last executing test programs:

16m22.814121878s ago: executing program 3 (id=53):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x40)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x0, r0}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x111, &(0x7f0000000680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4ce12d", 0xdb, 0x3a, 0x0, @loopback, @loopback, {[], @echo_reply={0x81, 0x0, 0x0, 0x809, 0x8, "e3045d2d4005f82df24a1eaeb9ac68571022430fc0ce894387d461e80ab46c17eb6d5f924db1006aeafb1195013156cc1783fa4f897deb508c821b1afd9982c07c059cc0f11557f36a78b94a8b0d7bcae166f4b7be146f4f9765d4713ec2cab7734dd9016e17ede22ddcb79241fc399186aeee1503be410f8f40256096f87bfc0bbe460bd1ea98f3d5c1b2551abda17a0b368511e16a2de6b0cc397932b96d5e241446ee8a7333842315bcd782c3068c1b58130da2228523d201d867e1451999748046fb79ddd572cb6030e3a467aba1a6d583"}}}}}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008010)
shutdown(0xffffffffffffffff, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="01012abd7000000000002b34"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x20028800)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

16m22.553349167s ago: executing program 3 (id=55):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5)

16m19.817333266s ago: executing program 3 (id=60):
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0xd)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={<r3=>0x0})
r4 = socket$nl_audit(0x10, 0x3, 0x9)
open(&(0x7f0000000000)='./file0\x00', 0x1e5240, 0x141)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r3, 0x3, r4, 0x3, 0x80000})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
syz_open_procfs(0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0)

16m17.387897958s ago: executing program 3 (id=67):
socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x4, 0x5, 0x9}]}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e32, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, 0x0}, 0x45)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94)
close(0x3)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
close(0x3)
socket$kcm(0xa, 0x5, 0x0)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c)

16m14.397550485s ago: executing program 3 (id=73):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@private1}, 0x0)
symlink(0x0, &(0x7f0000000200)='./file0\x00')
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
fcntl$notify(r4, 0x402, 0xfb0fca2daa2f4273)

16m11.968037877s ago: executing program 3 (id=75):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)

15m56.887721823s ago: executing program 32 (id=75):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)

15m56.855954329s ago: executing program 4 (id=92):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
eventfd2(0x1, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x80000)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc020000000000000000000000000000008004d52b0000000a00000000000000000000000000000000000000000000000200"/180], 0x108}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880)
socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
socket$inet6(0xa, 0x5, 0x10)

15m48.369694758s ago: executing program 4 (id=103):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820)

15m47.207034374s ago: executing program 4 (id=107):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f00000003c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x40003}}, 0x5c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

15m46.189067723s ago: executing program 4 (id=109):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x3, 0x9, 0x600, 0x8}, 0x20)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1004010, &(0x7f0000000500)=ANY=[], 0xfc, 0x6071, &(0x7f0000001f80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17f)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
write(0xffffffffffffffff, 0x0, 0x0)
readlink(0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
shutdown(r3, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)

15m44.132820466s ago: executing program 4 (id=112):
creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

15m41.575976002s ago: executing program 4 (id=117):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000240)="640f20c366b80f000f00d80f2094f20f019e02000000b9800000c00f3235000400000f30c4c199600fb8040000000f23d80f21f835400000900f23f866ba2000b022eef30f1efaa6", 0x48}], 0x1, 0x40, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r4 = openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000d00)='nf   ::7:\x00\x000.1 2\\00000000 ht', 0x1c)
r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r6 = openat(r5, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x80882, 0x10)
r7 = epoll_create(0x3fc)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000580)={0x2003})

15m40.098173627s ago: executing program 33 (id=117):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000240)="640f20c366b80f000f00d80f2094f20f019e02000000b9800000c00f3235000400000f30c4c199600fb8040000000f23d80f21f835400000900f23f866ba2000b022eef30f1efaa6", 0x48}], 0x1, 0x40, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r4 = openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000d00)='nf   ::7:\x00\x000.1 2\\00000000 ht', 0x1c)
r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r6 = openat(r5, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x80882, 0x10)
r7 = epoll_create(0x3fc)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000580)={0x2003})

