last executing test programs:

26m18.123768134s ago: executing program 3 (id=486):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0102, 0x0)
write$vga_arbiter(r1, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x14)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)='Y\x00\x00\x00', 0x4}], 0x1}, 0x0)
capget(0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r4=>0x0, {'syz', 0x0, '0\x00'}}})
syz_io_uring_setup(0x34b9, 0x0, 0x0, 0x0, &(0x7f0000000cc0))
ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000d00)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]})
ioctl$DM_DEV_SUSPEND(r3, 0xc138fd06, &(0x7f0000000e80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}})
ioctl$DM_DEV_WAIT(r3, 0xc138fd08, &(0x7f0000000fc0)={0x4, 0x0, 0x0, 0x160, 0x138, 0x0, 0x0, 0x80c00, 0x7e, 0x0, @by_dev={r4}, "b917c1be8f3a946c67637d6a11aad3990792916d2660fa26fbd364abbac6fb367b6d2af5"})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0xa4242, 0x0)
socket$unix(0x1, 0x5, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x0, @fd=r5, 0x9, 0x0, 0x0, 0x10, 0x0, {0x40, 0x0, 0x0, '\x00', 0x0}})
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x2e, 0x4, 0x0, <r6=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000900)=@any_dev={0x4, 0x2c9, 0x0, 0x0, 0x1000, 0x9}}}, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x2e, 0xc0, 0xf5, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@new_dev={0x3, 0x2c8, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000400)={0x2, 0x8, 0x7}, 0x8)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000a40)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r8=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000ac0)={0x4, "140b7820ceefd14db8e6498c25f58fad9987ffe93bbabd18cf501922ff974a27", <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000b00)={"2486910284ed92340c00c5d5fbf5000000000000000100", r9})
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)

26m17.716147316s ago: executing program 3 (id=489):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000a00462000000407ff0200000000000000000000000000017f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/136], 0x90)
sysfs$3(0x3)
close(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './sys/bus/pci/rescan\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18)
unshare(0x20000)

26m14.111341073s ago: executing program 3 (id=494):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_dev$usbfs(0x0, 0x4, 0x2581)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
write(r2, &(0x7f0000000400)='wusb3801 0x4', 0xc)

26m13.838579661s ago: executing program 3 (id=497):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x6, 0x7, &(0x7f0000001e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ec0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000001f40)="63ec33c9e9b986c0f4f24abba1a4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x6f)

26m13.599543635s ago: executing program 3 (id=498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

26m13.406995995s ago: executing program 3 (id=499):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3adc, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000600)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x1c1842, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000880)=r2)
ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000c00)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

25m57.57263685s ago: executing program 32 (id=499):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3adc, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000600)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x1c1842, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000880)=r2)
ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000c00)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

25m52.219697045s ago: executing program 33 (id=511):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x129200, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'syzkaller0\x00', 0x7101})
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="09000000040000000800000040"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480)="8f7b24c0a825695abd59c27518664a475090c28bebee45c1b62d654e13421d25f11c859bd3a5900cfc16dd352baf1b4aff4de8fbfa776c44f66722f3bb8718c207bba8ee01cb157a06b147f5f545c7cba65030ffd9ba0abc59125ddccce3ad3505196acd146d8fefeb6b8955a4e959e2b62611dd972e3062417bf5b53ee4a08d29e740871b5d190740cc7d125bd7875d89862df3026fddffa8aaa7fc6ed6037f2fdd51a2a05363e1552506b1ff1c8eafe6d54978a0aabac32283a50077", 0x1003, r1}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580), 0x0, 0x2, r1}, 0x38)

19m56.396735136s ago: executing program 2 (id=1203):
epoll_create(0xe7)
r0 = epoll_create(0x6)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000000})
fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000780)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000d40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000dc0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000e40), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000e80), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0)
socket$inet6(0xa, 0x3, 0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x626f50a6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r5, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000001e00)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000001f00), &(0x7f0000001f40), 0x0, 0x700}, 0x2c)

19m49.988909639s ago: executing program 2 (id=1215):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc)

19m48.658962355s ago: executing program 2 (id=1221):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000a00462000000407ff0200000000000000000000000000017f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/140], 0x90)
sysfs$3(0x3)
close(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './sys/bus/pci/rescan\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2)
unshare(0x20000)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='measure #', 0x9)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
write(r5, &(0x7f00000000c0)='1', 0x1)

19m43.189182683s ago: executing program 2 (id=1226):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)

19m41.891772285s ago: executing program 2 (id=1234):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0)
keyctl$setperm(0x5, 0x0, 0x200a0204)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000003c0)={0x43, 0x0, 0x3, 0x3}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x1d, 0x80802, 0x6)
mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x84, &(0x7f00000005c0))
sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000480), 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="f7", 0x101d0}], 0x1}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0)

19m39.970438521s ago: executing program 2 (id=1240):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r0 = getpid()
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x6c0000, 0x0)
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1})
fcntl$lock(r3, 0x25, &(0x7f0000000340)={0x0, 0x1, 0x80, 0x200000007})
fcntl$lock(r3, 0x25, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x80000000})
bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000400))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r5}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

19m24.462268942s ago: executing program 34 (id=1240):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r0 = getpid()
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x6c0000, 0x0)
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1})
fcntl$lock(r3, 0x25, &(0x7f0000000340)={0x0, 0x1, 0x80, 0x200000007})
fcntl$lock(r3, 0x25, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x80000000})
bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000400))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r5}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

13m8.311751635s ago: executing program 7 (id=1822):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13m4.655560658s ago: executing program 7 (id=1825):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0)
keyctl$setperm(0x5, 0x0, 0x200a0204)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000003c0)={0x43, 0x0, 0x3, 0x3}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x1d, 0x80802, 0x6)
mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x84, &(0x7f00000005c0))
sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000480), 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="f7", 0x101d0}], 0x1}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0)

13m3.319044924s ago: executing program 7 (id=1828):
socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2})
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00')
request_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix@De', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0)
write(r2, &(0x7f0000000600)='by', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)

12m59.408345243s ago: executing program 7 (id=1835):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002880)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000028c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000002900)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002980)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000002a00), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000002a40), 0x4000087, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002a80), 0x2000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0)
fcntl$lock(r2, 0x24, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002ac0)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
sendto$inet(r5, &(0x7f0000002dc0), 0x0, 0x0, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002e40)=""/4110, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000003e80)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x20000081)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000012c0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x20000010)

12m54.82878249s ago: executing program 7 (id=1837):
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x10048, &(0x7f0000000a40)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc6b, &(0x7f0000002a80)="$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")
prlimit64(0x0, 0xe, &(0x7f00000026c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002700)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000002740)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
membarrier(0x10, 0x0)
sendmsg$nl_xfrm(r1, 0x0, 0x40082)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000027c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000002840), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000002880), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000028c0)=0x6)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0)
ioctl$RTC_PIE_ON(r4, 0x7005)

12m51.710322808s ago: executing program 7 (id=1840):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002880)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000028c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000002900)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002980)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000002a00), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000002a40), 0x4000087, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002a80), 0x2000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0)
fcntl$lock(r2, 0x24, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002ac0)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
sendto$inet(r5, &(0x7f0000002dc0), 0x0, 0x0, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002e40)=""/4110, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000003e80)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x25)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x20000081)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000012c0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x20000010)

12m36.396962349s ago: executing program 35 (id=1840):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002880)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000028c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000002900)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002980)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000002a00), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000002a40), 0x4000087, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002a80), 0x2000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0)
fcntl$lock(r2, 0x24, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002ac0)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
sendto$inet(r5, &(0x7f0000002dc0), 0x0, 0x0, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002e40)=""/4110, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000003e80)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x25)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x20000081)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000012c0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x20000010)

9m56.234955903s ago: executing program 1 (id=2099):
epoll_create(0xe7)
r0 = epoll_create(0x6)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000000})
fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000780)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000d40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000dc0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000e40), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000e80), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0)
socket$inet6(0xa, 0x3, 0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000001e00)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000001f00), &(0x7f0000001f40), 0x0, 0x700}, 0x2c)

9m54.056214186s ago: executing program 1 (id=2104):
epoll_create(0xe7)
r0 = epoll_create(0x6)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000000})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000780)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000d40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000dc0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000e40), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000e80), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0)
socket$inet6(0xa, 0x3, 0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r5, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000001e00)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000001f00), &(0x7f0000001f40), 0x0, 0x700}, 0x2c)

9m45.382316963s ago: executing program 1 (id=2118):
epoll_create(0xe7)
r0 = epoll_create(0x6)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000000})
fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000780)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000d40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000dc0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000e40), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000e80), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0)
socket$inet6(0xa, 0x3, 0x7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000010000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd60ed490a733c76a152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a76a0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c39100000000000000094d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158ef4f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179e"], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x626f50a6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r5, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000001e00)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000001f00), &(0x7f0000001f40), 0x0, 0x700}, 0x2c)

9m41.590374031s ago: executing program 1 (id=2127):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ef)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f0000000180)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f00000003c0)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0xf951, 0x7, 0x5, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x65, 0x0, 0xf6, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x9, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}, {@loopback, 0x296}, {@broadcast, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xd2, [@private=0xa010101]}]}}}}})
getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
openat(r1, 0x0, 0x9850c1, 0x182)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/ep1in-bulk\x00', 0x2, 0x24)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r3=>0x0})
r4 = syz_open_dev$sg(&(0x7f00000008c0), 0xffff0000, 0x2842)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000900)={0x0, 0x7, 0xb8})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24603, 0x1141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

9m35.24144452s ago: executing program 1 (id=2135):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ef)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f0000000180)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ed)
mount(0x0, 0x0, &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000880)={0x30, 0x5, 0x0, {0x0, 0x2, 0x8}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f00000003c0)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0xf951, 0x7, 0x5, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x65, 0x0, 0xf6, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x9, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}, {@loopback, 0x296}, {@broadcast, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xd2, [@private=0xa010101]}]}}}}})
getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
openat(r2, 0x0, 0x9850c1, 0x182)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/ep1in-bulk\x00', 0x2, 0x24)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000940))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r4=>0x0})
r5 = syz_open_dev$sg(&(0x7f00000008c0), 0xffff0000, 0x2842)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000900)={0x0, 0x7, 0xb8})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24603, 0x1141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

9m31.775862784s ago: executing program 1 (id=2140):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000300)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f00000003c0)="$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")
syz_mount_image$udf(&(0x7f0000000840), &(0x7f0000000880)='./file1\x00', 0x10048, &(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x67, 0xc54, &(0x7f0000001340)="$eJzs3U9onOl9B/DfMyOtRtp0o80m3qTNbgdSEqPUxv9iK7gEOVbUBhxviKzQPUWjP3aGlSUjyY03bYPakhZ6Cd1L6aWIJksLOfTU7TFKs4WEUighh+RQEDRZ9tCDDoHSll2F951npJEs27Nry5LXn88y+33nnd87ev6M3nkFfmYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj47OcunDiZDroVAMDDdHn8SydOe/8HgMfKFX//AwAAAAAAAAAAAADAYZeiGkcixcBrG2myvN9Su9Scv3lrYnRs78P6U6SoRLWsL261k6dOn/nU2XPD7bz78Q/aR+KF8SsX6hd/dvzG4uzS0uxMfWK+Ob0wM9v1M7SOX7j+bo/fbagcgPr1l27OXL26VD91/PSOh28NvtH35JHB8+eOnR1u106Mjo2Nd9T09L7rn36bO63weCKq0YgUbw2+mRoRUYn7H4t7vHb2W3/ZiaGyExOjY2VH5pqN+eXiwVTJVZWIesdBI+0xeghzcV9GIlaK5hcNHiq6N36jsdiYmputf7GxuNxcbi7Mp0qrtUV/6lGJ4RSxGhHrfbc/XW9U4/lI8cqJjTQVEdX2OHyyXBh87/ZU9qGPXSjaWe+NWK08AnN2iPVFNS5Hil++fjSmizHLt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQT1fj3SLGQNtJMeT5on1cufbn++fmrCx217fPKI//+8DAd8nNTLaoxVZ7xN9K7v9gBAAAAAAAAAAAAAAAA4EHrj2p8O1L82XN/UK4rjnJd+vvPD7/vxd/tXDP+7D2ep6g9HhErle7W5PbmpcOpUvy3Dx2jK7Woxjfy+r8/OejGAAAAAAAAAAAAAAAAAAAAPNaq8WKk+Mqxo2k1Or9TvDl/rX6lMTXX+lbY9nf/tr8zfXNzc7OeWjmSczLnSs7VnGs513NGJR+fcyTnZM6VnKs513Ku54xqPj7nSM7JnCs5V3Ou5VzPGT35+JwjOSdzruRczbmWcz1nHJLv7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeC+pRDXejhTf+tpGihQRIxGT0cq1voNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQqKVqHI8Uay/WyvurlYgrEfH25uZmefvfzc3NiI1i+34ddF8BAAAAAAAAAAAAAAAAAADg0ErV+FikeOb/NlI9Im4NvtH35JHB8+eOnR2uRjVSUdJZ/8L4lQv1iwvXbyzOLi3NztQnLn7nnfy42qXm/M1bE6NjD7wjXem/vf3zzemFmdlun+Ae7e+vXVy48fJi89pXl/d8fKB2YWppebExvffD0R+ViMnOPUNlgydGx8pGzzUb8+WhqXKHBlYiRrrtDAAAAAAAAAAAAAAAAAAAAIfGQKrG5yLFz//zTGqvG+9prfn/tda96lbtq3+0/VkAc7uyrfPzA7rZTt02dKhceF+fGB0bG+/Y3dN7e2nRppSq8Wyk+MQrHy7Xw6cY2HNtfFH3VFF3/UyuG/yNom5lR1VtaGJ0rH55Yf7Yhbm5henGcmNqbrY+fqMxfdsHBzzVbYcAAAAAAAAAAAAAAAAAAABg20Cqxk8ixX//w3+k9vfO5/X/Pa17Hev/f6dcQl+qpZ25pVzb/1S5tr+1/f7zwwPPP3en/fux/r9oU0rV+Ob2xxVsrf+f3FVb1P1FpHjzuY+Wj6WoPFHUNdrdaT3j1ebc7Imi9m8jxW++1a6NsvZarn1mu/ZkUdsfKf56Y2ftV3PtB7drTxW1RyPFD/5r79oPbdeeLmp/Hin++e/r7dqBovYPc+2R7drj0wtzM/ca1mL+vxspvnP591K7z3ec/47Pf1jZlVtum/O7b3c//+127D3/gx37VvK8/nmkOP2TD5dzebf5Pxspvlv7aK5rjf1Ufvzp8v/b8/+JSPGzf9tZezXXfmC79mS33Tpoxfx/O1J8/29+utXnPP95ZLdnqHP+f71nZ269SvZt/u/++/90x77B3K7pdzgWj6Oll7/+UmNubnbxvjdqz0c8iOfpdqN4me77z8qfgRMPsV82bByGjXudOb7Xv/9nJ/Zb8f7/l5Hi/49UU/s6Jr//v691b/v673++sf3+f35Xbjmg9/8PdOw7n69aensiasvXb/Q+G1Fbevnrx5rXG9dmr83Onzp54tOfPnvyxMmzvU+0L+62t7oeu/eCYv5/FCl+/I8/3vo7Zuf1397X/wO7cssBzf8znX3acV3T9VA8lor5/7tI8fRnf7r19+bdrv/bf/8f/djO3Pr9O6D5/2DHvsHcruY7HAsAAAAAAAAAAIBHyUCqxl9Fit//099O7TVE3fz7v5ldueWA/v3XkY59Mw90XcOdN7oeZACAQ6S4/vtQpPje5g+31nLvvP6L32rXdl7/3clh+P5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB41KWoxh9HioHXNtJaX3G/pXapOX/z1sTo2N6H9adIUYlqWV/caidPnT7zqbPnhtt5qe9hduMj8cL4lQv1iwvXbyzOLi3NztQn5pvTCzOzXT/D/R6/21A5gPXrL92cuXp1qX7q+OkdD98afKPvySOD588dOzvcrp0YHRsb76jp6X3XP/026Q77n4hq/DBSvDX4Zvp+X0Ql7n8s7vHa2W/9ZSeGyk5MjI6VHZlrNuaXiwdTJVdVIuodB420x+ghzMV9GYlYKZpfNHio6N74jcZiY2putv7FxuJyc7m5MJ8qrdYW/alHJYZTxGpErO/xK9kb1fhmpHjlxEb6l76IanscPnl5/EsnTt+7PZV96GMXinbWeyNWK4/AnB1ifVGNf4oUv3z9aPygL6InWrf4eMQXinwt4tUiPxORihfGmYhfPNRTO/upJ6pxJlIspI30el9xPmifVy59uf75+asLHbXt88oj//7wMB3yc1MtqvGj8oy/kf519+/1wAE1CgAAAAAAAAAAAAAAAIByJe1qpPjKsaOpXB+8taa4OX+tfqUxNdda1tde+9deM725ublZT60cyTmZcyXnas61nOs5o5KPzzmSczLnSs7VnGs513NGNR+fcyTnZM6VnKtl9m21eD3vj558fM6RnJM5V3Ku5lzLuZ4zDsnaPQAAAAAAAAAAAAAAAAAA4L2lEtXyW9y/9bWNVC6VHomYjFau+Z7f97xfBQAA///sg2Mq")
prlimit64(0x0, 0xe, &(0x7f0000001fc0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002000)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000002040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000020c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000002140), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000002180), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000021c0)=0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = fsopen(&(0x7f0000002200)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000002240)='cgroup.max.depth\x00', 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000002280), 0x12)
read(r3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

