5804]        adfspart_check_ICS+0xb1/0x960
[  170.089891][ T5804]        bdev_disk_changed+0x817/0x1770
[  170.089918][ T5804]        blkdev_get_whole+0x2e5/0x480
[  170.089947][ T5804]        bdev_open+0x31e/0xcc0
[  170.089973][ T5804]        blkdev_open+0x485/0x620
[  170.089989][ T5804]        do_dentry_open+0x83d/0x13e0
[  170.090006][ T5804]        vfs_open+0x3b/0x350
[  170.090021][ T5804]        path_openat+0x2e43/0x38a0
[  170.090044][ T5804]        do_file_open+0x23e/0x4a0
[  170.090067][ T5804]        do_sys_openat2+0x113/0x200
[  170.090084][ T5804]        __x64_sys_openat+0x138/0x170
[  170.090102][ T5804]        do_syscall_64+0x15f/0xf80
[  170.090128][ T5804]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.090147][ T5804] 
[  170.090147][ T5804] -> #5 (set->srcu){.+.+}-{0:0}:
[  170.090175][ T5804]        __synchronize_srcu+0xca/0x300
[  170.090213][ T5804]        elevator_switch+0x1e8/0x7a0
[  170.090239][ T5804]        elevator_change+0x2cc/0x450
[  170.090266][ T5804]        elevator_set_default+0x36c/0x430
[  170.090292][ T5804]        blk_register_queue+0x3e9/0x4e0
[  170.090321][ T5804]        __add_disk+0x677/0xd50
[  170.090338][ T5804]        add_disk_fwnode+0xfb/0x480
[  170.090355][ T5804]        nbd_dev_add+0x72c/0xb50
[  170.090372][ T5804]        nbd_init+0x168/0x1f0
[  170.090398][ T5804]        do_one_initcall+0x250/0x870
[  170.090425][ T5804]        do_initcall_level+0x104/0x190
[  170.090450][ T5804]        do_initcalls+0x59/0xa0
[  170.090474][ T5804]        kernel_init_freeable+0x2a6/0x3e0
[  170.090500][ T5804]        kernel_init+0x1d/0x1d0
[  170.090516][ T5804]        ret_from_fork+0x514/0xb70
[  170.090568][ T5804]        ret_from_fork_asm+0x1a/0x30
[  170.090595][ T5804] 
[  170.090595][ T5804] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  170.090624][ T5804]        mutex_lock_nested+0x5a/0x1d0
[  170.090643][ T5804]        elevator_change+0x1b3/0x450
[  170.090668][ T5804]        elevator_set_none+0xb5/0x140
[  170.090693][ T5804]        blk_mq_update_nr_hw_queues+0x607/0x1a80
[  170.090712][ T5804]        nbd_start_device+0x17f/0xb20
[  170.090730][ T5804]        nbd_genl_connect+0x1651/0x1c80
[  170.090748][ T5804]        genl_family_rcv_msg_doit+0x22a/0x330
[  170.090780][ T5804]        genl_rcv_msg+0x61c/0x7a0
[  170.090809][ T5804]        netlink_rcv_skb+0x232/0x4b0
[  170.090830][ T5804]        genl_rcv+0x28/0x40
[  170.090857][ T5804]        netlink_unicast+0x780/0x920
[  170.090875][ T5804]        netlink_sendmsg+0x813/0xb40
[  170.090898][ T5804]        sock_sendmsg_nosec+0x112/0x150
[  170.090928][ T5804]        ____sys_sendmsg+0x55c/0x870
[  170.090952][ T5804]        ___sys_sendmsg+0x2a5/0x360
[  170.090975][ T5804]        __x64_sys_sendmsg+0x1c3/0x2a0
[  170.090999][ T5804]        do_syscall_64+0x15f/0xf80
[  170.091023][ T5804]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.091041][ T5804] 
[  170.091041][ T5804] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  170.091074][ T5804]        blk_alloc_queue+0x54e/0x690
[  170.091100][ T5804]        __blk_mq_alloc_disk+0x197/0x390
[  170.091129][ T5804]        nbd_dev_add+0x499/0xb50
[  170.091146][ T5804]        nbd_init+0x168/0x1f0
[  170.091171][ T5804]        do_one_initcall+0x250/0x870
[  170.091203][ T5804]        do_initcall_level+0x104/0x190
[  170.091263][ T5804]        do_initcalls+0x59/0xa0
[  170.091287][ T5804]        kernel_init_freeable+0x2a6/0x3e0
[  170.091324][ T5804]        kernel_init+0x1d/0x1d0
[  170.091355][ T5804]        ret_from_fork+0x514/0xb70
[  170.091378][ T5804]        ret_from_fork_asm+0x1a/0x30
[  170.091404][ T5804] 
[  170.091404][ T5804] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  170.091432][ T5804]        fs_reclaim_acquire+0x71/0x100
[  170.091459][ T5804]        kmem_cache_alloc_node_noprof+0x4b/0x6e0
[  170.091482][ T5804]        __alloc_skb+0x1d0/0x7d0
[  170.091503][ T5804]        tcp_stream_alloc_skb+0x3f/0x5c0
[  170.091533][ T5804]        tcp_sendmsg_locked+0x134b/0x5370