15m28.253498201s ago: executing program 2 (id=142):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, 0x0)
userfaultfd(0x80001)
syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbd4bb00afb3ab99"], 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000780))
setresuid(0xee01, 0xee01, 0xee00)
mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x9, 0x8000000000000002, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x4, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)

15m24.268785163s ago: executing program 2 (id=146):
socket$inet_sctp(0x2, 0x1, 0x84)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYBLOB="010000000000000000001400", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

15m20.936099323s ago: executing program 2 (id=150):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040810)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$peekuser(0x3, r0, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r4, 0x9)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r5, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
readv(r3, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0xfdef}, {0x0}, {0x0}], 0x3)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)

15m19.563392758s ago: executing program 2 (id=151):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e17878fdc7861ded935ac1221c8b78e02fbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fad3da5a711d9a36cceaa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79239c93af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRES64=0x0], 0x1, 0x2ef, &(0x7f0000000c40)="$eJzs3c1qE1EUAOCTn6ZpEdu1uAi40U1R126CVBADhUoW6sZALUgrQrqJgpBXEEF8AFc+kgsfoquCi0gyY5Pmp5Uynant98G0Z+ZM79yZaefO4p7m9e13ezvvD3YHP79Fvd6IatQjjiLWoxyVSJSGX+p/41pM6ldOrMZyAACX3fZ2p7ko18+3K2SiOrOl2212lua+m7V/5NQpAAAAAAAAAAAAMjY7/z/6c+f/R0T55Pz/UdCfqgcAAC6/0+b/czV0u83OavL+NlWtaf4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUJxqDNYGg8G9G8nqMB4vtVgrun8AQPaOJsf74+X3IGX8B4AraP74P16K7h8AkL2J8T/ijPG/Ulw3AYAMPX/x8lmz1drcbjTqEYf9XrvXTr4n+SdPW5v3GyPrEVFOth72eu3Kcf5Bkm+MWx3ml2I1zT+cm6/F3TtJfph7vNWayi/HTj6XAAAAAAAAAAAAAAAAAAAAAAq3MSrjL0Uk9f2pcX3/xsbW119vj+v/J/JJlP5/gHJM1fd/+l6NW9Vkrbzw6MsZnw0AAAAAAAAAAAAAAAAAAAD8nw4+fNzr7O+/6eYTlCIi25YrETEKqumWSuaHmAguruVhUI9RUIqZVC0izt3y8KLPTw0z5+3z5ySIOM+PP3oVcebOpb2VmEmt5P9Le7HBSvqXmMOxvuz+w+2+WY/RPV30xKjl93ACAAAAAAAAAAAAAAAAAIBrZlz9W3RPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA448//Xxwspfuets9pQcGnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwTfwIAAP///HZwig==")
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x480fc)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd2)
read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000006c0)='.\x00', 0x40001a2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1b6)
r3 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)

15m18.091582292s ago: executing program 2 (id=153):
r0 = socket$tipc(0x1e, 0x5, 0x0)
syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x4080)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x30c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfb2, 0x2, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)

15m17.176169173s ago: executing program 2 (id=156):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
readv(r3, &(0x7f0000000040)=[{0x0}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x12, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)

15m16.033886855s ago: executing program 34 (id=156):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
readv(r3, &(0x7f0000000040)=[{0x0}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x12, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)

14m57.702098256s ago: executing program 1 (id=178):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1)
ptrace$setsig(0x4203, r0, 0xe, 0x0)
r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x8)
r4 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020)

14m53.460001466s ago: executing program 1 (id=179):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
r3 = socket(0x10, 0x3, 0x0)
recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r4, 0x0)
ftruncate(r4, 0x0)

14m49.685299848s ago: executing program 1 (id=183):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
inotify_init1(0x180c00)
write$cgroup_devices(r1, 0x0, 0x9)

14m47.881485304s ago: executing program 1 (id=185):
socket$tipc(0x1e, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0))
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

14m47.559444314s ago: executing program 1 (id=186):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r2, &(0x7f0000000000), 0x0)
msgsnd(0x0, 0x0, 0x2000, 0x800)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000400)={0x80600, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

14m47.085253022s ago: executing program 1 (id=187):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10)
write(r0, &(0x7f0000000280)='1', 0x1)

14m31.7785802s ago: executing program 35 (id=187):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10)
write(r0, &(0x7f0000000280)='1', 0x1)