9m16.587847017s ago: executing program 36 (id=2140):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000300)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f00000003c0)="$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")
syz_mount_image$udf(&(0x7f0000000840), &(0x7f0000000880)='./file1\x00', 0x10048, &(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x67, 0xc54, &(0x7f0000001340)="$eJzs3U9onOl9B/DfMyOtRtp0o80m3qTNbgdSEqPUxv9iK7gEOVbUBhxviKzQPUWjP3aGlSUjyY03bYPakhZ6Cd1L6aWIJksLOfTU7TFKs4WEUighh+RQEDRZ9tCDDoHSll2F951npJEs27Nry5LXn88y+33nnd87ev6M3nkFfmYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj47OcunDiZDroVAMDDdHn8SydOe/8HgMfKFX//AwAAAAAAAAAAAADAYZeiGkcixcBrG2myvN9Su9Scv3lrYnRs78P6U6SoRLWsL261k6dOn/nU2XPD7bz78Q/aR+KF8SsX6hd/dvzG4uzS0uxMfWK+Ob0wM9v1M7SOX7j+bo/fbagcgPr1l27OXL26VD91/PSOh28NvtH35JHB8+eOnR1u106Mjo2Nd9T09L7rn36bO63weCKq0YgUbw2+mRoRUYn7H4t7vHb2W3/ZiaGyExOjY2VH5pqN+eXiwVTJVZWIesdBI+0xeghzcV9GIlaK5hcNHiq6N36jsdiYmputf7GxuNxcbi7Mp0qrtUV/6lGJ4RSxGhHrfbc/XW9U4/lI8cqJjTQVEdX2OHyyXBh87/ZU9qGPXSjaWe+NWK08AnN2iPVFNS5Hil++fjSmizHLt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQT1fj3SLGQNtJMeT5on1cufbn++fmrCx217fPKI//+8DAd8nNTLaoxVZ7xN9K7v9gBAAAAAAAAAAAAAAAA4EHrj2p8O1L82XN/UK4rjnJd+vvPD7/vxd/tXDP+7D2ep6g9HhErle7W5PbmpcOpUvy3Dx2jK7Woxjfy+r8/OejGAAAAAAAAAAAAAAAAAAAAPNaq8WKk+Mqxo2k1Or9TvDl/rX6lMTXX+lbY9nf/tr8zfXNzc7OeWjmSczLnSs7VnGs513NGJR+fcyTnZM6VnKs513Ku54xqPj7nSM7JnCs5V3Ou5VzPGT35+JwjOSdzruRczbmWcz1nHJLv7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeC+pRDXejhTf+tpGihQRIxGT0cq1voNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQqKVqHI8Uay/WyvurlYgrEfH25uZmefvfzc3NiI1i+34ddF8BAAAAAAAAAAAAAAAAAADg0ErV+FikeOb/NlI9Im4NvtH35JHB8+eOnR2uRjVSUdJZ/8L4lQv1iwvXbyzOLi3NztQnLn7nnfy42qXm/M1bE6NjD7wjXem/vf3zzemFmdlun+Ae7e+vXVy48fJi89pXl/d8fKB2YWppebExvffD0R+ViMnOPUNlgydGx8pGzzUb8+WhqXKHBlYiRrrtDAAAAAAAAAAAAAAAAAAAAIfGQKrG5yLFz//zTGqvG+9prfn/tda96lbtq3+0/VkAc7uyrfPzA7rZTt02dKhceF+fGB0bG+/Y3dN7e2nRppSq8Wyk+MQrHy7Xw6cY2HNtfFH3VFF3/UyuG/yNom5lR1VtaGJ0rH55Yf7Yhbm5henGcmNqbrY+fqMxfdsHBzzVbYcAAAAAAAAAAAAAAAAAAABg20Cqxk8ixX//w3+k9vfO5/X/Pa17Hev/f6dcQl+qpZ25pVzb/1S5tr+1/f7zwwPPP3en/fux/r9oU0rV+Ob2xxVsrf+f3FVb1P1FpHjzuY+Wj6WoPFHUNdrdaT3j1ebc7Imi9m8jxW++1a6NsvZarn1mu/ZkUdsfKf56Y2ftV3PtB7drTxW1RyPFD/5r79oPbdeeLmp/Hin++e/r7dqBovYPc+2R7drj0wtzM/ca1mL+vxspvnP591K7z3ec/47Pf1jZlVtum/O7b3c//+127D3/gx37VvK8/nmkOP2TD5dzebf5Pxspvlv7aK5rjf1Ufvzp8v/b8/+JSPGzf9tZezXXfmC79mS33Tpoxfx/O1J8/29+utXnPP95ZLdnqHP+f71nZ269SvZt/u/++/90x77B3K7pdzgWj6Oll7/+UmNubnbxvjdqz0c8iOfpdqN4me77z8qfgRMPsV82bByGjXudOb7Xv/9nJ/Zb8f7/l5Hi/49UU/s6Jr//v691b/v673++sf3+f35Xbjmg9/8PdOw7n69aensiasvXb/Q+G1Fbevnrx5rXG9dmr83Onzp54tOfPnvyxMmzvU+0L+62t7oeu/eCYv5/FCl+/I8/3vo7Zuf1397X/wO7cssBzf8znX3acV3T9VA8lor5/7tI8fRnf7r19+bdrv/bf/8f/djO3Pr9O6D5/2DHvsHcruY7HAsAAAAAAAAAAIBHyUCqxl9Fit//099O7TVE3fz7v5ldueWA/v3XkY59Mw90XcOdN7oeZACAQ6S4/vtQpPje5g+31nLvvP6L32rXdl7/3clh+P5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB41KWoxh9HioHXNtJaX3G/pXapOX/z1sTo2N6H9adIUYlqWV/caidPnT7zqbPnhtt5qe9hduMj8cL4lQv1iwvXbyzOLi3NztQn5pvTCzOzXT/D/R6/21A5gPXrL92cuXp1qX7q+OkdD98afKPvySOD588dOzvcrp0YHRsb76jp6X3XP/026Q77n4hq/DBSvDX4Zvp+X0Ql7n8s7vHa2W/9ZSeGyk5MjI6VHZlrNuaXiwdTJVdVIuodB420x+ghzMV9GYlYKZpfNHio6N74jcZiY2putv7FxuJyc7m5MJ8qrdYW/alHJYZTxGpErO/xK9kb1fhmpHjlxEb6l76IanscPnl5/EsnTt+7PZV96GMXinbWeyNWK4/AnB1ifVGNf4oUv3z9aPygL6InWrf4eMQXinwt4tUiPxORihfGmYhfPNRTO/upJ6pxJlIspI30el9xPmifVy59uf75+asLHbXt88oj//7wMB3yc1MtqvGj8oy/kf519+/1wAE1CgAAAAAAAAAAAAAAAIByJe1qpPjKsaOpXB+8taa4OX+tfqUxNdda1tde+9deM725ublZT60cyTmZcyXnas61nOs5o5KPzzmSczLnSs7VnGs513NGNR+fcyTnZM6VnKtl9m21eD3vj558fM6RnJM5V3Ku5lzLuZ4zDsnaPQAAAAAAAAAAAAAAAAAA4L2lEtXyW9y/9bWNVC6VHomYjFau+Z7f97xfBQAA///sg2Mq")
prlimit64(0x0, 0xe, &(0x7f0000001fc0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002000)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000002040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000020c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000002140), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000002180), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000021c0)=0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = fsopen(&(0x7f0000002200)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000002240)='cgroup.max.depth\x00', 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000002280), 0x12)
read(r3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

8m35.357553273s ago: executing program 6 (id=2206):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ef)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f0000000180)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000880)={0x30, 0x5, 0x0, {0x0, 0x2, 0x8}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f00000003c0)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0xf951, 0x7, 0x5, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x65, 0x0, 0xf6, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x9, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}, {@loopback, 0x296}, {@broadcast, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xd2, [@private=0xa010101]}]}}}}})
getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
openat(r2, 0x0, 0x9850c1, 0x182)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/ep1in-bulk\x00', 0x2, 0x24)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000940))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r4=>0x0})
r5 = syz_open_dev$sg(&(0x7f00000008c0), 0xffff0000, 0x2842)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000900)={0x0, 0x7, 0xb8})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24603, 0x1141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

8m30.69126791s ago: executing program 6 (id=2213):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000440))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000480)=@usbdevfs_connect)

8m28.057585559s ago: executing program 6 (id=2217):
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x280000, &(0x7f00000002c0)='%/-/\xe1.\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x18000c6, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000004c0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})

8m27.004020627s ago: executing program 6 (id=2218):
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000b80), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000c40)='nilfs2\x00', 0x280000, &(0x7f0000000c80)='%/-/\xe1.\x00')
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
mkdir(&(0x7f0000000f40)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000001080)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

8m24.637059249s ago: executing program 6 (id=2220):
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000b80), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000c00)='./bus\x00', &(0x7f0000000c40)='nilfs2\x00', 0x280000, &(0x7f0000000c80)='%/-/\xe1.\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000001140)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
syz_mount_image$erofs(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0x18000c6, &(0x7f0000000d80)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000000dc0)="$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")
mkdir(&(0x7f0000000f40)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000001080)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

8m17.287938201s ago: executing program 6 (id=2225):
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x280000, &(0x7f00000002c0)='%/-/\xe1.\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x18000c6, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000004c0)="$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")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})

8m1.84447898s ago: executing program 37 (id=2225):
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x280000, &(0x7f00000002c0)='%/-/\xe1.\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x18000c6, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000004c0)="$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")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})

6m31.783063889s ago: executing program 5 (id=2313):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x515002)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10070100)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000003c0), 0x6e, &(0x7f0000000440)}, 0x140)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000480)={0x8, 0x2, 0x9, 0xb, 0xfffbffff, 0xc})
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
setns(r5, 0x66020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)

6m29.600790182s ago: executing program 5 (id=2316):
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000600)='./bus\x00', 0x0, 0x280000, &(0x7f0000000680)='%/-/\xe1.\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
syz_mount_image$erofs(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x18000c6, &(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000007c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x9584, &(0x7f0000000c00)=[{&(0x7f0000000c40)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

6m27.636080953s ago: executing program 5 (id=2319):
r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x400000, 0x60, 0x3c}, 0x18)
mkdirat(r0, &(0x7f00000001c0)='./trace\x00', 0x1fe)
mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0xfdef)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x101042, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
pread64(r1, &(0x7f0000000100)=""/37, 0x25, 0x10020)

6m26.104202859s ago: executing program 5 (id=2323):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000000700)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x0, &(0x7f00000021c0)})
creat(0x0, 0x124)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000023c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000002400)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000002440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000024c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000002540), 0x651, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r3, 0x0, 0x0, 0x24004084, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, 0x0)
recvmmsg(r1, &(0x7f0000002600), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_pidfd_open(0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000000300)=""/171, 0xab, 0x9a)

6m20.684642814s ago: executing program 5 (id=2326):
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000600)='./bus\x00', 0x0, 0x280000, &(0x7f0000000680)='%/-/\xe1.\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
syz_mount_image$erofs(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x18000c6, &(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000007c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x9584, &(0x7f0000000c00)=[{&(0x7f0000000c40)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

6m18.629537364s ago: executing program 5 (id=2328):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x515002)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10070100)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000003c0), 0x6e, &(0x7f0000000440)}, 0x140)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000480)={0x8, 0x2, 0x9, 0xb, 0xfffbffff, 0xc})
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
setns(r5, 0x66020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)

6m3.444625346s ago: executing program 38 (id=2328):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x515002)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10070100)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000003c0), 0x6e, &(0x7f0000000440)}, 0x140)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000480)={0x8, 0x2, 0x9, 0xb, 0xfffbffff, 0xc})
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
setns(r5, 0x66020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)

38.477865246s ago: executing program 4 (id=2681):
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000b80), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000c40)='nilfs2\x00', 0x280000, &(0x7f0000000c80)='%/-/\xe1.\x00')
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
mkdir(&(0x7f0000000f40)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000001080)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x2)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x4, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250c000000180005800c0002800800040009000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850)

34.892331932s ago: executing program 4 (id=2685):
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000b80), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x280000, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000001140)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
mkdir(&(0x7f0000000f40)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x0)
chdir(&(0x7f0000001080)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x4, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f00000008c0)='.\x00', 0x0, 0x21, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

32.401474977s ago: executing program 4 (id=2689):
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x280000, &(0x7f00000002c0)='%/-/\xe1.\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x18000c6, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000004c0)="$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")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000000780)='./bus\x00')
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x1208002, &(0x7f0000000880)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000900)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000f40)='./file0\x00', 0x0, 0x4, &(0x7f0000000fc0))
mount$bind(0x0, &(0x7f0000001000)='.\x00', 0x0, 0x21, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850)

29.808306262s ago: executing program 4 (id=2692):
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000b80), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000c40)='nilfs2\x00', 0x280000, &(0x7f0000000c80)='%/-/\xe1.\x00')
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
mkdir(&(0x7f0000000f40)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000001080)='./bus\x00')
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x4, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f00000008c0)='.\x00', 0x0, 0x21, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250c000000180005800c0002800800040009000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850)

28.142423543s ago: executing program 4 (id=2694):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0xff76, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000300)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f0000000380)=[{&(0x7f0000000400)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000b40)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "eef13c42dd925982"}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r4, 0x2)
clock_adjtime(0x0, &(0x7f0000000980)={0x3ff, 0x200, 0x2, 0x8, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x100, 0x2, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x8000000003, 0x2, 0x2, 0x5, 0x0, 0x7, 0x1, 0x8af})
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000ac0)={'enc=', 'raw', ' hash=', {'sha3-224\x00'}}, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000000c0)={0x40000000000ff80, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)

26.172564744s ago: executing program 4 (id=2696):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000400)={0x0, 0x34bb, 0x4, 0x1, 0x2f4}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500))
r3 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
munmap$IORING_OFF_CQ_RING(r3, 0x9)
syz_clone(0x40200000, &(0x7f0000000b00)="0dbbeb3e8947572c5c218eb35308a5c820a1637c60ed4a2ed01d4c28dcf1aaca091d2d27b26a17b045d26458323d9e5f9bbc91bda902e2cbcc3e01926b070f3fe7e3094f018d13ad103de785f5108ee0dd1103d414b7ee547690b41ff814e69e77adfc8862e4dcc75adcec33bb4195e0e512826fcde041a801480d1ceae41f27c6d2618c170574a4326f21b17c8ddeda66e5d31e9856f27bdf0c832fca6fb08542d4b1a0e2c037811facc1c4c74dd9378ac1834642481d351c0de500f3ddbbc51a80c5031c7980bbdb5889a640e4395df002670296", 0xd5, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="456febb1ab073a9426fda6fc68b362034f24854259d8a29d08929538c57d38c706aa4847dac74fa31fceaf43a3dade957d038830776947ea24f739d5e65237")
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000d00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

16.403015803s ago: executing program 8 (id=2704):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0})
statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2200008, &(0x7f00000005c0), 0x3, 0x5ad, &(0x7f0000000780)="$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")
r1 = open(&(0x7f0000000d40)='./file2\x00', 0xac941, 0x56)
pwritev2(r1, 0x0, 0x0, 0x7000, 0x0, 0x3)
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0)
sendmmsg$unix(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r5, r4]}}], 0x18, 0x48000}}], 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]})

15.028389533s ago: executing program 8 (id=2706):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x515002)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10070100)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000003c0), 0x6e, &(0x7f0000000440)}, 0x140)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000480)={0x8, 0x2, 0x9, 0xb, 0xfffbffff, 0xc})
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
setns(r5, 0x66020000)
mount$9p_fd(0x0, &(0x7f00000004c0)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xe, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000780)=""/4096}, 0x94)

10.926567313s ago: executing program 39 (id=2696):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000400)={0x0, 0x34bb, 0x4, 0x1, 0x2f4}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500))
r3 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
munmap$IORING_OFF_CQ_RING(r3, 0x9)
syz_clone(0x40200000, &(0x7f0000000b00)="0dbbeb3e8947572c5c218eb35308a5c820a1637c60ed4a2ed01d4c28dcf1aaca091d2d27b26a17b045d26458323d9e5f9bbc91bda902e2cbcc3e01926b070f3fe7e3094f018d13ad103de785f5108ee0dd1103d414b7ee547690b41ff814e69e77adfc8862e4dcc75adcec33bb4195e0e512826fcde041a801480d1ceae41f27c6d2618c170574a4326f21b17c8ddeda66e5d31e9856f27bdf0c832fca6fb08542d4b1a0e2c037811facc1c4c74dd9378ac1834642481d351c0de500f3ddbbc51a80c5031c7980bbdb5889a640e4395df002670296", 0xd5, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="456febb1ab073a9426fda6fc68b362034f24854259d8a29d08929538c57d38c706aa4847dac74fa31fceaf43a3dade957d038830776947ea24f739d5e65237")
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000d00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