[  170.091562][ T5804]        tcp_sendmsg+0x2f/0x50
[  170.091590][ T5804]        sock_sendmsg_nosec+0xf9/0x150
[  170.091619][ T5804]        sock_write_iter+0x308/0x410
[  170.091646][ T5804]        vfs_write+0x629/0xba0
[  170.091681][ T5804]        ksys_write+0x156/0x270
[  170.091704][ T5804]        do_syscall_64+0x15f/0xf80
[  170.091728][ T5804]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.091747][ T5804] 
[  170.091747][ T5804] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  170.091775][ T5804]        lock_sock_nested+0x41/0x130
[  170.091793][ T5804]        inet_shutdown+0x6a/0x390
[  170.091819][ T5804]        nbd_mark_nsock_dead+0x2e9/0x560
[  170.091839][ T5804]        sock_shutdown+0x15e/0x260
[  170.091857][ T5804]        nbd_clear_sock+0x24/0x170
[  170.091877][ T5804]        nbd_ioctl+0x337/0xe40
[  170.091896][ T5804]        blkdev_ioctl+0x5e6/0x750
[  170.091913][ T5804]        __se_sys_ioctl+0xff/0x170
[  170.091937][ T5804]        do_syscall_64+0x15f/0xf80
[  170.091962][ T5804]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.091981][ T5804] 
[  170.091981][ T5804] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  170.092009][ T5804]        __lock_acquire+0x15a5/0x2d10
[  170.092038][ T5804]        lock_acquire+0x106/0x350
[  170.092065][ T5804]        mutex_lock_nested+0x5a/0x1d0
[  170.092082][ T5804]        nbd_queue_rq+0x37b/0x1100
[  170.092100][ T5804]        blk_mq_dispatch_rq_list+0xa77/0x1910
[  170.092126][ T5804]        __blk_mq_sched_dispatch_requests+0xddb/0x1610
[  170.092157][ T5804]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[  170.092194][ T5804]        blk_mq_run_hw_queue+0x368/0x520
[  170.092221][ T5804]        blk_mq_dispatch_list+0xd1f/0xe20
[  170.092248][ T5804]        blk_mq_flush_plug_list+0x48d/0x570
[  170.092275][ T5804]        __blk_flush_plug+0x3ed/0x4d0
[  170.092302][ T5804]        __submit_bio+0x28d/0x580
[  170.092330][ T5804]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  170.092356][ T5804]        block_read_full_folio+0x7b7/0x830
[  170.092385][ T5804]        filemap_read_folio+0x137/0x3b0
[  170.092413][ T5804]        do_read_cache_folio+0x2bf/0x560
[  170.092442][ T5804]        read_part_sector+0xb8/0x2b0
[  170.092467][ T5804]        adfspart_check_ICS+0xb1/0x960
[  170.092494][ T5804]        bdev_disk_changed+0x817/0x1770
[  170.092520][ T5804]        blkdev_get_whole+0x2e5/0x480
[  170.092547][ T5804]        bdev_open+0x31e/0xcc0
[  170.092573][ T5804]        blkdev_open+0x485/0x620
[  170.092589][ T5804]        do_dentry_open+0x83d/0x13e0
[  170.092605][ T5804]        vfs_open+0x3b/0x350
[  170.092620][ T5804]        path_openat+0x2e43/0x38a0
[  170.092643][ T5804]        do_file_open+0x23e/0x4a0
[  170.092665][ T5804]        do_sys_openat2+0x113/0x200
[  170.092682][ T5804]        __x64_sys_openat+0x138/0x170
[  170.092701][ T5804]        do_syscall_64+0x15f/0xf80
[  170.092725][ T5804]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.092744][ T5804] 
[  170.092744][ T5804] other info that might help us debug this:
[  170.092744][ T5804] 
[  170.092750][ T5804] Chain exists of:
[  170.092750][ T5804]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  170.092750][ T5804] 
[  170.092784][ T5804]  Possible unsafe locking scenario:
[  170.092784][ T5804] 
[  170.092790][ T5804]        CPU0                    CPU1
[  170.092796][ T5804]        ----                    ----
[  170.092802][ T5804]   lock(&cmd->lock);
[  170.092815][ T5804]                                lock(set->srcu);
[  170.092829][ T5804]                                lock(&cmd->lock);
[  170.092844][ T5804]   lock(&nsock->tx_lock);
[  170.092857][ T5804] 
[  170.092857][ T5804]  *** DEADLOCK ***
[  170.092857][ T5804] 
[  170.092862][ T5804] 3 locks held by udevd/5804:
[  170.092874][ T5804]  #0: ffff88802711f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0
[  170.092930][ T5804]  #1: ffff888026db5718 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x33e/0x520