6m12.546834634s ago: executing program 7 (id=786):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
sched_setparam(r0, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r3, 0x2007ffc)
sendfile(r3, r3, 0x0, 0x7a680000)

6m11.085491828s ago: executing program 7 (id=788):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)

6m8.345239844s ago: executing program 7 (id=793):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

6m6.261298389s ago: executing program 7 (id=797):
signalfd(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
rmdir(&(0x7f0000000040)='./bus\x00')
socket$alg(0x26, 0x5, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x2d, 0x1001, r3, 0x0)
fanotify_mark(r4, 0x22, 0x40001017, r3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

6m3.644181388s ago: executing program 7 (id=804):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008885, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)

6m0.673619899s ago: executing program 7 (id=809):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

5m45.252059252s ago: executing program 36 (id=809):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

23.042957626s ago: executing program 9 (id=1376):
socket$l2tp6(0xa, 0x2, 0x73)
openat$null(0xffffffffffffff9c, 0x0, 0x109000, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x23, @mcast1, 0x2002}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
r2 = msgget$private(0x0, 0x208)
msgsnd(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000059d82852d447f0ddf950a1e4a0f4acb22fe2d4eac64fe049fcae584be9e22b44e47c7950411813eecd41d23247854b4fb17b831c907756df987e3e650fe93b5c7e80e3c17df49a742eabe607e55c4c14b299b10a92bae7139f9a09094aec3c2ad2b7b0b3dbc641ae73315c13371f23bde9cab1fdf43b3243928b9e1e4db7214deaa9d32dd0849331695ce01f5ec7733a17b437b7fa75628f60fdf5577af6bc6b86452628827dcf83a19c3fb4156e6aa8ce62e88fe7e6aeda143ac054467bbecf9491f7232c11fd1d9022ac3ab75092dd2f3437f1863105e2aee10a34bac0e2f68391ae7002657d729fdd81a1238f73c4e2b3"], 0x59, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgrcv(r2, &(0x7f00000001c0)={0x0, ""/18}, 0x1a, 0x1, 0x0)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000000)=""/1)
r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})

20.247655435s ago: executing program 9 (id=1382):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

18.557699165s ago: executing program 9 (id=1384):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
sched_setparam(r0, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r3, 0x2007ffc)
sendfile(r3, r3, 0x0, 0x7a680000)

18.447722402s ago: executing program 5 (id=1385):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x53b, 0xfffffffd, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4060040}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x75751a4fd574bbc2}, 0x80)
syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r3)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r8 = fcntl$dupfd(r7, 0x406, r7)
write$binfmt_elf64(r8, 0x0, 0xfffffdcf)

14.702754403s ago: executing program 0 (id=1391):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000500)={0x3, 0x0, '\x00', {0x0, @reserved}})
write(0xffffffffffffffff, &(0x7f0000000400)='10 1', 0x4)
write(0xffffffffffffffff, &(0x7f0000000600)='1', 0x1)
close(0xffffffffffffffff)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x14)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000001c0)={0x77c, 0x8001, 0xfffffffd}, 0xc)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4, &(0x7f0000000140), 0x0, 0x9, 0x3, 0xc0, 0x2, 0x28})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES8=r3], 0x24}}, 0x14040)

13.575760475s ago: executing program 6 (id=1392):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10)
listen(r0, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000000c0)="42ec6c47ba0e0db8912dde8ff2d341c9ca619478532a41944e024588ab567f8770fbd97d", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="7b8a4c3a1c20ac1600354b0636b3fcac9e125fcd0555069ade3c2dd6d57acab209ac21f5164f885c4e7634e18bef76ecc9d140d8fb9af430", 0x38}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48045)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000040)={0x1, 0x1})
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0)
utimensat(r5, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24080080)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840)
close_range(r0, 0xffffffffffffffff, 0x0)

13.431023785s ago: executing program 0 (id=1393):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getresuid(0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

12.268065592s ago: executing program 0 (id=1394):
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1})
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mq_open(&(0x7f0000000000)='R}\x00', 0x40, 0x60, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in=@local}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xc8)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000380)={0x8, 0x9, {}, {0xffffffffffffffff}, 0xff, 0x2fa})
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@local, @empty}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2], 0x34}}, 0x14)
lstat(&(0x7f0000002b80)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', &(0x7f0000002c00))
write(r0, &(0x7f0000000640)='1', 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