10.85742426s ago: executing program 8 (id=2710):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000000700)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x0, &(0x7f00000021c0)})
creat(0x0, 0x124)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000023c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000002400)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000002440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000002540), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000002600), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r3, &(0x7f0000000300)=""/171, 0xab, 0x9a)

10.85634833s ago: executing program 0 (id=2711):
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x280000, &(0x7f00000002c0)='%/-/\xe1.\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x18000c6, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000004c0)="$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")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000000780)='./bus\x00')
syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000f40)='./file0\x00', 0x0, 0x4, &(0x7f0000000fc0))
mount$bind(0x0, &(0x7f0000001000)='.\x00', 0x0, 0x21, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850)

9.328154476s ago: executing program 0 (id=2712):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

8.353255806s ago: executing program 0 (id=2713):
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x280000, &(0x7f00000002c0)='%/-/\xe1.\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x18000c6, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000004c0)="$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")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000000780)='./bus\x00')
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
mount$overlay(0x0, &(0x7f0000000f40)='./file0\x00', 0x0, 0x4, &(0x7f0000000fc0))
mount$bind(0x0, &(0x7f0000001000)='.\x00', 0x0, 0x21, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850)

8.333468458s ago: executing program 8 (id=2714):
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x280000, &(0x7f00000002c0)='%/-/\xe1.\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x18000c6, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000004c0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000000780)='./bus\x00')
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x1208002, &(0x7f0000000880)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000900)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000f40)='./file0\x00', 0x0, 0x4, &(0x7f0000000fc0))
mount$bind(0x0, &(0x7f0000001000)='.\x00', 0x0, 0x21, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850)

6.048968152s ago: executing program 0 (id=2715):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x515002)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10070100)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000003c0), 0x6e, &(0x7f0000000440)}, 0x140)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000480)={0x8, 0x2, 0x9, 0xb, 0xfffbffff, 0xc})
getpgid(0x0)
setns(0xffffffffffffffff, 0x66020000)
mount$9p_fd(0x0, &(0x7f00000004c0)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xe, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000780)=""/4096}, 0x94)

6.048099032s ago: executing program 8 (id=2716):
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2)
r0 = getpid()
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000b80), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000c40)='nilfs2\x00', 0x280000, &(0x7f0000000c80)='%/-/\xe1.\x00')
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
mkdir(&(0x7f0000000f40)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x2)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x4, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f00000008c0)='.\x00', 0x0, 0x21, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250c000000180005800c0002800800040009000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850)

3.294420893s ago: executing program 0 (id=2717):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x341488, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008894}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x1a9ae43988baf4a2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000540)={0x2201000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff], 0x1}, 0x58)

3.275921935s ago: executing program 8 (id=2718):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ef)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f0000000180)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000880)={0x30, 0x5, 0x0, {0x0, 0x2, 0x8}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f00000003c0)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0xf951, 0x7, 0x5, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x65, 0x0, 0xf6, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x9, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}, {@loopback, 0x296}, {@broadcast, 0x7fff}]}, @lsrr={0x83, 0x7, 0xd2, [@private=0xa010101]}]}}}}})
getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
openat(r2, 0x0, 0x9850c1, 0x182)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/ep1in-bulk\x00', 0x2, 0x24)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000940))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r4=>0x0})
r5 = syz_open_dev$sg(&(0x7f00000008c0), 0xffff0000, 0x2842)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000900)={0x0, 0x7, 0xb8})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24603, 0x1141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

0s ago: executing program 0 (id=2719):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0xff76, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000300)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f0000000380)=[{&(0x7f0000000400)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000b40)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "eef13c42dd925982"}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r4, 0x2)
clock_adjtime(0x0, &(0x7f0000000980)={0x3ff, 0x200, 0x2, 0x8, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x100, 0x2, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x8000000003, 0x2, 0x2, 0x5, 0x0, 0x7, 0x1, 0x8af})
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000ac0)={'enc=', 'raw', ' hash=', {'sha3-224\x00'}}, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000000c0)={0x40000000000ff80, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)

kernel console output (not intermixed with test programs):