[  170.092985][ T5804]  #2: ffff8880642551f0 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  170.093034][ T5804] 
[  170.093034][ T5804] stack backtrace:
[  170.093056][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  170.093084][ T5804] Tainted: [L]=SOFTLOCKUP
[  170.093092][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  170.093105][ T5804] Call Trace:
[  170.093113][ T5804]  <TASK>
[  170.093122][ T5804]  dump_stack_lvl+0xe8/0x150
[  170.093150][ T5804]  print_circular_bug+0x2e1/0x300
[  170.093175][ T5804]  check_noncircular+0x12e/0x150
[  170.093209][ T5804]  __lock_acquire+0x15a5/0x2d10
[  170.093254][ T5804]  ? nbd_queue_rq+0x37b/0x1100
[  170.093274][ T5804]  lock_acquire+0x106/0x350
[  170.093305][ T5804]  ? nbd_queue_rq+0x37b/0x1100
[  170.093330][ T5804]  ? nbd_queue_rq+0x37b/0x1100
[  170.093355][ T5804]  ? nbd_queue_rq+0x37b/0x1100
[  170.093375][ T5804]  mutex_lock_nested+0x5a/0x1d0
[  170.093394][ T5804]  ? nbd_queue_rq+0x37b/0x1100
[  170.093418][ T5804]  nbd_queue_rq+0x37b/0x1100
[  170.093445][ T5804]  ? __pfx_nbd_queue_rq+0x10/0x10
[  170.093471][ T5804]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  170.093503][ T5804]  blk_mq_dispatch_rq_list+0xa77/0x1910
[  170.093542][ T5804]  ? sbitmap_get+0x229/0x390
[  170.093571][ T5804]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  170.093602][ T5804]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  170.093636][ T5804]  __blk_mq_sched_dispatch_requests+0xddb/0x1610
[  170.093680][ T5804]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  170.093715][ T5804]  ? blk_mq_hw_queue_need_run+0x13c/0x690
[  170.093748][ T5804]  ? blk_mq_run_hw_queue+0x33e/0x520
[  170.093776][ T5804]  ? blk_mq_run_hw_queue+0x33e/0x520
[  170.093809][ T5804]  blk_mq_sched_dispatch_requests+0xda/0x1a0
[  170.093841][ T5804]  ? blk_mq_run_hw_queue+0x33e/0x520
[  170.093870][ T5804]  blk_mq_run_hw_queue+0x368/0x520
[  170.093899][ T5804]  blk_mq_dispatch_list+0xd1f/0xe20
[  170.093930][ T5804]  ? bdev_count_inflight+0x1cf/0x210
[  170.093953][ T5804]  ? blk_mq_dispatch_list+0x190/0xe20
[  170.093986][ T5804]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  170.094020][ T5804]  ? rcu_is_watching+0x15/0xb0
[  170.094043][ T5804]  blk_mq_flush_plug_list+0x48d/0x570
[  170.094073][ T5804]  ? blk_add_rq_to_plug+0x300/0x450
[  170.094103][ T5804]  ? blk_mq_submit_bio+0x1b66/0x29d0
[  170.094134][ T5804]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  170.094171][ T5804]  __blk_flush_plug+0x3ed/0x4d0
[  170.094212][ T5804]  ? __pfx___blk_flush_plug+0x10/0x10
[  170.094243][ T5804]  ? blkg_get+0x20/0x1d0
[  170.094278][ T5804]  __submit_bio+0x28d/0x580
[  170.094310][ T5804]  ? __pfx___submit_bio+0x10/0x10
[  170.094345][ T5804]  ? bio_associate_blkg+0x6d/0x230
[  170.094382][ T5804]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  170.094414][ T5804]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  170.094454][ T5804]  block_read_full_folio+0x7b7/0x830
[  170.094489][ T5804]  ? __pfx_blkdev_get_block+0x10/0x10
[  170.094511][ T5804]  filemap_read_folio+0x137/0x3b0
[  170.094542][ T5804]  ? __pfx_blkdev_read_folio+0x10/0x10
[  170.094576][ T5804]  ? __pfx_filemap_read_folio+0x10/0x10
[  170.094607][ T5804]  ? filemap_add_folio+0x3d9/0x610
[  170.094637][ T5804]  do_read_cache_folio+0x2bf/0x560
[  170.094668][ T5804]  ? __pfx_blkdev_read_folio+0x10/0x10
[  170.094705][ T5804]  read_part_sector+0xb8/0x2b0
[  170.094736][ T5804]  adfspart_check_ICS+0xb1/0x960
[  170.094767][ T5804]  ? lockdep_hardirqs_on+0x7a/0x110
[  170.094794][ T5804]  ? irqentry_exit+0x218/0x730
[  170.094819][ T5804]  ? rcu_is_watching+0x15/0xb0
[  170.094843][ T5804]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  170.094875][ T5804]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  170.094913][ T5804]  bdev_disk_changed+0x817/0x1770
[  170.094954][ T5804]  ? __pfx_bdev_disk_changed+0x10/0x10
[  170.094988][ T5804]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  170.095019][ T5804]  blkdev_get_whole+0x2e5/0x480