12.229854106s ago: executing program 5 (id=1395):
syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0x7f00, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x3, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[], 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000028c0))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
prctl$PR_SCHED_CORE(0x4d, 0x4, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000400)='ubifs\x00', 0x800002, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000500)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x2, 0x8, 'syz1\x00'})

11.959883501s ago: executing program 8 (id=1396):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)

11.923080716s ago: executing program 6 (id=1397):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000240)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x1)

10.883731653s ago: executing program 8 (id=1398):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x12b282, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(0x0, 0x4, 0x901)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)

10.811467572s ago: executing program 6 (id=1399):
socket$inet_sctp(0x2, 0x1, 0x84)
close(0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_MCE_KILL(0x42, 0x1, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x1, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x0, &(0x7f00000001c0)}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x180}], 0x1, 0x0)

9.861274807s ago: executing program 8 (id=1400):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0)
write(r3, &(0x7f0000001640)="8b", 0x11)

9.639597143s ago: executing program 8 (id=1401):
socket$inet(0x2, 0x1, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
recvmmsg(r6, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)='9', 0x1}], 0x1)
ioctl$sock_ifreq(r1, 0x89b1, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x200})
socket$can_raw(0x1d, 0x3, 0x1)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0)

8.544889527s ago: executing program 6 (id=1402):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)

8.327772945s ago: executing program 9 (id=1403):
openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r5, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x1c3425, 0x0)

8.327571035s ago: executing program 5 (id=1404):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)

7.969083132s ago: executing program 8 (id=1405):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getresuid(0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

7.491786019s ago: executing program 6 (id=1406):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
sched_setparam(r0, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r3, 0x2007ffc)
sendfile(r3, r3, 0x0, 0x7a680000)

6.335955667s ago: executing program 8 (id=1407):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x4, 0x3, 0x40, 0x6, '\x00', 0x8})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
unshare(0x28000600)
unshare(0x28000600)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1a, {[@global=@item_012={0x1, 0x1, 0x6, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @local=@item_4={0x3, 0x2, 0x8, "72fc375a"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)

5.552587213s ago: executing program 5 (id=1408):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)

4.937148031s ago: executing program 9 (id=1409):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f00000043c0)=ANY=[], 0x2, 0x1a1, &(0x7f0000000000)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r5, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x40006)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84811}, 0x80)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
fspick(0xffffffffffffff9c, 0x0, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x166)
utimensat(r6, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"})

4.843824082s ago: executing program 0 (id=1410):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x12b282, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(0x0, 0x4, 0x901)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)

3.85443465s ago: executing program 5 (id=1411):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)='grpquota')
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r3 = gettid()
tkill(r3, 0x16)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f00000001c0)={0x2, 0x100, 0x3, {0x4, 0xfffffffe, 0x6, 0x870}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
dup(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

3.50017099s ago: executing program 0 (id=1412):
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getpriority(0x2, 0x0)
socket$kcm(0xf, 0x3, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_NH_ID={0x8, 0x1e, 0x8020}]}, 0x2c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
r6 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r6, 0x0, 0x0)

1.584021014s ago: executing program 5 (id=1413):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a6, &(0x7f0000000200)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
clock_nanosleep(0x4, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
set_mempolicy(0x1, 0x0, 0x3)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x19)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=<r3=>0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pwritev(r4, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000740)}], 0x2, 0x1, 0x407fffe)
timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd3a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2900}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000)

1.420015964s ago: executing program 9 (id=1414):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
sched_setparam(r0, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r3, 0x2007ffc)
sendfile(r3, r3, 0x0, 0x7a680000)

1.305307585s ago: executing program 0 (id=1415):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
unlink(&(0x7f0000000040)='./file0/file1\x00')