will be case sensitive!
[ 1790.490445][   T26] kauditd_printk_skb: 42 callbacks suppressed
[ 1790.490464][   T26] audit: type=1326 audit(1793658224.726:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1790.577761][T17456] loop0: detected capacity change from 0 to 1024
[ 1790.588467][T17456] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1790.611630][T17456] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1790.623125][T17456] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1790.825105][T17456] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1790.834324][T17456] System zones: 0-1, 3-36
[ 1791.231440][T17456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1791.287178][T17454] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1791.358703][   T26] audit: type=1326 audit(1793658224.726:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1791.404004][T17461] FAULT_INJECTION: forcing a failure.
[ 1791.404004][T17461] name failslab, interval 1, probability 0, space 0, times 0
[ 1791.465465][T17461] CPU: 0 PID: 17461 Comm: syz.4.2562 Not tainted syzkaller #0
[ 1791.473026][T17461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1791.483270][T17461] Call Trace:
[ 1791.486595][T17461]  <TASK>
[ 1791.489568][T17461]  dump_stack_lvl+0x188/0x24e
[ 1791.494404][T17461]  ? show_regs_print_info+0x12/0x12
[ 1791.499664][T17461]  ? load_image+0x410/0x410
[ 1791.504225][T17461]  ? verify_lock_unused+0x140/0x140
[ 1791.509494][T17461]  should_fail_ex+0x390/0x4c0
[ 1791.514608][T17461]  should_failslab+0x5/0x20
[ 1791.519192][T17461]  slab_pre_alloc_hook+0x59/0x300
[ 1791.524277][T17461]  kmem_cache_alloc+0x56/0x2f0
[ 1791.529136][T17461]  ? skb_clone+0x1e7/0x370
[ 1791.533618][T17461]  skb_clone+0x1e7/0x370
[ 1791.537911][T17461]  __netlink_deliver_tap+0x3e4/0x7e0
[ 1791.543253][T17461]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1791.548500][T17461]  netlink_deliver_tap+0x19c/0x1b0
[ 1791.553658][T17461]  netlink_unicast+0x777/0x920
[ 1791.558506][T17461]  netlink_sendmsg+0x8ad/0xbd0
[ 1791.563326][T17461]  ? netlink_getsockopt+0x550/0x550
[ 1791.568604][T17461]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1791.574205][T17461]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1791.579547][T17461]  ? security_socket_sendmsg+0x7c/0xa0
[ 1791.585139][T17461]  __sys_sendto+0x497/0x650
[ 1791.589689][T17461]  ? __ia32_sys_getpeername+0x80/0x80
[ 1791.595133][T17461]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1791.601156][T17461]  ? lock_chain_count+0x20/0x20
[ 1791.606050][T17461]  __x64_sys_sendto+0xda/0xf0
[ 1791.610778][T17461]  do_syscall_64+0x4c/0xa0
[ 1791.615272][T17461]  ? clear_bhb_loop+0x60/0xb0
[ 1791.619990][T17461]  ? clear_bhb_loop+0x60/0xb0
[ 1791.624736][T17461]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1791.630755][T17461] RIP: 0033:0x7fa29076034e
[ 1791.635205][T17461] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1791.655224][T17461] RSP: 002b:00007fa29160ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1791.663679][T17461] RAX: ffffffffffffffda RBX: 00007fa29160c6c0 RCX: 00007fa29076034e
[ 1791.671695][T17461] RDX: 0000000000000020 RSI: 00007fa29160b000 RDI: 0000000000000005
[ 1791.679700][T17461] RBP: 0000000000000000 R08: 00007fa29160af04 R09: 000000000000000c
[ 1791.687706][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1791.695730][T17461] R13: 00007fa29160af58 R14: 00007fa29160b000 R15: 0000000000000000
[ 1791.703778][T17461]  </TASK>
[ 1791.753306][   T26] audit: type=1326 audit(1793658224.726:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1791.808846][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.815252][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.860772][   T26] audit: type=1326 audit(1793658224.726:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1791.926556][   T26] audit: type=1326 audit(1793658224.726:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1791.985502][   T26] audit: type=1326 audit(1793658224.726:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1792.030311][   T26] audit: type=1326 audit(1793658224.726:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa29079f882 code=0x7ffc0000
[ 1792.074500][   T26] audit: type=1326 audit(1793658224.726:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa29076034e code=0x7ffc0000
[ 1792.099040][   T26] audit: type=1326 audit(1793658224.736:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa29079f947 code=0x7ffc0000
[ 1792.140078][   T26] audit: type=1326 audit(1793658224.736:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.4.2561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29076034e code=0x7ffc0000
[ 1792.179851][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1794.504797][T17494] loop8: detected capacity change from 0 to 16
[ 1794.519166][T17494] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1794.614278][T17494] overlayfs: filesystem on './file0' not supported as upperdir
[ 1795.386361][T17498] gadgetfs: bound to dummy_udc driver
[ 1795.480099][T17498] FAULT_INJECTION: forcing a failure.
[ 1795.480099][T17498] name failslab, interval 1, probability 0, space 0, times 0
[ 1795.544056][T17498] CPU: 0 PID: 17498 Comm: syz.0.2568 Not tainted syzkaller #0
[ 1795.551793][T17498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1795.562014][T17498] Call Trace:
[ 1795.565397][T17498]  <TASK>
[ 1795.568502][T17498]  dump_stack_lvl+0x188/0x24e
[ 1795.573287][T17498]  ? show_regs_print_info+0x12/0x12
[ 1795.578564][T17498]  ? load_image+0x410/0x410
[ 1795.583154][T17498]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1795.588285][T17498]  should_fail_ex+0x390/0x4c0
[ 1795.593078][T17498]  should_failslab+0x5/0x20
[ 1795.598171][T17498]  slab_pre_alloc_hook+0x59/0x300
[ 1795.603259][T17498]  ? __split_vma+0x4f0/0x4f0
[ 1795.607934][T17498]  kmem_cache_alloc+0x56/0x2f0
[ 1795.612759][T17498]  ? vm_area_dup+0x23/0x1a0
[ 1795.617336][T17498]  vm_area_dup+0x23/0x1a0
[ 1795.622089][T17498]  __split_vma+0xb9/0x4f0
[ 1795.626490][T17498]  ? mas_preallocate+0x1c0/0x3b0
[ 1795.631504][T17498]  do_mas_align_munmap+0x399/0x12d0
[ 1795.636794][T17498]  ? verify_lock_unused+0x140/0x140
[ 1795.642095][T17498]  ? do_mas_align_munmap+0x74c/0x12d0
[ 1795.647545][T17498]  ? do_mas_munmap+0x2b0/0x2b0
[ 1795.652428][T17498]  ? mtree_range_walk+0x664/0x780
[ 1795.657551][T17498]  ? mas_walk+0x15f/0x180
[ 1795.661972][T17498]  ? mas_find+0x1ba/0x220
[ 1795.666402][T17498]  do_mas_munmap+0x240/0x2b0
[ 1795.671105][T17498]  __vm_munmap+0x1aa/0x2d0
[ 1795.675601][T17498]  ? vm_munmap+0x20/0x20
[ 1795.679919][T17498]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1795.686080][T17498]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1795.692101][T17498]  __x64_sys_munmap+0x5c/0x70
[ 1795.696862][T17498]  do_syscall_64+0x4c/0xa0
[ 1795.701378][T17498]  ? clear_bhb_loop+0x60/0xb0
[ 1795.706141][T17498]  ? clear_bhb_loop+0x60/0xb0
[ 1795.710904][T17498]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1795.716959][T17498] RIP: 0033:0x7f9d6579f947
[ 1795.721440][T17498] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1795.741229][T17498] RSP: 002b:00007f9d666ead18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[ 1795.747654][T15672] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1795.749912][T17498] RAX: ffffffffffffffda RBX: 00007f9d5c000000 RCX: 00007f9d6579f947
[ 1795.765535][T17498] RDX: 0000000000000000 RSI: 00000000039f7000 RDI: 00007f9d60000000
[ 1795.765972][    C1] gadgetfs: connected
[ 1795.773550][T17498] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[ 1795.785941][T17498] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[ 1795.788642][T15672] gadgetfs: disconnected
[ 1795.793966][T17498] R13: 0000000000001000 R14: 00007f9d60000000 R15: 0000000000609000
[ 1795.806537][T17498]  </TASK>
[ 1795.865266][T17498] program syz.0.2568 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1795.960474][T17504] loop8: detected capacity change from 0 to 16
[ 1795.988717][T17504] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1796.164880][    C1] gadgetfs: connected
[ 1796.174972][T17497] gadgetfs: suspended from state 3
[ 1796.189694][T15672] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1796.277612][T17497] gadgetfs: disconnected
[ 1796.326391][T15672] usb 1-1: can't read configurations, error -71
[ 1796.740026][   T26] kauditd_printk_skb: 19 callbacks suppressed
[ 1796.740044][   T26] audit: type=1800 audit(1793658487.044:1695): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1797.090803][T17508] hub 8-0:1.0: USB hub found
[ 1797.096604][T17508] hub 8-0:1.0: 1 port detected
[ 1797.956266][   T26] audit: type=1800 audit(1793658488.254:1696): pid=17293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=46535 res=0 errno=0
[ 1798.592147][T17519] loop8: detected capacity change from 0 to 16
[ 1798.607722][T17519] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1799.779317][   T26] audit: type=1800 audit(1793658490.084:1697): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1799.915837][T17527] loop0: detected capacity change from 0 to 1024
[ 1799.935066][   T26] audit: type=1800 audit(1793658490.234:1698): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0
[ 1800.744774][T17530] loop8: detected capacity change from 0 to 131072
[ 1800.777566][   T26] audit: type=1800 audit(1793658491.074:1699): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1800.840855][T17530] F2FS-fs (loop8): invalid crc value
[ 1800.847373][T17530] F2FS-fs (loop8): invalid crc value
[ 1800.852781][T17530] F2FS-fs (loop8): Failed to get valid F2FS checkpoint
[ 1800.863985][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'.
[ 1801.429680][   T26] audit: type=1800 audit(1793658491.734:1700): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=547533 res=0 errno=0
[ 1801.468419][T17293] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1801.559282][T17540] loop8: detected capacity change from 0 to 512
[ 1801.640524][T17540] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[ 1801.723549][T17293] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1801.975483][T17548] overlayfs: missing 'lowerdir'
[ 1802.879332][T17551] loop4: detected capacity change from 0 to 1024
[ 1802.891881][T17551] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1803.030614][T17551] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1803.042133][T17551] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1803.104168][T17293] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1803.291616][T17551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1803.300422][T17551] System zones: 0-1, 3-36
[ 1803.337481][T17551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1803.425991][T17293] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1803.728206][ T4279] EXT4-fs (loop4): unmounting filesystem.
[ 1803.908954][T17561] overlayfs: missing 'lowerdir'
[ 1804.203535][T17561] loop8: detected capacity change from 0 to 1024
[ 1804.211933][T17561] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1804.250459][T17561] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1804.263013][T17561] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1806.382061][T17561] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1806.390383][T17561] System zones: 0-1, 3-36
[ 1806.430664][T17561] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1806.492421][T17560] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[ 1806.503690][T17560] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2578'.
[ 1806.746147][T17575] overlayfs: missing 'lowerdir'
[ 1807.069790][T17576] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2581'.
[ 1807.162668][   T26] audit: type=1800 audit(1793658753.460:1701): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=547908 res=0 errno=0
[ 1807.294281][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1807.657075][   T26] audit: type=1800 audit(1793658753.960:1702): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1807.750120][   T26] audit: type=1800 audit(1793658754.020:1703): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1807.872579][T17235] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1807.881985][T17581] loop8: detected capacity change from 0 to 256
[ 1807.898954][   T26] audit: type=1800 audit(1793658754.030:1704): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1807.982050][T17583] loop0: detected capacity change from 0 to 16
[ 1808.008989][T17583] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1808.571896][   T26] audit: type=1800 audit(1793658754.860:1705): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0
[ 1808.782976][T17581] exfat: Deprecated parameter 'utf8'
[ 1808.798944][T17581] exfat: Deprecated parameter 'utf8'
[ 1808.874064][T17581] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1809.178512][T17235] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1810.451450][T17590] loop0: detected capacity change from 0 to 1024
[ 1811.149028][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'.
[ 1811.227397][ T5160] hfsplus: b-tree write err: -5, ino 3
[ 1811.277280][T17293] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1811.394279][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1811.419501][T17605] loop8: detected capacity change from 0 to 1024
[ 1811.433823][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1811.448559][T17605] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1811.479373][   T26] audit: type=1800 audit(1793658757.780:1706): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1811.526066][T17293] 8021q: adding VLAN 0 to HW filter on device team0
[ 1811.581965][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1811.604890][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1811.644669][T14318] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1811.651977][T14318] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1811.786433][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1811.805764][T17605] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1811.834802][T17605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1811.840935][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1811.866318][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1811.925718][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1811.932949][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1811.943661][T17605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1812.029018][T17605] System zones: 0-1, 3-36
[ 1812.133312][T17605] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1812.207302][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1812.244103][T17605] overlayfs: failed to resolve './bus': -2
[ 1812.304255][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1812.321340][T17606] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[ 1812.775549][   T26] audit: type=1800 audit(1793658759.020:1707): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=548443 res=0 errno=0
[ 1813.119530][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1813.227030][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1813.270926][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1813.309876][   T26] audit: type=1800 audit(1793658759.610:1708): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=548457 res=0 errno=0
[ 1813.769716][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1813.862883][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1813.873668][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1813.890760][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1813.900634][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1813.910336][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1813.988654][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1814.233038][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1814.271290][T17636] hub 8-0:1.0: USB hub found
[ 1814.286381][T17636] hub 8-0:1.0: 1 port detected
[ 1814.409540][   T26] audit: type=1800 audit(1793658760.100:1709): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=548467 res=0 errno=0
[ 1814.554654][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1814.977170][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1815.039013][   T26] audit: type=1800 audit(1793658760.130:1710): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=548486 res=0 errno=0
[ 1815.081761][T17293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1815.144185][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1815.159070][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1815.175953][   T26] audit: type=1800 audit(1793658760.390:1711): pid=17338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=548511 res=0 errno=0
[ 1815.228572][T17638] FAULT_INJECTION: forcing a failure.
[ 1815.228572][T17638] name failslab, interval 1, probability 0, space 0, times 0
[ 1815.299641][T17638] CPU: 1 PID: 17638 Comm: syz.0.2591 Not tainted syzkaller #0
[ 1815.307204][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1815.317318][T17638] Call Trace:
[ 1815.320646][T17638]  <TASK>
[ 1815.323638][T17638]  dump_stack_lvl+0x188/0x24e
[ 1815.328411][T17638]  ? show_regs_print_info+0x12/0x12
[ 1815.333690][T17638]  ? load_image+0x410/0x410
[ 1815.338257][T17638]  ? __might_sleep+0xd0/0xd0
[ 1815.342938][T17638]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1815.348076][T17638]  should_fail_ex+0x390/0x4c0
[ 1815.352826][T17638]  should_failslab+0x5/0x20
[ 1815.357396][T17638]  slab_pre_alloc_hook+0x59/0x300
[ 1815.362484][T17638]  ? slab_post_alloc_hook+0x67/0x490
[ 1815.367833][T17638]  kmem_cache_alloc_bulk+0x42/0x4e0
[ 1815.373089][T17638]  ? kmem_cache_alloc+0x1b2/0x2f0
[ 1815.378167][T17638]  ? mas_alloc_nodes+0x2ec/0x880
[ 1815.383199][T17638]  mas_alloc_nodes+0x449/0x880
[ 1815.388045][T17638]  mas_preallocate+0x162/0x3b0
[ 1815.392906][T17638]  do_mas_align_munmap+0x239/0x12d0
[ 1815.398165][T17638]  ? verify_lock_unused+0x140/0x140
[ 1815.403424][T17638]  ? do_mas_align_munmap+0x74c/0x12d0
[ 1815.408851][T17638]  ? do_mas_munmap+0x2b0/0x2b0
[ 1815.413662][T17638]  ? mtree_range_walk+0x664/0x780
[ 1815.418763][T17638]  ? mas_walk+0x15f/0x180
[ 1815.423125][T17638]  ? mas_find+0x1ba/0x220
[ 1815.427494][T17638]  do_mas_munmap+0x240/0x2b0
[ 1815.432148][T17638]  __vm_munmap+0x1aa/0x2d0
[ 1815.436606][T17638]  ? vm_munmap+0x20/0x20
[ 1815.440892][T17638]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1815.446922][T17638]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1815.452856][T17638]  __x64_sys_munmap+0x5c/0x70
[ 1815.457571][T17638]  do_syscall_64+0x4c/0xa0
[ 1815.462035][T17638]  ? clear_bhb_loop+0x60/0xb0
[ 1815.466750][T17638]  ? clear_bhb_loop+0x60/0xb0
[ 1815.471654][T17638]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1815.477590][T17638] RIP: 0033:0x7f9d6579f947
[ 1815.482043][T17638] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1815.501695][T17638] RSP: 002b:00007f9d666ead18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[ 1815.510154][T17638] RAX: ffffffffffffffda RBX: 00007f9d5c000000 RCX: 00007f9d6579f947
[ 1815.518246][T17638] RDX: 0000000000000000 RSI: 00000000039f7000 RDI: 00007f9d60000000
[ 1815.526250][T17638] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[ 1815.534254][T17638] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[ 1815.542273][T17638] R13: 0000000000001000 R14: 00007f9d60000000 R15: 0000000000609000
[ 1815.550322][T17638]  </TASK>
[ 1815.554570][   T26] audit: type=1800 audit(1793658760.410:1712): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=548500 res=0 errno=0
[ 1815.596290][T17623] rxe_eth0 speed is unknown, defaulting to 1000
[ 1815.665728][   T26] audit: type=1800 audit(1793658761.510:1713): pid=17638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2591" name="state" dev="sysfs" ino=43179 res=0 errno=0
[ 1815.855561][ T4611] device hsr_slave_0 left promiscuous mode
[ 1815.905562][ T4611] device hsr_slave_1 left promiscuous mode
[ 1815.959887][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1815.996096][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1816.045964][T10025] Bluetooth: hci0: command 0x0409 tx timeout
[ 1816.055386][ T4611] device bridge_slave_1 left promiscuous mode
[ 1816.061937][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1816.168856][ T4611] device bridge_slave_0 left promiscuous mode
[ 1816.175191][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1816.332476][ T4611] device hsr_slave_0 left promiscuous mode
[ 1816.370785][ T4611] device hsr_slave_1 left promiscuous mode
[ 1816.377629][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1816.396167][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1816.426348][ T4611] device bridge_slave_1 left promiscuous mode
[ 1816.432666][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1816.484365][ T4611] device bridge_slave_0 left promiscuous mode
[ 1816.495702][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1816.648263][ T4611] device veth0_macvtap left promiscuous mode
[ 1816.654471][ T4611] device veth1_vlan left promiscuous mode
[ 1816.685648][ T4611] device veth0_vlan left promiscuous mode
[ 1816.713598][ T4611] device veth0_vlan left promiscuous mode
[ 1816.814783][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1817.499106][T17674] loop4: detected capacity change from 0 to 16
[ 1817.519913][T17674] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1818.135637][T10025] Bluetooth: hci0: command 0x041b tx timeout
[ 1818.375536][   T26] audit: type=1800 audit(1793658764.650:1714): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1818.654677][T17681] overlayfs: missing 'lowerdir'
[ 1818.715118][T17681] loop4: detected capacity change from 0 to 1024
[ 1818.741569][T17681] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1818.757119][T17681] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1818.799153][T17681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1818.839376][T17681] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1818.873795][T17681] System zones: 0-1, 3-36
[ 1818.949450][T17681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1818.963910][T17681] overlayfs: failed to resolve './bus': -2
[ 1818.999078][T17681] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[ 1819.384762][T17685] loop8: detected capacity change from 0 to 128
[ 1819.428535][   T26] audit: type=1800 audit(1793658765.730:1715): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1819.591765][ T4611] team0 (unregistering): Port device team_slave_1 removed
[ 1819.745499][ T4611] team0 (unregistering): Port device team_slave_0 removed
[ 1819.890788][ T4611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1820.099950][ T4611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1820.217224][ T4293] Bluetooth: hci0: command 0x040f tx timeout
[ 1820.528775][ T4279] EXT4-fs (loop4): unmounting filesystem.
[ 1820.972520][ T4611] bond0 (unregistering): Released all slaves
[ 1822.181239][ T4611] team0 (unregistering): Port device team_slave_1 removed
[ 1822.243186][ T4611] team0 (unregistering): Port device team_slave_0 removed