[  170.095052][ T5804]  bdev_open+0x31e/0xcc0
[  170.095086][ T5804]  blkdev_open+0x485/0x620
[  170.095107][ T5804]  ? __pfx_blkdev_open+0x10/0x10
[  170.095126][ T5804]  do_dentry_open+0x83d/0x13e0
[  170.095151][ T5804]  vfs_open+0x3b/0x350
[  170.095169][ T5804]  ? path_openat+0x2e2b/0x38a0
[  170.095203][ T5804]  path_openat+0x2e43/0x38a0
[  170.095247][ T5804]  ? __pfx_path_openat+0x10/0x10
[  170.095277][ T5804]  ? kasan_save_track+0x4f/0x80
[  170.095299][ T5804]  ? kasan_save_track+0x3e/0x80
[  170.095321][ T5804]  ? __kasan_slab_alloc+0x6c/0x80
[  170.095346][ T5804]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  170.095375][ T5804]  ? do_raw_spin_lock+0x12b/0x2f0
[  170.095407][ T5804]  do_file_open+0x23e/0x4a0
[  170.095432][ T5804]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  170.095462][ T5804]  ? __pfx_do_file_open+0x10/0x10
[  170.095487][ T5804]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  170.095521][ T5804]  ? alloc_fd+0x64e/0x6c0
[  170.095548][ T5804]  do_sys_openat2+0x113/0x200
[  170.095569][ T5804]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  170.095598][ T5804]  ? __pfx_do_sys_openat2+0x10/0x10
[  170.095621][ T5804]  ? rcu_is_watching+0x15/0xb0
[  170.095644][ T5804]  __x64_sys_openat+0x138/0x170
[  170.095667][ T5804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.095690][ T5804]  do_syscall_64+0x15f/0xf80
[  170.095718][ T5804]  ? clear_bhb_loop+0x40/0x90
[  170.095742][ T5804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.095763][ T5804] RIP: 0033:0x7f1be7467407
[  170.095788][ T5804] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  170.095806][ T5804] RSP: 002b:00007ffc3e82d3f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  170.095826][ T5804] RAX: ffffffffffffffda RBX: 00007f1be7379880 RCX: 00007f1be7467407
[  170.095842][ T5804] RDX: 00000000000a0800 RSI: 000056153c64de50 RDI: ffffffffffffff9c
[  170.095857][ T5804] RBP: 000056153c640910 R08: 0000000000000000 R09: 0000000000000000
[  170.095870][ T5804] R10: 0000000000000000 R11: 0000000000000202 R12: 000056153c654ba0
[  170.095884][ T5804] R13: 000056153c64e190 R14: 0000000000000000 R15: 000056153c654ba0
[  170.095908][ T5804]  </TASK>
[  170.136721][ T5804] block nbd0: Dead connection, failed to find a fallback
[  170.136746][ T5804] block nbd0: shutting down sockets
[  170.136762][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.136790][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.136960][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.136983][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.137155][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.137187][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.137293][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.137316][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.137419][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.137442][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.137561][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.137584][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.137698][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.137721][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.137826][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.141228][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.141315][ T5804] ldm_validate_partition_table(): Disk read failed.
[  170.141391][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.141415][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.143279][ T5804] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.143306][ T5804] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.143559][ T5804] Dev nbd0: unable to read RDB block 0
[  170.144102][ T5804]  nbd0: unable to read partition table
[  170.238092][ T5592] usb 3-1: USB disconnect, device number 5
[  170.309717][ T5804] ldm_validate_partition_table(): Disk read failed.
[  170.313089][ T5804] Dev nbd0: unable to read RDB block 0
[  170.326702][ T5804]  nbd0: unable to read partition table