0s ago: executing program 6 (id=1416):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80022000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020000}, 0x24008000)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e6062, &(0x7f0000000000)={[{@gid}]})
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20060810}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002c40), 0x800, 0x0)
read$FUSE(r5, &(0x7f0000002f40)={0x2020}, 0x2020)
ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000008c0)={0x2, 0x0, 0x13, 0xe, 0x4f, 0x0})

kernel console output (not intermixed with test programs):

tooth: hci4: command 0x0419 tx timeout
[  582.597964][ T4761] rpcbind: server 127.0.0.1 not responding, timed out
[  582.928175][   T47] bond0 (unregistering): Released all slaves
[  583.255806][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  583.266021][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  583.279108][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  583.294209][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  583.605101][ T7751] syzkaller0: renamed from gre1
[  584.705290][ T7716] wlan0 speed is unknown, defaulting to 1000
[  585.594712][ T7796] null_blk: disk rnullb0 created
[  587.364033][ T7442] netdevsim netdevsim8 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.530117][ T7442] netdevsim netdevsim8 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.577428][ T7442] netdevsim netdevsim8 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.983004][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  589.990792][ T7828] batman_adv: batadv0: Removing interface: batadv_slave_0
[  590.051226][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  590.058865][ T7828] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.456393][ T7442] netdevsim netdevsim8 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.345369][ T7845] Cannot find add_set index 0 as target
[  593.369151][ T7716] chnl_net:caif_netlink_parms(): no params data found
[  595.039514][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.075102][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.154437][ T7716] device bridge_slave_0 entered promiscuous mode
[  595.165756][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.173214][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.206341][ T7716] device bridge_slave_1 entered promiscuous mode
[  595.553245][ T7716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  596.750974][ T7716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  596.923613][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  596.936271][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  596.952777][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  596.962631][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  596.971887][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  596.980006][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  597.068677][ T7716] team0: Port device team_slave_0 added
[  597.326731][ T7887] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  598.088887][ T7887] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  598.108340][ T7887] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  598.170702][ T7887] Error parsing options; rc = [-22]
[  598.179824][ T7716] team0: Port device team_slave_1 added
[  599.754696][ T4290] Bluetooth: hci0: command 0x0409 tx timeout
[  599.834766][ T7890] wlan0 speed is unknown, defaulting to 1000
[  600.052748][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.087420][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.160528][ T7716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.374764][ T7917] futex_wake_op: syz.7.573 tries to shift op by 144; fix this program
[  600.416251][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.423276][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.680490][ T7716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  601.429451][ T7716] device hsr_slave_0 entered promiscuous mode
[  601.495398][ T7716] device hsr_slave_1 entered promiscuous mode
[  601.535380][ T7716] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  601.543010][ T7716] Cannot create hsr debugfs directory
[  601.739892][   T47] netdevsim netdevsim5 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  601.795409][ T4290] Bluetooth: hci0: command 0x041b tx timeout
[  601.821990][   T47] netdevsim netdevsim5 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  601.885326][   T47] netdevsim netdevsim5 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  601.898153][ T7890] chnl_net:caif_netlink_parms(): no params data found
[  601.935535][   T47] netdevsim netdevsim5 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  602.072428][ T7716] netdevsim netdevsim5 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.156644][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.163797][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.181739][ T7890] device bridge_slave_0 entered promiscuous mode
[  602.257016][ T7716] netdevsim netdevsim5 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.315712][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.322916][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.331687][ T7890] device bridge_slave_1 entered promiscuous mode
[  602.447069][ T7716] netdevsim netdevsim5 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.907596][ T7890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  603.007317][ T7716] netdevsim netdevsim5 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.260716][ T7890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.473107][ T7890] team0: Port device team_slave_0 added
[  603.656911][ T7890] team0: Port device team_slave_1 added
[  603.875220][ T4290] Bluetooth: hci0: command 0x040f tx timeout
[  604.146016][ T7890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.153025][ T7890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.185931][ T7890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.202860][ T7890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.211091][ T7890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.237709][ T7890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.669117][ T7890] device hsr_slave_0 entered promiscuous mode
[  604.715304][ T7890] device hsr_slave_1 entered promiscuous mode
[  604.755171][ T7890] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  604.762834][ T7890] Cannot create hsr debugfs directory
[  605.179613][ T7716] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  605.400544][   T47] device hsr_slave_0 left promiscuous mode
[  605.485066][   T47] device hsr_slave_1 left promiscuous mode
[  605.565176][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[  605.610891][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[  605.665646][   T47] device bridge_slave_1 left promiscuous mode
[  605.671889][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.755853][   T47] device bridge_slave_0 left promiscuous mode
[  605.762365][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.955621][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[  606.846361][   T47] team0 (unregistering): Port device team_slave_1 removed
[  606.997064][   T47] team0 (unregistering): Port device team_slave_0 removed
[  607.285668][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  607.615381][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  608.818838][   T47] bond0 (unregistering): Released all slaves
[  609.205027][ T7716] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  609.257952][ T7716] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  609.339858][ T7716] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  609.618727][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0
[  609.636985][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  609.648532][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  609.778453][ T7716] 8021q: adding VLAN 0 to HW filter on device team0
[  609.796828][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  609.805978][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  609.814558][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.821743][ T4761] bridge0: port 1(bridge_slave_0) entered forwarding state