[ 1822.296342][ T4293] Bluetooth: hci0: command 0x0419 tx timeout
[ 1822.316779][ T4611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1822.417789][ T4611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1823.695835][T10025] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1823.710473][   T26] audit: type=1800 audit(1793658770.010:1716): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=551796 res=0 errno=0
[ 1823.737850][T10025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1823.748732][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1823.757078][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1823.764976][T10025] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1823.772842][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1823.848102][   T26] audit: type=1800 audit(1793658770.030:1717): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=551806 res=0 errno=0
[ 1823.934479][   T26] audit: type=1800 audit(1793658770.100:1718): pid=17338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=551836 res=0 errno=0
[ 1823.985758][   T26] audit: type=1800 audit(1793658770.100:1719): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=551825 res=0 errno=0
[ 1824.243824][ T4611] bond0 (unregistering): Released all slaves
[ 1824.737185][T17705] rxe_eth0 speed is unknown, defaulting to 1000
[ 1824.893841][T17713] hub 8-0:1.0: USB hub found
[ 1824.900015][T17713] hub 8-0:1.0: 1 port detected
[ 1825.806019][ T4293] Bluetooth: hci2: command 0x0409 tx timeout
[ 1826.030013][T17721] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2605'.
[ 1827.895723][ T4293] Bluetooth: hci2: command 0x041b tx timeout
[ 1828.691055][T17623] chnl_net:caif_netlink_parms(): no params data found
[ 1828.812718][T17725] rxe_eth0 speed is unknown, defaulting to 1000
[ 1829.108671][T17739] loop8: detected capacity change from 0 to 128
[ 1829.113722][T17623] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1829.209005][T17741] hub 8-0:1.0: USB hub found
[ 1829.214985][T17741] hub 8-0:1.0: 1 port detected
[ 1829.464532][T17623] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1829.682011][T17623] device bridge_slave_0 entered promiscuous mode
[ 1830.038619][ T4293] Bluetooth: hci2: command 0x040f tx timeout
[ 1830.071708][T17623] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1830.118933][T17623] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1830.130664][T17623] device bridge_slave_1 entered promiscuous mode
[ 1830.262389][T17623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1830.276216][T17623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1830.315249][T17623] team0: Port device team_slave_0 added
[ 1830.324081][T17623] team0: Port device team_slave_1 added
[ 1830.402643][T17751] overlayfs: missing 'lowerdir'
[ 1830.472791][T17752] loop4: detected capacity change from 0 to 1024
[ 1830.480344][T17752] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1830.496222][T17752] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1830.507957][T17752] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1830.689579][T17623] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1830.716397][T17752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1830.725104][T17752] System zones: 0-1, 3-36
[ 1830.784666][T17752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1830.951240][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1831.290058][T17623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1831.405625][T17751] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[ 1831.493192][T17623] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1831.501586][   T26] audit: type=1800 audit(1793658777.790:1720): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1831.521434][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1831.521480][T17623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1831.572434][ T4279] EXT4-fs (loop4): unmounting filesystem.
[ 1831.636987][T17705] chnl_net:caif_netlink_parms(): no params data found
[ 1831.693175][T17623] device hsr_slave_0 entered promiscuous mode
[ 1831.742241][T17623] device hsr_slave_1 entered promiscuous mode
[ 1831.771078][T17623] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1831.788153][T17623] Cannot create hsr debugfs directory
[ 1831.961205][T17761] loop4: detected capacity change from 0 to 16
[ 1832.028160][T17761] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1832.088307][T17761] overlayfs: filesystem on './file0' not supported as upperdir
[ 1832.125741][ T4293] Bluetooth: hci2: command 0x0419 tx timeout
[ 1832.781401][   T26] audit: type=1800 audit(1793658779.080:1721): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1832.867702][T17763] loop0: detected capacity change from 0 to 1024
[ 1832.943361][T17763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1832.958400][   T26] audit: type=1800 audit(1793658779.260:1722): pid=17763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2611" name="file2" dev="loop0" ino=16 res=0 errno=0
[ 1833.970210][T17776] loop4: detected capacity change from 0 to 16
[ 1834.004933][T17776] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1834.319769][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1834.534735][   T26] audit: type=1800 audit(1793658780.830:1723): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1834.630115][T17705] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1834.662265][T17705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1834.713380][T17705] device bridge_slave_0 entered promiscuous mode
[ 1834.727104][T17705] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1834.734314][T17705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1834.793662][T17705] device bridge_slave_1 entered promiscuous mode
[ 1834.865265][T17782] loop0: detected capacity change from 0 to 256
[ 1834.894168][T17782] exfat: Deprecated parameter 'utf8'
[ 1834.913806][T17705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1834.924466][T17782] exfat: Deprecated parameter 'utf8'
[ 1835.075792][T17782] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1835.091989][   T26] audit: type=1800 audit(1793658781.390:1724): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=46536 res=0 errno=0
[ 1835.138086][T17705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1837.666352][T17787] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2615'.
[ 1838.748142][T17787] Can't find ip_set type has
[ 1838.797963][T17705] team0: Port device team_slave_0 added
[ 1838.869494][T17705] team0: Port device team_slave_1 added
[ 1839.112863][T17805] gadgetfs: bound to dummy_udc driver
[ 1839.167424][   T26] audit: type=1800 audit(1793658785.470:1725): pid=17805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2618" name="state" dev="sysfs" ino=43179 res=0 errno=0
[ 1839.227020][T17805] FAULT_INJECTION: forcing a failure.
[ 1839.227020][T17805] name failslab, interval 1, probability 0, space 0, times 0
[ 1839.258419][T17805] CPU: 0 PID: 17805 Comm: syz.8.2618 Not tainted syzkaller #0
[ 1839.265982][T17805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1839.276263][T17805] Call Trace:
[ 1839.279600][T17805]  <TASK>
[ 1839.282583][T17805]  dump_stack_lvl+0x188/0x24e
[ 1839.287338][T17805]  ? show_regs_print_info+0x12/0x12
[ 1839.292612][T17805]  ? load_image+0x410/0x410
[ 1839.297276][T17805]  ? __might_sleep+0xd0/0xd0
[ 1839.301918][T17805]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1839.307016][T17805]  should_fail_ex+0x390/0x4c0
[ 1839.311756][T17805]  should_failslab+0x5/0x20
[ 1839.316317][T17805]  slab_pre_alloc_hook+0x59/0x300
[ 1839.321403][T17805]  ? slab_post_alloc_hook+0x67/0x490
[ 1839.326766][T17805]  kmem_cache_alloc_bulk+0x42/0x4e0
[ 1839.332121][T17805]  ? kmem_cache_alloc+0x1b2/0x2f0
[ 1839.337194][T17805]  ? mas_alloc_nodes+0x2ec/0x880
[ 1839.342206][T17805]  mas_alloc_nodes+0x449/0x880
[ 1839.347049][T17805]  mas_preallocate+0x162/0x3b0
[ 1839.351886][T17805]  do_mas_align_munmap+0x239/0x12d0
[ 1839.357182][T17805]  ? verify_lock_unused+0x140/0x140
[ 1839.362465][T17805]  ? do_mas_align_munmap+0x74c/0x12d0
[ 1839.367932][T17805]  ? do_mas_munmap+0x2b0/0x2b0
[ 1839.372783][T17805]  ? mtree_range_walk+0x664/0x780
[ 1839.377908][T17805]  ? mas_walk+0x15f/0x180
[ 1839.382339][T17805]  ? mas_find+0x1ba/0x220
[ 1839.386741][T17805]  do_mas_munmap+0x240/0x2b0
[ 1839.391403][T17805]  __vm_munmap+0x1aa/0x2d0
[ 1839.395890][T17805]  ? vm_munmap+0x20/0x20
[ 1839.400283][T17805]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1839.406341][T17805]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1839.412333][T17805]  __x64_sys_munmap+0x5c/0x70
[ 1839.417108][T17805]  do_syscall_64+0x4c/0xa0
[ 1839.421595][T17805]  ? clear_bhb_loop+0x60/0xb0
[ 1839.426334][T17805]  ? clear_bhb_loop+0x60/0xb0
[ 1839.431075][T17805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1839.437039][T17805] RIP: 0033:0x7f2652b9f947
[ 1839.441503][T17805] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1839.461263][T17805] RSP: 002b:00007f2653ad0d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[ 1839.469916][T17805] RAX: ffffffffffffffda RBX: 00007f264c000000 RCX: 00007f2652b9f947
[ 1839.478122][T17805] RDX: 0000000000000000 RSI: 0000000000df7000 RDI: 00007f2650000000
[ 1839.486182][T17805] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[ 1839.494207][T17805] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[ 1839.502253][T17805] R13: 0000000000001000 R14: 00007f2650000000 R15: 0000000003209000
[ 1839.510312][T17805]  </TASK>
[ 1839.605670][T16030] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1839.623592][    C0] gadgetfs: connected
[ 1839.628606][T16030] gadgetfs: disconnected
[ 1839.762265][T17705] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1839.775087][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1839.811714][T17705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1839.837986][    C0] gadgetfs: connected
[ 1839.843235][T16030] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[ 1839.875137][T16030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1839.914324][   T26] audit: type=1800 audit(1793658786.210:1726): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=569525 res=0 errno=0
[ 1839.953900][    C0] gadgetfs: configuration #1
[ 1839.964158][T16030] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input48
[ 1839.982174][T17705] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1839.992740][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1840.022723][   T26] audit: type=1800 audit(1793658786.240:1727): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=569565 res=0 errno=0
[ 1840.144138][   T26] audit: type=1800 audit(1793658786.240:1728): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=569532 res=0 errno=0
[ 1840.172491][T17705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1840.237710][   T26] audit: type=1800 audit(1793658786.240:1729): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=569533 res=0 errno=0
[ 1840.305697][   T26] audit: type=1800 audit(1793658786.240:1730): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=569534 res=0 errno=0
[ 1840.415671][   T26] audit: type=1800 audit(1793658786.370:1731): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=569574 res=0 errno=0
[ 1840.479909][T17705] device hsr_slave_0 entered promiscuous mode
[ 1840.496082][   T26] audit: type=1800 audit(1793658786.370:1732): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=569593 res=0 errno=0
[ 1840.518042][T17705] device hsr_slave_1 entered promiscuous mode
[ 1840.525230][T17705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1840.559320][T17705] Cannot create hsr debugfs directory
[ 1840.606420][   T26] audit: type=1800 audit(1793658786.380:1733): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=569609 res=0 errno=0
[ 1840.629122][T17817] program syz.8.2618 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1840.730728][   T26] audit: type=1800 audit(1793658786.380:1734): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=569612 res=0 errno=0
[ 1840.807005][T17804] gadgetfs: suspended from state 3
[ 1840.813255][T17804] gadgetfs: disconnected
[ 1840.907273][T17623] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1840.996897][ T7789] usb 1-1: USB disconnect, device number 94
[ 1841.060409][T17623] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1841.171539][T17623] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1841.313840][T17825] loop8: detected capacity change from 0 to 16
[ 1841.355947][T17825] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1842.358518][T17623] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1842.498556][T17833] loop8: detected capacity change from 0 to 512
[ 1842.651163][T17833] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[ 1842.690571][T17833] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2621: invalid indirect mapped block 256 (level 1)
[ 1844.296350][T17833] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2621: invalid indirect mapped block 2683928664 (level 1)
[ 1844.350180][T17840] rxe_eth0 speed is unknown, defaulting to 1000
[ 1844.360454][T17833] EXT4-fs (loop8): 1 truncate cleaned up
[ 1844.628837][T17833] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1845.481696][T17846] loop4: detected capacity change from 0 to 16
[ 1845.741595][T17846] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1846.091502][   T26] kauditd_printk_skb: 36 callbacks suppressed
[ 1846.091524][   T26] audit: type=1800 audit(1793658792.380:1771): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1846.208581][   T26] audit: type=1800 audit(1793658792.510:1772): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=576706 res=0 errno=0
[ 1846.268245][T17851] loop0: detected capacity change from 0 to 512
[ 1846.301238][   T26] audit: type=1800 audit(1793658792.560:1773): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=576720 res=0 errno=0
[ 1846.344204][T17851] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[ 1846.394232][T17851] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2623: invalid indirect mapped block 256 (level 1)
[ 1846.522714][T17623] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1846.549796][T17851] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2623: invalid indirect mapped block 2683928664 (level 1)
[ 1846.636882][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1846.659779][T17851] EXT4-fs (loop0): 1 truncate cleaned up
[ 1846.699097][T17851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1847.798018][T17623] 8021q: adding VLAN 0 to HW filter on device team0
[ 1847.890886][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1847.909492][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1847.946575][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1848.004599][T17864] loop8: detected capacity change from 0 to 512
[ 1848.012167][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1848.076281][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1848.083864][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1848.204713][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1848.236229][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1848.254085][T17864] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[ 1848.294672][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1848.343534][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1848.350886][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1848.416969][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1848.492364][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1848.888627][T17623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1848.972762][T17623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1849.177958][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1849.213885][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1849.233092][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1849.253433][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1849.272289][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1850.371854][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1850.882293][T17836] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[ 1850.904421][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1850.970110][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1851.000707][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1851.038961][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1851.077971][T17878] loop8: detected capacity change from 0 to 512
[ 1851.185161][T17882] loop4: detected capacity change from 0 to 16
[ 1851.233884][T17882] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1851.619782][T17878] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[ 1852.147128][   T26] audit: type=1800 audit(1793658798.450:1774): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1853.190786][   T26] audit: type=1800 audit(1793658799.490:1775): pid=17705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=46535 res=0 errno=0
[ 1853.248285][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.254815][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.422407][T17894] loop4: detected capacity change from 0 to 16
[ 1853.450123][T17894] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1853.513071][T17893] overlayfs: filesystem on './file0' not supported as upperdir
[ 1855.381301][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1855.443062][T17906] rxe_eth0 speed is unknown, defaulting to 1000
[ 1855.741218][   T26] audit: type=1800 audit(1793658802.040:1776): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=576808 res=0 errno=0
[ 1855.791506][T17705] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1855.888805][T17705] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1855.906408][   T26] audit: type=1800 audit(1793658802.110:1777): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1855.977105][T17705] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1856.060611][T17705] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1856.531880][T17914] loop0: detected capacity change from 0 to 1024
[ 1856.659129][T15287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1856.695744][T15287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1856.710617][T17623] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1856.780302][T17705] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1856.826711][T17918] loop8: detected capacity change from 0 to 128
[ 1856.862360][   T26] audit: type=1800 audit(1793658803.160:1778): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1856.908048][T15300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1856.919182][T15300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1857.130192][T17705] 8021q: adding VLAN 0 to HW filter on device team0
[ 1857.192004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1857.233911][T17923] gadgetfs: bound to dummy_udc driver
[ 1857.244140][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1857.279815][   T26] audit: type=1800 audit(1793658803.580:1779): pid=17923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2634" name="state" dev="sysfs" ino=43179 res=0 errno=0
[ 1857.296880][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1857.307603][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1857.359305][T17923] program syz.0.2634 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1857.466523][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1857.483254][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1857.513633][T17919] gadgetfs: suspended from state 2
[ 1857.525667][T15672] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1857.535758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1857.584775][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1857.592161][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1857.652766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1857.763160][ T4611] device hsr_slave_0 left promiscuous mode
[ 1857.830408][ T4611] device hsr_slave_1 left promiscuous mode
[ 1857.856777][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1857.879585][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1857.926692][ T4611] device bridge_slave_1 left promiscuous mode
[ 1858.728882][T17937] overlayfs: missing 'lowerdir'
[ 1858.871830][T17938] loop4: detected capacity change from 0 to 1024
[ 1858.879428][T17938] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1859.082318][T17938] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1859.093856][T17938] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1859.433135][T17938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1859.442012][T17938] System zones: 0-1, 3-36
[ 1859.530173][   T26] audit: type=1800 audit(1793658805.830:1780): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1859.551698][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1859.570248][T17938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1859.621722][ T4611] device bridge_slave_0 left promiscuous mode
[ 1859.641887][T17936] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[ 1859.653458][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1859.728998][ T4611] device hsr_slave_0 left promiscuous mode
[ 1859.750953][ T4611] device hsr_slave_1 left promiscuous mode
[ 1859.762419][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1859.812128][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1859.824060][ T4611] device bridge_slave_1 left promiscuous mode
[ 1859.837225][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1859.863122][ T4611] device bridge_slave_0 left promiscuous mode
[ 1859.882473][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1859.912126][ T4279] EXT4-fs (loop4): unmounting filesystem.
[ 1861.346986][T17956] overlayfs: missing 'lowerdir'
[ 1861.398941][T17956] loop4: detected capacity change from 0 to 1024
[ 1861.409563][T17956] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1861.427551][T17956] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1861.439164][T17956] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1861.545549][T17956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1861.554192][T17956] System zones: 0-1, 3-36
[ 1861.576612][T17956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1862.248090][   T26] audit: type=1800 audit(1793658808.550:1781): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1862.273060][T17956] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[ 1862.403125][ T4279] EXT4-fs (loop4): unmounting filesystem.
[ 1862.751582][ T4611] team0 (unregistering): Port device team_slave_1 removed
[ 1862.879738][T17964] loop8: detected capacity change from 0 to 512
[ 1862.887371][T17964] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1862.908974][   T26] audit: type=1800 audit(1793658809.210:1782): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1865.248907][ T4611] team0 (unregistering): Port device team_slave_0 removed
[ 1865.598696][T17977] overlayfs: missing 'lowerdir'
[ 1865.666143][T17977] loop8: detected capacity change from 0 to 1024
[ 1865.677156][T17977] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1865.719029][T17977] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1865.730557][T17977] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1865.842248][T17977] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1865.851036][T17977] System zones: 0-1, 3-36
[ 1865.877206][ T4611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1865.909783][T17977] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1866.485937][T17977] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[ 1866.493004][   T26] audit: type=1800 audit(1793658812.790:1783): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1866.609057][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1866.752065][ T4611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1866.926893][T17989] loop8: detected capacity change from 0 to 16
[ 1866.951092][T17989] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1867.555518][   T26] audit: type=1800 audit(1793658813.810:1784): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1867.944759][   T26] audit: type=1800 audit(1793658814.240:1785): pid=17994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2643" name="state" dev="sysfs" ino=43179 res=0 errno=0
[ 1867.974235][T17994] FAULT_INJECTION: forcing a failure.
[ 1867.974235][T17994] name failslab, interval 1, probability 0, space 0, times 0
[ 1868.014926][T17994] CPU: 1 PID: 17994 Comm: syz.8.2643 Not tainted syzkaller #0
[ 1868.022482][T17994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1868.032593][T17994] Call Trace:
[ 1868.035920][T17994]  <TASK>
[ 1868.038907][T17994]  dump_stack_lvl+0x188/0x24e
[ 1868.043752][T17994]  ? show_regs_print_info+0x12/0x12
[ 1868.049035][T17994]  ? load_image+0x410/0x410
[ 1868.053621][T17994]  ? __might_sleep+0xd0/0xd0
[ 1868.058319][T17994]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1868.063442][T17994]  should_fail_ex+0x390/0x4c0
[ 1868.068396][T17994]  should_failslab+0x5/0x20
[ 1868.072977][T17994]  slab_pre_alloc_hook+0x59/0x300
[ 1868.078230][T17994]  ? slab_post_alloc_hook+0x67/0x490
[ 1868.083636][T17994]  kmem_cache_alloc_bulk+0x42/0x4e0
[ 1868.088919][T17994]  ? kmem_cache_alloc+0x1b2/0x2f0
[ 1868.094012][T17994]  ? mas_alloc_nodes+0x2ec/0x880
[ 1868.099039][T17994]  mas_alloc_nodes+0x449/0x880
[ 1868.104000][T17994]  mas_preallocate+0x162/0x3b0
[ 1868.108854][T17994]  __vma_adjust+0x2ff/0x1d00
[ 1868.113708][T17994]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1868.118999][T17994]  ? validate_mm+0x2e0/0x2e0
[ 1868.123779][T17994]  ? anon_vma_clone+0x47c/0x4c0
[ 1868.128832][T17994]  ? vm_area_dup+0x11f/0x1a0
[ 1868.133495][T17994]  __split_vma+0x3a2/0x4f0
[ 1868.137998][T17994]  do_mas_align_munmap+0x7b8/0x12d0
[ 1868.143285][T17994]  ? verify_lock_unused+0x140/0x140
[ 1868.148597][T17994]  ? do_mas_munmap+0x2b0/0x2b0
[ 1868.153453][T17994]  ? mtree_range_walk+0x664/0x780
[ 1868.158657][T17994]  ? mas_walk+0x15f/0x180
[ 1868.163064][T17994]  ? mas_find+0x1ba/0x220
[ 1868.167472][T17994]  do_mas_munmap+0x240/0x2b0
[ 1868.172142][T17994]  __vm_munmap+0x1aa/0x2d0
[ 1868.176726][T17994]  ? vm_munmap+0x20/0x20
[ 1868.181043][T17994]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1868.187120][T17994]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1868.193093][T17994]  __x64_sys_munmap+0x5c/0x70
[ 1868.197896][T17994]  do_syscall_64+0x4c/0xa0
[ 1868.202385][T17994]  ? clear_bhb_loop+0x60/0xb0
[ 1868.207140][T17994]  ? clear_bhb_loop+0x60/0xb0
[ 1868.211899][T17994]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1868.218119][T17994] RIP: 0033:0x7f2652b9f947
[ 1868.222595][T17994] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1868.242350][T17994] RSP: 002b:00007f2653ad0d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[ 1868.250825][T17994] RAX: ffffffffffffffda RBX: 00007f264c000000 RCX: 00007f2652b9f947
[ 1868.258866][T17994] RDX: 0000000000000000 RSI: 0000000003209000 RDI: 00007f2648df7000
[ 1868.267110][T17994] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[ 1868.275205][T17994] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[ 1868.283204][T17994] R13: 0000000000001000 R14: 00007f2650000000 R15: 0000000003209000
[ 1868.291226][T17994]  </TASK>
[ 1868.508264][ T4611] bond0 (unregistering): Released all slaves
[ 1868.759416][ T4611] team0 (unregistering): Port device team_slave_1 removed
[ 1868.809033][ T4611] team0 (unregistering): Port device team_slave_0 removed
[ 1868.854648][ T4611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1868.898598][ T4611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1869.024549][ T4611] bond0 (unregistering): Released all slaves
[ 1869.042517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1869.054398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1869.071187][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1869.089051][T17935] rxe_eth0 speed is unknown, defaulting to 1000
[ 1869.186267][T17968] rxe_eth0 speed is unknown, defaulting to 1000
[ 1869.293154][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1869.301376][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1869.327101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1869.362354][T18002] gadgetfs: bound to dummy_udc driver
[ 1869.387533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1869.407183][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1869.471954][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1869.506209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1869.537135][T17705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1869.640185][   T26] audit: type=1800 audit(1793658815.940:1786): pid=18002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2644" name="state" dev="sysfs" ino=43179 res=0 errno=0
[ 1869.686939][T18002] FAULT_INJECTION: forcing a failure.
[ 1869.686939][T18002] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.788801][T18002] CPU: 0 PID: 18002 Comm: syz.0.2644 Not tainted syzkaller #0
[ 1869.796409][T18002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1869.806815][T18002] Call Trace:
[ 1869.810202][T18002]  <TASK>
[ 1869.813196][T18002]  dump_stack_lvl+0x188/0x24e
[ 1869.817967][T18002]  ? show_regs_print_info+0x12/0x12
[ 1869.823282][T18002]  ? load_image+0x410/0x410
[ 1869.827873][T18002]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1869.832986][T18002]  should_fail_ex+0x390/0x4c0
[ 1869.837874][T18002]  should_failslab+0x5/0x20
[ 1869.842434][T18002]  slab_pre_alloc_hook+0x59/0x300
[ 1869.847533][T18002]  ? __split_vma+0x4f0/0x4f0
[ 1869.852381][T18002]  kmem_cache_alloc+0x56/0x2f0
[ 1869.857242][T18002]  ? vm_area_dup+0x23/0x1a0
[ 1869.861821][T18002]  vm_area_dup+0x23/0x1a0
[ 1869.866222][T18002]  __split_vma+0xb9/0x4f0
[ 1869.870658][T18002]  ? mas_preallocate+0x1c0/0x3b0
[ 1869.875669][T18002]  do_mas_align_munmap+0x399/0x12d0
[ 1869.881150][T18002]  ? verify_lock_unused+0x140/0x140
[ 1869.886439][T18002]  ? do_mas_align_munmap+0x74c/0x12d0
[ 1869.891932][T18002]  ? do_mas_munmap+0x2b0/0x2b0
[ 1869.896793][T18002]  ? mtree_range_walk+0x664/0x780
[ 1869.901963][T18002]  ? mas_walk+0x15f/0x180
[ 1869.906403][T18002]  ? mas_find+0x1ba/0x220
[ 1869.910889][T18002]  do_mas_munmap+0x240/0x2b0
[ 1869.915597][T18002]  __vm_munmap+0x1aa/0x2d0
[ 1869.920112][T18002]  ? vm_munmap+0x20/0x20
[ 1869.924458][T18002]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1869.930548][T18002]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1869.936990][T18002]  __x64_sys_munmap+0x5c/0x70
[ 1869.941812][T18002]  do_syscall_64+0x4c/0xa0
[ 1869.946311][T18002]  ? clear_bhb_loop+0x60/0xb0
[ 1869.951158][T18002]  ? clear_bhb_loop+0x60/0xb0
[ 1869.955910][T18002]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1869.962014][T18002] RIP: 0033:0x7f9d6579f947
[ 1869.966488][T18002] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1869.986406][T18002] RSP: 002b:00007f9d666ead18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[ 1869.994881][T18002] RAX: ffffffffffffffda RBX: 00007f9d5c000000 RCX: 00007f9d6579f947
[ 1870.002902][T18002] RDX: 0000000000000000 RSI: 00000000039f7000 RDI: 00007f9d60000000
[ 1870.010916][T18002] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[ 1870.018933][T18002] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[ 1870.026939][T18002] R13: 0000000000001000 R14: 00007f9d60000000 R15: 0000000000609000
[ 1870.034968][T18002]  </TASK>
[ 1870.046039][T16027] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1870.054197][    C0] gadgetfs: connected
[ 1870.069175][T16027] gadgetfs: disconnected
[ 1870.263422][T18010] loop8: detected capacity change from 0 to 16
[ 1870.316763][T18010] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1870.394490][T18002] program syz.0.2644 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1870.426439][    C0] gadgetfs: connected
[ 1870.435909][T16027] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[ 1870.445356][T16027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1870.643649][T18001] gadgetfs: suspended from state 3
[ 1870.836265][T18001] gadgetfs: disconnected
[ 1871.315637][T16027] usb 1-1: can't set config #1, error -71
[ 1871.324559][T16027] usb 1-1: USB disconnect, device number 96
[ 1871.335702][   T26] audit: type=1800 audit(1793658817.640:1787): pid=17809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=589359 res=0 errno=0
[ 1871.565516][   T26] audit: type=1800 audit(1793658817.640:1788): pid=17809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=589401 res=0 errno=0
[ 1871.785774][   T26] audit: type=1800 audit(1793658817.660:1789): pid=17809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=589367 res=0 errno=0
[ 1871.843791][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1871.862786][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1871.920856][T17705] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1871.940760][   T26] audit: type=1800 audit(1793658817.660:1790): pid=17809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=589368 res=0 errno=0
[ 1872.073517][   T26] audit: type=1800 audit(1793658817.660:1791): pid=17809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=589369 res=0 errno=0
[ 1872.173365][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1872.202574][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1872.269750][T17705] device veth0_vlan entered promiscuous mode
[ 1872.314832][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1872.324432][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1872.363341][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1872.371531][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1872.391570][T17705] device veth1_vlan entered promiscuous mode
[ 1872.741331][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1872.766879][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1872.834167][T18033] loop0: detected capacity change from 0 to 16
[ 1872.884814][T18033] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1872.991308][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1873.713689][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1873.728636][T17705] device veth0_macvtap entered promiscuous mode
[ 1873.740661][T17705] device veth1_macvtap entered promiscuous mode
[ 1873.760693][T17705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1873.775992][T17705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1873.788357][T17705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1873.819477][T17705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1873.875496][   T26] audit: type=1800 audit(1793658820.160:1792): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0
[ 1873.932592][T17705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1874.045823][T18042] loop4: detected capacity change from 0 to 512
[ 1874.058191][T18042] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1874.339772][T17705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1874.927546][   T26] audit: type=1800 audit(1793658821.230:1793): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1874.977762][T17705] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1874.986572][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1875.018995][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1875.076305][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1875.085213][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1875.208530][T17705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1875.291987][T17705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1876.143859][T17705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1876.366943][T17705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1876.886790][T17705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1876.948299][T17705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1877.001315][T17705] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1877.235530][   T26] audit: type=1800 audit(1793658823.530:1794): pid=18023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=589447 res=0 errno=0
[ 1877.417669][T10025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1877.448588][T10025] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1877.460911][T10025] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1877.487096][T10025] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1877.502953][T10025] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1877.514028][T10025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1877.740074][   T26] audit: type=1800 audit(1793658823.590:1795): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=589457 res=0 errno=0
[ 1878.045519][   T26] audit: type=1800 audit(1793658823.900:1796): pid=18023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=589476 res=0 errno=0
[ 1878.105527][   T26] audit: type=1800 audit(1793658823.940:1797): pid=18023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=589487 res=0 errno=0
[ 1878.204131][T18050] rxe_eth0 speed is unknown, defaulting to 1000
[ 1878.342494][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1878.397040][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1878.448330][   T26] audit: type=1800 audit(1793658824.750:1798): pid=18065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2653" name="state" dev="sysfs" ino=43179 res=0 errno=0
[ 1878.510471][T17705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1878.526950][T18065] FAULT_INJECTION: forcing a failure.
[ 1878.526950][T18065] name failslab, interval 1, probability 0, space 0, times 0
[ 1878.526954][T17705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1878.526991][T17705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1878.570818][T17705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1878.602267][T18065] CPU: 0 PID: 18065 Comm: syz.4.2653 Not tainted syzkaller #0
[ 1878.609877][T18065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1878.619998][T18065] Call Trace:
[ 1878.623339][T18065]  <TASK>
[ 1878.626328][T18065]  dump_stack_lvl+0x188/0x24e
[ 1878.631095][T18065]  ? show_regs_print_info+0x12/0x12
[ 1878.636368][T18065]  ? load_image+0x410/0x410
[ 1878.640950][T18065]  ? __might_sleep+0xd0/0xd0
[ 1878.645608][T18065]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1878.650716][T18065]  should_fail_ex+0x390/0x4c0
[ 1878.653439][T18057] rxe_eth0 speed is unknown, defaulting to 1000
[ 1878.655454][T18065]  should_failslab+0x5/0x20
[ 1878.655486][T18065]  slab_pre_alloc_hook+0x59/0x300
[ 1878.655519][T18065]  kmem_cache_alloc+0x56/0x2f0
[ 1878.676178][T18065]  ? mas_alloc_nodes+0x2ec/0x880
[ 1878.681194][T18065]  mas_alloc_nodes+0x2ec/0x880
[ 1878.686033][T18065]  mas_preallocate+0x162/0x3b0
[ 1878.690868][T18065]  do_mas_align_munmap+0x239/0x12d0
[ 1878.696160][T18065]  ? verify_lock_unused+0x140/0x140
[ 1878.701438][T18065]  ? do_mas_align_munmap+0x74c/0x12d0
[ 1878.707062][T18065]  ? do_mas_munmap+0x2b0/0x2b0
[ 1878.711897][T18065]  ? mtree_range_walk+0x664/0x780
[ 1878.717026][T18065]  ? mas_walk+0x15f/0x180
[ 1878.721422][T18065]  ? mas_find+0x1ba/0x220
[ 1878.725822][T18065]  do_mas_munmap+0x240/0x2b0
[ 1878.730506][T18065]  __vm_munmap+0x1aa/0x2d0
[ 1878.734985][T18065]  ? vm_munmap+0x20/0x20
[ 1878.739302][T18065]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1878.745360][T18065]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1878.751324][T18065]  __x64_sys_munmap+0x5c/0x70
[ 1878.756073][T18065]  do_syscall_64+0x4c/0xa0
[ 1878.760559][T18065]  ? clear_bhb_loop+0x60/0xb0
[ 1878.765293][T18065]  ? clear_bhb_loop+0x60/0xb0
[ 1878.770034][T18065]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1878.776160][T18065] RIP: 0033:0x7fa29079f947
[ 1878.780619][T18065] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1878.800299][T18065] RSP: 002b:00007fa29160ad18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[ 1878.808785][T18065] RAX: ffffffffffffffda RBX: 00007fa288000000 RCX: 00007fa29079f947
[ 1878.816839][T18065] RDX: 0000000000000000 RSI: 00000000029f7000 RDI: 00007fa28c000000
[ 1878.824868][T18065] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[ 1878.832894][T18065] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[ 1878.840915][T18065] R13: 0000000000001000 R14: 00007fa28c000000 R15: 0000000001609000
[ 1878.848955][T18065]  </TASK>
[ 1880.341680][ T4293] Bluetooth: hci0: command 0x0409 tx timeout
[ 1880.612096][T18073] rxe_eth0 speed is unknown, defaulting to 1000
[ 1881.060362][   T26] audit: type=1800 audit(1793658827.350:1799): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=600728 res=0 errno=0
[ 1882.363175][   T26] audit: type=1800 audit(1793658828.660:1800): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=601480 res=0 errno=0
[ 1882.383541][ T4293] Bluetooth: hci0: command 0x041b tx timeout
[ 1882.407649][ T5126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1882.462757][ T5126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1882.554551][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1883.864861][T18087] loop4: detected capacity change from 0 to 16
[ 1883.911877][T18087] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1883.968332][T18087] overlayfs: filesystem on './file0' not supported as upperdir
[ 1884.333542][   T26] audit: type=1800 audit(1793658830.630:1801): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1884.426619][T18092] overlayfs: missing 'lowerdir'
[ 1884.476240][T10025] Bluetooth: hci0: command 0x040f tx timeout
[ 1884.483230][T18092] loop0: detected capacity change from 0 to 1024
[ 1884.493819][T18092] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1884.520678][T18092] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1884.532526][T18092] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1884.693943][T18092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1884.702711][T18092] System zones: 0-1, 3-36
[ 1884.962189][T18092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1884.998890][T18092] overlayfs: failed to resolve './bus': -2
[ 1885.026042][T18092] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1885.295997][   T26] audit: type=1800 audit(1793658831.590:1802): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0
[ 1885.382350][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1885.681560][   T26] audit: type=1326 audit(1793658831.920:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1885.712208][T18106] loop4: detected capacity change from 0 to 512
[ 1885.720530][T18106] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1886.543167][T18108] loop8: detected capacity change from 0 to 16
[ 1886.591374][T18108] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1886.662443][ T4293] Bluetooth: hci0: command 0x0419 tx timeout
[ 1887.253706][   T26] audit: type=1326 audit(1793658831.920:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1887.332848][   T26] audit: type=1326 audit(1793658831.930:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1887.399878][T18112] loop0: detected capacity change from 0 to 512
[ 1887.511122][T18112] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[ 1887.606772][T18118] hub 8-0:1.0: USB hub found
[ 1887.613110][T18118] hub 8-0:1.0: 1 port detected
[ 1887.810544][   T26] audit: type=1326 audit(1793658831.930:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1888.389317][   T26] audit: type=1326 audit(1793658831.930:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1888.425562][   T26] audit: type=1326 audit(1793658831.930:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1888.695149][T18057] chnl_net:caif_netlink_parms(): no params data found
[ 1888.702172][   T26] audit: type=1326 audit(1793658831.940:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1888.815669][T18126] loop0: detected capacity change from 0 to 512
[ 1888.869036][   T26] audit: type=1326 audit(1793658831.940:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1888.897361][T18126] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[ 1888.926429][T18126] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2663: invalid indirect mapped block 256 (level 1)
[ 1889.004362][T18126] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2663: invalid indirect mapped block 2683928664 (level 1)
[ 1889.055520][   T26] audit: type=1326 audit(1793658831.950:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1889.151337][T18126] EXT4-fs (loop0): 1 truncate cleaned up
[ 1889.200819][T18126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1889.210637][   T26] audit: type=1326 audit(1793658831.960:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1889.315654][T18130] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[ 1889.390870][   T26] audit: type=1326 audit(1793658831.960:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29079fb19 code=0x7ffc0000
[ 1890.192947][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.205353][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.215070][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.225454][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.234504][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.245351][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.255034][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.271311][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.289264][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.333844][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1890.364231][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'.
[ 1890.417412][T10025] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1890.429600][T10025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1890.448179][T18144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1890.455851][T10025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1890.464944][T10025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1890.472768][T10025] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1890.481835][T10025] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1890.587949][T18144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1890.640184][T18144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1890.816472][T18155] overlayfs: missing 'lowerdir'
[ 1890.887296][T18156] loop0: detected capacity change from 0 to 1024
[ 1890.894625][T18156] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1890.905023][T18156] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1890.916798][T18156] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1891.053094][T18156] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1891.061826][T18156] System zones: 0-1, 3-36
[ 1891.121426][T18156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1891.159814][T18156] overlayfs: failed to resolve './bus': -2
[ 1891.210410][T18159] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1891.257190][T18057] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1891.330579][T18057] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1891.707198][T18057] device bridge_slave_0 entered promiscuous mode
[ 1891.722996][T18057] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1891.730483][T18057] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1891.738923][T18057] device bridge_slave_1 entered promiscuous mode
[ 1891.755170][T18146] rxe_eth0 speed is unknown, defaulting to 1000
[ 1891.762874][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1891.968485][T18057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1892.416694][   T26] kauditd_printk_skb: 48 callbacks suppressed
[ 1892.416737][   T26] audit: type=1800 audit(1793658838.720:1862): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=605768 res=0 errno=0
[ 1892.718433][ T4293] Bluetooth: hci2: command 0x0409 tx timeout
[ 1892.850106][T18168] loop0: detected capacity change from 0 to 256
[ 1892.879721][T18057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1892.911918][   T26] audit: type=1800 audit(1793658838.770:1863): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=605773 res=0 errno=0
[ 1892.942808][T18168] exfat: Deprecated parameter 'utf8'
[ 1892.965678][T18168] exfat: Deprecated parameter 'utf8'
[ 1892.996778][T18168] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1893.019546][   T26] audit: type=1800 audit(1793658838.790:1864): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=605777 res=0 errno=0
[ 1893.044110][T18172] loop4: detected capacity change from 0 to 512
[ 1893.082566][T18057] team0: Port device team_slave_0 added
[ 1893.221966][T18057] team0: Port device team_slave_1 added
[ 1893.229914][   T26] audit: type=1800 audit(1793658838.860:1865): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=605776 res=0 errno=0
[ 1893.251006][T18172] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[ 1893.601351][   T26] audit: type=1800 audit(1793658838.950:1866): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=605779 res=0 errno=0
[ 1893.663028][T18057] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1893.711458][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1893.799748][   T26] audit: type=1800 audit(1793658839.080:1867): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=606065 res=0 errno=0
[ 1893.871280][T18057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1893.912927][   T26] audit: type=1800 audit(1793658839.090:1868): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=606070 res=0 errno=0
[ 1894.062075][T18057] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1894.097535][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1894.117898][   T26] audit: type=1800 audit(1793658839.090:1869): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=606074 res=0 errno=0
[ 1894.165543][   T26] audit: type=1800 audit(1793658839.090:1870): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=606073 res=0 errno=0
[ 1894.206710][   T26] audit: type=1800 audit(1793658839.090:1871): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=606076 res=0 errno=0
[ 1894.245820][T18057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1894.472324][T18057] device hsr_slave_0 entered promiscuous mode
[ 1894.505979][T18057] device hsr_slave_1 entered promiscuous mode
[ 1894.624803][T18194] loop8: detected capacity change from 0 to 512
[ 1894.637088][T18194] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1894.656679][T18057] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1894.665425][T18057] Cannot create hsr debugfs directory
[ 1894.779630][T10025] Bluetooth: hci2: command 0x041b tx timeout
[ 1895.019214][T18192] loop0: detected capacity change from 0 to 1024
[ 1895.341703][T18191] loop4: detected capacity change from 0 to 512
[ 1895.371255][T18192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1895.577005][T18191] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[ 1895.626897][T18191] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2676: invalid indirect mapped block 256 (level 1)
[ 1896.535565][T18208] overlayfs: missing 'lowerdir'
[ 1896.606281][T18209] loop8: detected capacity change from 0 to 1024
[ 1896.613578][T18209] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1896.628570][T18209] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1896.640005][T18209] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1896.674952][T18191] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2676: invalid indirect mapped block 2683928664 (level 1)
[ 1896.767068][T18209] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1896.775832][T18209] System zones: 0-1, 3-36
[ 1896.792708][T18209] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1896.830823][T18208] overlayfs: failed to resolve './bus': -2
[ 1896.845728][ T4293] Bluetooth: hci2: command 0x040f tx timeout
[ 1896.871453][T18209] __nla_validate_parse: 131 callbacks suppressed
[ 1896.871497][T18209] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2678'.
[ 1896.918022][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1897.189832][T18191] EXT4-fs (loop4): 1 truncate cleaned up
[ 1897.246372][T18191] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1897.339014][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1897.436833][T18212] loop0: detected capacity change from 0 to 1024
[ 1897.533837][   T26] kauditd_printk_skb: 10 callbacks suppressed
[ 1897.533857][   T26] audit: type=1800 audit(1793658843.750:1882): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0
[ 1897.603086][T18212] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1897.736835][   T26] audit: type=1800 audit(1793658843.920:1883): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2679" name="file2" dev="loop0" ino=16 res=0 errno=0
[ 1898.781374][T18198] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[ 1898.864313][ T4279] EXT4-fs (loop4): unmounting filesystem.
[ 1898.929630][ T4293] Bluetooth: hci2: command 0x0419 tx timeout
[ 1899.031580][T18224] loop8: detected capacity change from 0 to 16
[ 1899.045452][T18224] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1899.286102][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1899.357202][   T26] audit: type=1800 audit(1793658845.660:1884): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1899.984632][T18229] loop0: detected capacity change from 0 to 2048
[ 1900.069962][T18146] chnl_net:caif_netlink_parms(): no params data found
[ 1900.192206][T18239] overlayfs: missing 'lowerdir'
[ 1900.261878][T18240] loop4: detected capacity change from 0 to 1024
[ 1900.269396][T18240] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1900.384798][T18229] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1901.024971][T18242] overlayfs: missing 'lowerdir'
[ 1901.108709][T18242] loop8: detected capacity change from 0 to 1024
[ 1901.119345][T18242] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1901.174913][T18240] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1901.186448][T18240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1901.230441][T18242] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1901.242115][T18242] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1901.326494][T18240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1901.336270][T18240] System zones: 0-1, 3-36
[ 1901.348540][T18240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1901.363495][T18242] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1901.372213][T18242] System zones: 0-1, 3-36
[ 1901.379794][T18242] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1901.531525][T18239] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2681'.
[ 1901.577828][T18237] overlayfs: failed to resolve './bus': -2
[ 1902.064221][   T26] audit: type=1800 audit(1793658848.360:1885): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1902.115995][   T26] audit: type=1800 audit(1793658848.390:1886): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=613065 res=0 errno=0
[ 1902.321820][T16113] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1902.378147][T18242] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2683'.
[ 1902.401928][   T26] audit: type=1800 audit(1793658848.700:1887): pid=18057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=46536 res=0 errno=0
[ 1902.411267][ T4279] EXT4-fs (loop4): unmounting filesystem.
[ 1902.479638][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1902.826684][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1903.669159][T18262] overlayfs: missing 'lowerdir'
[ 1903.744194][T18263] loop4: detected capacity change from 0 to 1024
[ 1903.755189][T18263] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1903.821563][T18264] loop0: detected capacity change from 0 to 1024
[ 1903.831869][T18264] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1903.853593][T18264] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1903.865258][T18264] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1903.875076][T18263] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1903.886668][T18263] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1904.039011][T18264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1904.047760][T18264] System zones: 0-1, 3-36
[ 1904.064107][T18264] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1904.178876][T18263] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1904.190803][T18263] System zones: 0-1, 3-36
[ 1904.215718][T18263] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1904.502017][   T26] audit: type=1800 audit(1793658850.800:1888): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1904.524009][T18264] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1904.535203][T18263] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[ 1904.610838][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1904.640514][   T26] audit: type=1800 audit(1793658850.940:1889): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=614359 res=0 errno=0
[ 1904.669082][T18269] loop8: detected capacity change from 0 to 512
[ 1904.717029][T18269] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[ 1904.737280][T18269] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2686: invalid indirect mapped block 256 (level 1)
[ 1904.771977][T18269] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2686: invalid indirect mapped block 2683928664 (level 1)
[ 1904.787717][   T26] audit: type=1800 audit(1793658850.940:1890): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=614373 res=0 errno=0
[ 1904.834009][T18269] EXT4-fs (loop8): 1 truncate cleaned up
[ 1904.844462][T18269] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1904.980949][   T26] audit: type=1800 audit(1793658851.030:1891): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1905.619000][T18273] hub 8-0:1.0: USB hub found
[ 1905.624313][T18273] hub 8-0:1.0: 1 port detected
[ 1905.669421][ T4279] EXT4-fs (loop4): unmounting filesystem.
[ 1905.791429][T18146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1905.802081][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1905.810869][T18146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1905.877182][T18146] device bridge_slave_0 entered promiscuous mode
[ 1905.972037][T18280] loop0: detected capacity change from 0 to 1024
[ 1906.004323][   T26] audit: type=1800 audit(1793658852.300:1892): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0
[ 1906.037660][T18280] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1906.104640][T18287] loop4: detected capacity change from 0 to 16
[ 1906.118798][T18287] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1906.357230][   T26] audit: type=1800 audit(1793658852.380:1893): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=614769 res=0 errno=0
[ 1907.553581][T18283] loop8: detected capacity change from 0 to 512
[ 1907.566037][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1907.614561][   T26] audit: type=1800 audit(1793658852.590:1894): pid=18280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2691" name="file2" dev="loop0" ino=16 res=0 errno=0
[ 1907.675543][   T26] audit: type=1800 audit(1793658853.890:1895): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0
[ 1907.698168][T18283] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[ 1907.726972][T18283] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2690: invalid indirect mapped block 256 (level 1)
[ 1907.742075][T18146] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1907.766041][T18283] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2690: invalid indirect mapped block 2683928664 (level 1)
[ 1907.774075][T18146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1907.850568][T18297] overlayfs: missing 'lowerdir'
[ 1907.920554][T18298] loop4: detected capacity change from 0 to 1024
[ 1907.927980][T18298] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1907.953902][   T26] audit: type=1800 audit(1793658853.890:1896): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=614792 res=0 errno=0
[ 1907.987293][T18298] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1907.999599][T18298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1908.049917][T18298] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1908.058580][T18298] System zones: 0-1, 3-36
[ 1908.074444][T18298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1908.267958][T18298] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2692'.
[ 1908.306541][T18146] device bridge_slave_1 entered promiscuous mode
[ 1908.771321][T18283] EXT4-fs (loop8): 1 truncate cleaned up
[ 1908.785930][T18297] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[ 1908.805985][   T26] audit: type=1800 audit(1793658853.960:1897): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1908.828521][T18283] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1908.971530][T18304] overlayfs: missing 'lowerdir'
[ 1909.056458][T18306] loop0: detected capacity change from 0 to 1024
[ 1909.063774][T18306] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1909.076743][T18306] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1909.088285][T18306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1909.229667][T18306] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1909.238670][T18306] System zones: 0-1, 3-36
[ 1909.264086][T18306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1909.332126][T18304] overlayfs: failed to resolve './bus': -2
[ 1909.354984][T18304] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2693'.
[ 1909.867276][ T4279] EXT4-fs (loop4): unmounting filesystem.
[ 1909.939074][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1910.139574][T18146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1910.206953][   T26] kauditd_printk_skb: 1 callbacks suppressed
[ 1910.207323][   T26] audit: type=1800 audit(1793658856.500:1899): pid=18057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=46535 res=0 errno=0
[ 1910.523418][T18146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1910.867446][T18146] team0: Port device team_slave_0 added
[ 1910.956934][T18146] team0: Port device team_slave_1 added
[ 1911.121426][   T26] audit: type=1800 audit(1793659113.422:1900): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=615400 res=0 errno=0
[ 1911.194837][T18057] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1911.262742][T18146] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1911.274499][T18146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1911.465098][T18146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1911.590618][T18325] hub 8-0:1.0: USB hub found
[ 1911.596794][T18325] hub 8-0:1.0: 1 port detected
[ 1913.350456][T18057] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1913.637901][T18057] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1913.668651][T18057] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1914.257154][T18057] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1914.322885][T18146] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1914.348975][T18146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1914.450463][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1914.468994][T18146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1914.552997][T18329] rxe_eth0 speed is unknown, defaulting to 1000
[ 1914.680977][   T26] audit: type=1800 audit(1793659116.982:1901): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=619863 res=0 errno=0
[ 1914.703950][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.704072][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 1914.727276][T18342] loop0: detected capacity change from 0 to 512
[ 1914.794885][T18146] device hsr_slave_0 entered promiscuous mode
[ 1914.810574][   T26] audit: type=1800 audit(1793659117.012:1902): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=619906 res=0 errno=0
[ 1914.832065][T18342] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[ 1914.857310][T18342] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2699: invalid indirect mapped block 256 (level 1)
[ 1914.876007][T18146] device hsr_slave_1 entered promiscuous mode
[ 1914.900536][T18146] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1914.918493][T18342] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2699: invalid indirect mapped block 2683928664 (level 1)
[ 1914.934642][T18146] Cannot create hsr debugfs directory
[ 1915.009740][T18342] EXT4-fs (loop0): 1 truncate cleaned up
[ 1915.018579][T18057] 8021q: adding VLAN 0 to HW filter on device team0
[ 1915.036142][T18342] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1915.077115][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1915.095840][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1915.305825][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1915.326576][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1915.521302][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1915.528619][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1915.747091][T18344] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[ 1915.775279][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1915.903946][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1916.066385][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1916.073639][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1916.266542][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1916.289986][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1916.299797][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1916.309304][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1916.328202][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1916.340633][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1916.350240][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1916.359813][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1916.384015][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1916.443290][T18057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1916.495646][T18057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1916.554208][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1916.619035][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1916.634237][   T26] audit: type=1800 audit(1793659118.932:1903): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2700" name="add_target_port" dev="sysfs" ino=43387 res=0 errno=0
[ 1916.707615][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1916.788821][   T26] audit: type=1800 audit(1793659118.962:1904): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2700" name="add_local_port" dev="sysfs" ino=43383 res=0 errno=0
[ 1916.833735][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1917.006275][ T4611] device hsr_slave_0 left promiscuous mode
[ 1917.091818][ T4611] device hsr_slave_1 left promiscuous mode
[ 1917.119960][   T26] audit: type=1800 audit(1793659118.962:1905): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2700" name="add_remote_port" dev="sysfs" ino=43385 res=0 errno=0
[ 1917.205860][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1917.302835][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1917.413748][ T4611] device bridge_slave_1 left promiscuous mode
[ 1917.420498][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1917.501326][T18360] overlayfs: missing 'lowerdir'
[ 1917.570761][T18360] loop0: detected capacity change from 0 to 1024
[ 1917.581369][T18360] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1917.599031][T18360] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1917.611243][T18360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1917.698888][ T4611] device bridge_slave_0 left promiscuous mode
[ 1917.728819][T18360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1917.737717][T18360] System zones: 0-1, 3-36
[ 1917.791763][T18360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1917.976222][T18360] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1918.106476][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1918.427922][   T26] audit: type=1800 audit(1793659120.732:1906): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0
[ 1918.577320][T16113] EXT4-fs (loop0): unmounting filesystem.
[ 1918.900176][   T26] audit: type=1326 audit(1793659121.142:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.0.2702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6579fb19 code=0x7ffc0000
[ 1918.931313][T18371] loop0: detected capacity change from 0 to 512
[ 1918.939599][T18371] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1919.762042][   T26] audit: type=1326 audit(1793659121.142:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.0.2702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6579fb19 code=0x7ffc0000
[ 1919.795437][   T26] audit: type=1326 audit(1793659121.152:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.0.2702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6579fb19 code=0x7ffc0000
[ 1919.887301][   T26] audit: type=1326 audit(1793659121.152:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.0.2702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6579fb19 code=0x7ffc0000
[ 1920.152371][   T26] audit: type=1326 audit(1793659121.152:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.0.2702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6579fb19 code=0x7ffc0000
[ 1920.305603][   T26] audit: type=1326 audit(1793659121.152:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.0.2702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d6579fb19 code=0x7ffc0000
[ 1920.866155][T18375] loop0: detected capacity change from 0 to 131072
[ 1920.892953][T18375] F2FS-fs (loop0): invalid crc value
[ 1920.898769][T18375] F2FS-fs (loop0): invalid crc value
[ 1920.904155][T18375] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[ 1920.942908][T18380] loop8: detected capacity change from 0 to 1024
[ 1921.187730][T18380] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1922.132955][ T4611] team0 (unregistering): Port device team_slave_1 removed
[ 1922.256537][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1922.326859][ T4611] team0 (unregistering): Port device team_slave_0 removed
[ 1922.556520][ T4611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1923.427412][ T4611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1924.791049][ T4611] bond0 (unregistering): Released all slaves
[ 1925.130412][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1925.182610][T18396] rxe_eth0 speed is unknown, defaulting to 1000
[ 1925.854477][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.864211][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.873372][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.884379][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.893554][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.904503][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.913695][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.924557][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.933785][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.944938][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[ 1925.965659][T18409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1925.985142][T18409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1925.994024][T18409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1926.705642][   T26] kauditd_printk_skb: 44 callbacks suppressed
[ 1926.705662][   T26] audit: type=1800 audit(1793659128.982:1957): pid=18146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=46536 res=0 errno=0
[ 1926.920698][T18416] loop8: detected capacity change from 0 to 256
[ 1927.032896][T18418] loop0: detected capacity change from 0 to 16
[ 1927.099244][T18418] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1927.230568][T18416] exfat: Deprecated parameter 'utf8'
[ 1927.469320][T18416] exfat: Deprecated parameter 'utf8'
[ 1927.962131][   T26] audit: type=1800 audit(1793659130.262:1958): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1928.015129][T18416] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1928.050203][   T26] audit: type=1800 audit(1793659130.302:1959): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0
[ 1928.375108][T18146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1929.052774][T18146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1929.130937][   T26] audit: type=1800 audit(1793659131.432:1960): pid=18423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=626625 res=0 errno=0
[ 1929.207574][T10025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1929.219329][T10025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1929.233023][T10025] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1929.243742][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1929.252157][T10025] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1929.259896][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1929.321861][   T26] audit: type=1800 audit(1793659131.462:1961): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=626635 res=0 errno=0
[ 1930.375503][T18435] rxe_eth0 speed is unknown, defaulting to 1000
[ 1930.634701][T18442] loop8: detected capacity change from 0 to 16
[ 1930.655992][T18441] loop0: detected capacity change from 0 to 16
[ 1930.715548][T18442] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1930.902089][T18441] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1931.235067][   T26] audit: type=1800 audit(1793659131.582:1962): pid=18423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=626654 res=0 errno=0
[ 1931.255437][   T26] audit: type=1800 audit(1793659131.592:1963): pid=18423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=626665 res=0 errno=0
[ 1931.275882][   T26] audit: type=1800 audit(1793659133.472:1964): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0
[ 1931.325722][ T4293] Bluetooth: hci5: command 0x0409 tx timeout
[ 1932.370370][T18457] overlayfs: missing 'lowerdir'
[ 1932.483365][T18460] loop8: detected capacity change from 0 to 1024
[ 1932.494303][T18460] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1932.584632][T18460] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1932.597133][T18460] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1932.619433][   T26] audit: type=1804 audit(1793659134.922:1965): pid=18449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="udevd" name="/sys/devices/virtual/block/loop8/uevent" dev="sysfs" ino=38021 res=1 errno=0
[ 1932.673698][T18460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1932.682123][T18460] System zones: 0-1, 3-36
[ 1932.704035][T18460] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1932.795823][T18463] __nla_validate_parse: 135 callbacks suppressed
[ 1932.795844][T18463] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2716'.
[ 1932.834936][T18146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.850651][   T26] audit: type=1800 audit(1793659135.042:1966): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38021 res=0 errno=0
[ 1932.983182][T18460] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[ 1933.209884][T13357] EXT4-fs (loop8): unmounting filesystem.
[ 1933.301659][T18146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.405858][ T4293] Bluetooth: hci5: command 0x041b tx timeout
[ 1933.541731][   T26] audit: type=1800 audit(1793659135.842:1967): pid=18146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=46535 res=0 errno=0
[ 1933.778832][T18435] chnl_net:caif_netlink_parms(): no params data found
[ 1933.915984][   T26] audit: type=1800 audit(1793659136.212:1968): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=631444 res=0 errno=0
[ 1933.964661][T18146] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1934.033163][T18435] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1934.046792][T18435] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1934.090046][T18435] device bridge_slave_0 entered promiscuous mode
[ 1934.116439][T18481] gadgetfs: bound to dummy_udc driver
[ 1934.130438][T18146] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1934.156201][T18435] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1934.192778][T18435] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1934.248460][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2717'.
[ 1934.282864][   T26] audit: type=1800 audit(1793659136.582:1969): pid=18483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2718" name="state" dev="sysfs" ino=43179 res=0 errno=0
[ 1934.445485][T16027] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1934.489645][T18435] device bridge_slave_1 entered promiscuous mode
[ 1934.544545][T18481] FAULT_INJECTION: forcing a failure.
[ 1934.544545][T18481] name failslab, interval 1, probability 0, space 0, times 0
[ 1934.659000][T18146] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1934.673591][T18487] program syz.8.2718 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1934.806525][T18481] CPU: 1 PID: 18481 Comm: syz.8.2718 Not tainted syzkaller #0
[ 1934.814088][T18481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1934.824508][T18481] Call Trace:
[ 1934.828016][T18481]  <TASK>
[ 1934.830993][T18481]  dump_stack_lvl+0x188/0x24e
[ 1934.835746][T18481]  ? show_regs_print_info+0x12/0x12
[ 1934.841495][T18481]  ? load_image+0x410/0x410
[ 1934.846243][T18481]  ? __might_sleep+0xd0/0xd0
[ 1934.850893][T18481]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1934.855982][T18481]  ? __dentry_path+0x595/0x5f0
[ 1934.861086][T18481]  should_fail_ex+0x390/0x4c0
[ 1934.865831][T18481]  should_failslab+0x5/0x20
[ 1934.870395][T18481]  slab_pre_alloc_hook+0x59/0x300
[ 1934.875613][T18481]  ? tomoyo_encode+0x28a/0x550
[ 1934.880487][T18481]  __kmem_cache_alloc_node+0x4f/0x270
[ 1934.886195][T18481]  ? tomoyo_realpath_from_path+0x5c0/0x5c0
[ 1934.892162][T18481]  ? tomoyo_encode+0x28a/0x550
[ 1934.897341][T18481]  __kmalloc+0xa3/0x240
[ 1934.901588][T18481]  tomoyo_encode+0x28a/0x550
[ 1934.906268][T18481]  tomoyo_realpath_from_path+0x578/0x5c0
[ 1934.911979][T18481]  tomoyo_check_open_permission+0x212/0x440
[ 1934.917963][T18481]  ? tomoyo_check_open_permission+0x1bf/0x440
[ 1934.924109][T18481]  ? tomoyo_check_path_number_acl+0x280/0x280
[ 1934.930306][T18481]  ? tomoyo_file_open+0xe9/0x170
[ 1934.935323][T18481]  security_file_open+0x5e/0xa0
[ 1934.940362][T18481]  do_dentry_open+0x2fd/0x10b0
[ 1934.945220][T18481]  ? memcpy+0x3c/0x60
[ 1934.949306][T18481]  path_openat+0x2674/0x2f10
[ 1934.953989][T18481]  ? kasan_set_track+0x60/0x70
[ 1934.958828][T18481]  ? verify_lock_unused+0x140/0x140
[ 1934.964122][T18481]  ? do_sys_openat2+0xdd/0x4f0
[ 1934.969022][T18481]  ? do_filp_open+0x420/0x420
[ 1934.973803][T18481]  do_filp_open+0x1ee/0x420
[ 1934.978472][T18481]  ? vfs_tmpfile+0x490/0x490
[ 1934.983493][T18481]  ? _raw_spin_unlock+0x24/0x40
[ 1934.988413][T18481]  ? alloc_fd+0x590/0x640
[ 1934.992895][T18481]  do_sys_openat2+0x14b/0x4f0
[ 1934.997640][T18481]  ? do_sys_open+0xe0/0xe0
[ 1935.002132][T18481]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1935.008203][T18481]  ? lock_chain_count+0x20/0x20
[ 1935.013142][T18481]  __x64_sys_openat+0x135/0x160
[ 1935.018082][T18481]  do_syscall_64+0x4c/0xa0
[ 1935.022574][T18481]  ? clear_bhb_loop+0x60/0xb0
[ 1935.027362][T18481]  ? clear_bhb_loop+0x60/0xb0
[ 1935.032476][T18481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1935.041179][T18481] RIP: 0033:0x7f2652b9fb19
[ 1935.045972][T18481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1935.066005][T18481] RSP: 002b:00007f2653ad2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1935.074593][T18481] RAX: ffffffffffffffda RBX: 00007f2652e25fa0 RCX: 00007f2652b9fb19
[ 1935.083453][T18481] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c
[ 1935.091948][T18481] RBP: 00007f2652c37af8 R08: 0000000000000000 R09: 0000000000000000
[ 1935.100069][T18481] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[ 1935.108602][T18481] R13: 00007f2652e26038 R14: 00007f2652e25fa0 R15: 00007ffd85aab0c8
[ 1935.117522][T18481]  </TASK>
[ 1935.485832][ T4293] Bluetooth: hci5: command 0x040f tx timeout
[ 1935.683335][T18146] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1936.029950][T18478] gadgetfs: suspended from state 2
[ 1937.030839][T18484] Can't find ip_set type hash:ip,po
[ 1937.332248][T18435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1937.386926][T18435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1937.585717][ T4293] Bluetooth: hci5: command 0x0419 tx timeout
[ 1937.626637][T18481] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1937.633448][T18481] ==================================================================
[ 1937.641639][T18481] BUG: KASAN: use-after-free in __mutex_lock+0xf4/0xb40
[ 1937.648707][T18481] Read of size 8 at addr ffff888065912c60 by task syz.8.2718/18481
[ 1937.656738][T18481] 
[ 1937.659209][T18481] CPU: 1 PID: 18481 Comm: syz.8.2718 Not tainted syzkaller #0
[ 1937.666794][T18481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1937.676897][T18481] Call Trace:
[ 1937.680235][T18481]  <TASK>
[ 1937.683220][T18481]  dump_stack_lvl+0x188/0x24e
[ 1937.687957][T18481]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1937.693068][T18481]  ? show_regs_print_info+0x12/0x12
[ 1937.698337][T18481]  ? load_image+0x410/0x410
[ 1937.702907][T18481]  ? _raw_spin_lock_irqsave+0xbc/0x100
[ 1937.708440][T18481]  ? __virt_addr_valid+0x188/0x540
[ 1937.713619][T18481]  ? __virt_addr_valid+0x467/0x540
[ 1937.718793][T18481]  ? __mutex_lock+0xf4/0xb40
[ 1937.723426][T18481]  print_report+0xa8/0x210
[ 1937.727992][T18481]  kasan_report+0x10b/0x140
[ 1937.732852][T18481]  ? __mutex_lock+0xf4/0xb40
[ 1937.737744][T18481]  __mutex_lock+0xf4/0xb40
[ 1937.742204][T18481]  ? ep_open+0x4a/0x260
[ 1937.746582][T18481]  ? apparmor_file_open+0x3c7/0x780
[ 1937.751996][T18481]  ? mutex_lock_nested+0x10/0x10
[ 1937.757061][T18481]  ? apparmor_inode_getattr+0x20/0x20
[ 1937.762904][T18481]  ep_open+0x4a/0x260
[ 1937.766953][T18481]  ? do_dentry_open+0x7d4/0x10b0
[ 1937.771958][T18481]  ? ep_ioctl+0x1b0/0x1b0
[ 1937.776332][T18481]  do_dentry_open+0x7dd/0x10b0
[ 1937.781153][T18481]  path_openat+0x2674/0x2f10
[ 1937.785789][T18481]  ? kasan_set_track+0x60/0x70
[ 1937.790599][T18481]  ? verify_lock_unused+0x140/0x140
[ 1937.795836][T18481]  ? do_sys_openat2+0xdd/0x4f0
[ 1937.800640][T18481]  ? do_filp_open+0x420/0x420
[ 1937.805404][T18481]  do_filp_open+0x1ee/0x420
[ 1937.809951][T18481]  ? vfs_tmpfile+0x490/0x490
[ 1937.814580][T18481]  ? _raw_spin_unlock+0x24/0x40
[ 1937.819462][T18481]  ? alloc_fd+0x590/0x640
[ 1937.823912][T18481]  do_sys_openat2+0x14b/0x4f0
[ 1937.828631][T18481]  ? do_sys_open+0xe0/0xe0
[ 1937.833085][T18481]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1937.839228][T18481]  ? lock_chain_count+0x20/0x20
[ 1937.844228][T18481]  __x64_sys_openat+0x135/0x160
[ 1937.849133][T18481]  do_syscall_64+0x4c/0xa0
[ 1937.853611][T18481]  ? clear_bhb_loop+0x60/0xb0
[ 1937.858340][T18481]  ? clear_bhb_loop+0x60/0xb0
[ 1937.863145][T18481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1937.869076][T18481] RIP: 0033:0x7f2652b9fb19
[ 1937.873530][T18481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1937.893344][T18481] RSP: 002b:00007f2653ad2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1937.902140][T18481] RAX: ffffffffffffffda RBX: 00007f2652e25fa0 RCX: 00007f2652b9fb19
[ 1937.910399][T18481] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c
[ 1937.918852][T18481] RBP: 00007f2652c37af8 R08: 0000000000000000 R09: 0000000000000000
[ 1937.926867][T18481] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[ 1937.935145][T18481] R13: 00007f2652e26038 R14: 00007f2652e25fa0 R15: 00007ffd85aab0c8
[ 1937.943258][T18481]  </TASK>
[ 1937.946356][T18481] 
[ 1937.948726][T18481] Allocated by task 18481:
[ 1937.953428][T18481]  kasan_set_track+0x4b/0x70
[ 1937.958067][T18481]  __kasan_kmalloc+0x8e/0xa0
[ 1937.962871][T18481]  gadgetfs_bind+0x25b/0x820
[ 1937.967497][T18481]  gadget_bind_driver+0x2af/0x760
[ 1937.972666][T18481]  really_probe+0x24a/0xb40
[ 1937.977264][T18481]  __driver_probe_device+0x1f5/0x390
[ 1937.982600][T18481]  driver_probe_device+0x4f/0x420
[ 1937.987662][T18481]  __driver_attach+0x43d/0x6c0
[ 1937.992449][T18481]  bus_for_each_dev+0x182/0x1f0
[ 1937.997398][T18481]  bus_add_driver+0x324/0x5d0
[ 1938.002112][T18481]  driver_register+0x32d/0x430
[ 1938.006903][T18481]  usb_gadget_register_driver_owner+0xf5/0x260
[ 1938.013101][T18481]  dev_config+0xe45/0x1260
[ 1938.017683][T18481]  vfs_write+0x2dc/0x9a0
[ 1938.022001][T18481]  ksys_write+0x14d/0x260
[ 1938.026465][T18481]  do_syscall_64+0x4c/0xa0
[ 1938.030926][T18481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1938.036855][T18481] 
[ 1938.039224][T18481] Freed by task 18478:
[ 1938.043307][T18481]  kasan_set_track+0x4b/0x70
[ 1938.048025][T18481]  kasan_save_free_info+0x27/0x40
[ 1938.053073][T18481]  ____kasan_slab_free+0x126/0x1f0
[ 1938.058219][T18481]  slab_free_freelist_hook+0x133/0x1b0
[ 1938.063710][T18481]  __kmem_cache_free+0xb6/0x200
[ 1938.068673][T18481]  destroy_ep_files+0x282/0x330
[ 1938.073565][T18481]  gadgetfs_unbind+0x105/0x2a0
[ 1938.078367][T18481]  gadget_unbind_driver+0x1bb/0x3d0
[ 1938.083627][T18481]  device_release_driver_internal+0x47d/0x7c0
[ 1938.089729][T18481]  driver_detach+0x1ef/0x2d0
[ 1938.094361][T18481]  bus_remove_driver+0x11c/0x230
[ 1938.099333][T18481]  usb_gadget_unregister_driver+0x4a/0x70
[ 1938.105088][T18481]  dev_release+0x82/0x1f0
[ 1938.109446][T18481]  __fput+0x20a/0x8b0
[ 1938.113454][T18481]  task_work_run+0x1d0/0x260
[ 1938.118080][T18481]  exit_to_user_mode_loop+0xe6/0x110
[ 1938.123402][T18481]  exit_to_user_mode_prepare+0xee/0x180
[ 1938.128989][T18481]  syscall_exit_to_user_mode+0x16/0x40
[ 1938.134534][T18481]  do_syscall_64+0x58/0xa0
[ 1938.138986][T18481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1938.145017][T18481] 
[ 1938.147374][T18481] The buggy address belongs to the object at ffff888065912c00
[ 1938.147374][T18481]  which belongs to the cache kmalloc-512 of size 512
[ 1938.161477][T18481] The buggy address is located 96 bytes inside of
[ 1938.161477][T18481]  512-byte region [ffff888065912c00, ffff888065912e00)
[ 1938.174886][T18481] 
[ 1938.177256][T18481] The buggy address belongs to the physical page:
[ 1938.183816][T18481] page:ffffea0001964400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888065913c00 pfn:0x65910
[ 1938.195387][T18481] head:ffffea0001964400 order:2 compound_mapcount:0 compound_pincount:0
[ 1938.203742][T18481] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1938.211806][T18481] raw: 00fff00000010200 ffffea0001efea08 ffffea0000c24508 ffff888018441c80
[ 1938.220450][T18481] raw: ffff888065913c00 000000000010000d 00000001ffffffff 0000000000000000
[ 1938.229065][T18481] page dumped because: kasan: bad access detected
[ 1938.235493][T18481] page_owner tracks the page as allocated
[ 1938.241236][T18481] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 15716, tgid 15713 (syz.8.2284), ts 1506111143732, free_ts 773871849721
[ 1938.264281][T18481]  post_alloc_hook+0x173/0x1a0
[ 1938.269107][T18481]  get_page_from_freelist+0x206b/0x2180
[ 1938.274712][T18481]  __alloc_pages+0x1ec/0x4f0
[ 1938.279430][T18481]  alloc_slab_page+0x5d/0x180
[ 1938.284140][T18481]  new_slab+0x87/0x2d0
[ 1938.288243][T18481]  ___slab_alloc+0xbc5/0x1240
[ 1938.292951][T18481]  __kmem_cache_alloc_node+0x126/0x270
[ 1938.298436][T18481]  __kmalloc_node_track_caller+0xa0/0x240
[ 1938.304208][T18481]  __alloc_skb+0x226/0x7d0
[ 1938.308653][T18481]  inet_netconf_notify_devconf+0x16f/0x230
[ 1938.314560][T18481]  __devinet_sysctl_register+0x2ac/0x320
[ 1938.320223][T18481]  devinet_sysctl_register+0x17c/0x1f0
[ 1938.325716][T18481]  inetdev_init+0x2ae/0x4e0
[ 1938.330257][T18481]  inetdev_event+0x26f/0x13f0
[ 1938.335064][T18481]  raw_notifier_call_chain+0xcb/0x160
[ 1938.340524][T18481]  register_netdevice+0x16a8/0x1b80
[ 1938.345802][T18481] page last free stack trace:
[ 1938.350490][T18481]  free_unref_page_prepare+0x8e5/0x9e0
[ 1938.356084][T18481]  free_unref_page+0x2e/0x3f0
[ 1938.361163][T18481]  __vunmap+0x874/0xa40
[ 1938.365372][T18481]  kcov_close+0x27/0x50
[ 1938.369652][T18481]  __fput+0x20a/0x8b0
[ 1938.373684][T18481]  task_work_run+0x1d0/0x260
[ 1938.378328][T18481]  do_exit+0x9d5/0x2570
[ 1938.382591][T18481]  do_group_exit+0x229/0x2e0
[ 1938.387395][T18481]  get_signal+0x1259/0x1340
[ 1938.392001][T18481]  arch_do_signal_or_restart+0xc4/0x1310
[ 1938.397734][T18481]  exit_to_user_mode_loop+0x70/0x110
[ 1938.403148][T18481]  exit_to_user_mode_prepare+0xee/0x180
[ 1938.408841][T18481]  syscall_exit_to_user_mode+0x16/0x40
[ 1938.414360][T18481]  do_syscall_64+0x58/0xa0
[ 1938.418836][T18481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1938.424767][T18481] 
[ 1938.427116][T18481] Memory state around the buggy address:
[ 1938.433012][T18481]  ffff888065912b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1938.441272][T18481]  ffff888065912b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1938.449423][T18481] >ffff888065912c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1938.457531][T18481]                                                        ^
[ 1938.464856][T18481]  ffff888065912c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1938.472946][T18481]  ffff888065912d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1938.481039][T18481] ==================================================================
[ 1938.601164][T18481] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1938.608576][T18481] CPU: 0 PID: 18481 Comm: syz.8.2718 Not tainted syzkaller #0
[ 1938.616173][T18481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1938.626398][T18481] Call Trace:
[ 1938.629727][T18481]  <TASK>
[ 1938.632705][T18481]  dump_stack_lvl+0x188/0x24e
[ 1938.637442][T18481]  ? memcpy+0x3c/0x60
[ 1938.641474][T18481]  ? show_regs_print_info+0x12/0x12
[ 1938.646828][T18481]  ? load_image+0x410/0x410
[ 1938.651386][T18481]  panic+0x2d3/0x710
[ 1938.655344][T18481]  ? bpf_jit_dump+0xd0/0xd0
[ 1938.659917][T18481]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1938.665634][T18481]  ? check_panic_on_warn+0x6c/0xa0
[ 1938.671147][T18481]  check_panic_on_warn+0x80/0xa0
[ 1938.676145][T18481]  ? __mutex_lock+0xf4/0xb40
[ 1938.680801][T18481]  end_report+0x66/0x110
[ 1938.685188][T18481]  kasan_report+0x118/0x140
[ 1938.689748][T18481]  ? __mutex_lock+0xf4/0xb40
[ 1938.694391][T18481]  __mutex_lock+0xf4/0xb40
[ 1938.699486][T18481]  ? ep_open+0x4a/0x260
[ 1938.703792][T18481]  ? apparmor_file_open+0x3c7/0x780
[ 1938.709066][T18481]  ? mutex_lock_nested+0x10/0x10
[ 1938.714073][T18481]  ? apparmor_inode_getattr+0x20/0x20
[ 1938.719612][T18481]  ep_open+0x4a/0x260
[ 1938.723700][T18481]  ? do_dentry_open+0x7d4/0x10b0
[ 1938.729295][T18481]  ? ep_ioctl+0x1b0/0x1b0
[ 1938.733676][T18481]  do_dentry_open+0x7dd/0x10b0
[ 1938.738760][T18481]  path_openat+0x2674/0x2f10
[ 1938.743585][T18481]  ? kasan_set_track+0x60/0x70
[ 1938.748576][T18481]  ? verify_lock_unused+0x140/0x140
[ 1938.753830][T18481]  ? do_sys_openat2+0xdd/0x4f0
[ 1938.758672][T18481]  ? do_filp_open+0x420/0x420
[ 1938.763395][T18481]  do_filp_open+0x1ee/0x420
[ 1938.768028][T18481]  ? vfs_tmpfile+0x490/0x490
[ 1938.772677][T18481]  ? _raw_spin_unlock+0x24/0x40
[ 1938.777594][T18481]  ? alloc_fd+0x590/0x640
[ 1938.781980][T18481]  do_sys_openat2+0x14b/0x4f0
[ 1938.786798][T18481]  ? do_sys_open+0xe0/0xe0
[ 1938.791264][T18481]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1938.797298][T18481]  ? lock_chain_count+0x20/0x20
[ 1938.802232][T18481]  __x64_sys_openat+0x135/0x160
[ 1938.807154][T18481]  do_syscall_64+0x4c/0xa0
[ 1938.811709][T18481]  ? clear_bhb_loop+0x60/0xb0
[ 1938.816441][T18481]  ? clear_bhb_loop+0x60/0xb0
[ 1938.821171][T18481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1938.827108][T18481] RIP: 0033:0x7f2652b9fb19
[ 1938.832166][T18481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1938.851917][T18481] RSP: 002b:00007f2653ad2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1938.860377][T18481] RAX: ffffffffffffffda RBX: 00007f2652e25fa0 RCX: 00007f2652b9fb19
[ 1938.868388][T18481] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c
[ 1938.876408][T18481] RBP: 00007f2652c37af8 R08: 0000000000000000 R09: 0000000000000000
[ 1938.884419][T18481] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[ 1938.892442][T18481] R13: 00007f2652e26038 R14: 00007f2652e25fa0 R15: 00007ffd85aab0c8
[ 1938.900482][T18481]  </TASK>
[ 1938.904166][T18481] Kernel Offset: disabled
[ 1938.908510][T18481] Rebooting in 86400 seconds..