[  609.975795][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  609.994185][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  610.003787][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  610.013431][ T4761] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.020626][ T4761] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.032519][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  610.041833][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  610.201968][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  610.214111][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  610.223384][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  610.235924][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  610.244578][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  610.262087][ T7716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  610.273660][ T7716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  610.288521][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  610.299094][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  610.308818][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  610.321374][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  610.331887][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  610.619825][ T7890] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  610.674300][ T7890] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  610.755425][ T7890] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  610.797542][ T7890] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  610.850854][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  610.862477][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  610.898326][ T7716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.100772][ T7890] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.144991][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  611.171116][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  611.195268][ T7890] 8021q: adding VLAN 0 to HW filter on device team0
[  611.208372][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  611.221263][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  611.230496][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.237689][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.258094][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  611.275765][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  611.295328][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  611.316720][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.323872][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.337595][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  611.475478][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  611.484864][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  611.497373][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  611.507079][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  611.631544][ T7890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  611.642807][ T7890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  611.659821][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  611.670690][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  611.679512][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  611.690373][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  611.699755][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  611.708418][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  611.717704][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  612.236104][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  612.250648][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  612.272694][ T7716] device veth0_vlan entered promiscuous mode
[  612.405406][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  612.416489][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  612.431035][ T7716] device veth1_vlan entered promiscuous mode
[  612.585321][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  612.593249][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  612.601848][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  612.782251][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  612.790412][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  612.799274][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  612.809923][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  612.987852][ T7716] device veth0_macvtap entered promiscuous mode
[  613.004155][ T7890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.021958][ T7716] device veth1_macvtap entered promiscuous mode
[  613.194871][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.206298][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.217634][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.228867][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.241157][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_0
[  613.253093][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  613.268513][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  613.280419][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  613.292954][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  613.435209][   T47] device hsr_slave_0 left promiscuous mode
[  613.525038][   T47] device hsr_slave_1 left promiscuous mode
[  613.621414][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[  613.666663][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[  613.735988][   T47] device bridge_slave_1 left promiscuous mode
[  613.742244][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.845643][   T47] device bridge_slave_0 left promiscuous mode
[  613.852072][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.679554][   T47] team0 (unregistering): Port device team_slave_1 removed
[  614.847744][   T47] team0 (unregistering): Port device team_slave_0 removed
[  614.985668][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  615.215982][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  615.592125][   T47] bond0 (unregistering): Released all slaves
[  615.688174][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.707431][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.718094][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.729167][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.740891][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.760868][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  615.770606][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  615.793267][ T7716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  615.825064][ T7716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.833958][ T7716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.843149][ T7716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.052168][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  616.065679][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  616.096613][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.104523][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.124354][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  616.165678][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  616.175546][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  616.184300][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  616.195956][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  616.204311][ T7890] device veth0_vlan entered promiscuous mode
[  616.227887][ T7890] device veth1_vlan entered promiscuous mode
[  616.263341][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  616.271651][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.283298][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  616.292455][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  616.300643][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.304161][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  616.318976][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  616.332871][ T7890] device veth0_macvtap entered promiscuous mode
[  616.359541][ T7890] device veth1_macvtap entered promiscuous mode
[  616.391557][ T7890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  616.405517][ T7890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.415963][ T7890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  616.426835][ T7890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.437664][ T7890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  616.448611][ T7890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.460547][ T7890] batman_adv: batadv0: Interface activated: batadv_slave_0
[  616.500377][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  616.563764][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  617.585569][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  617.594842][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  617.611353][ T7890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.632743][ T7890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.653566][ T7890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.683671][ T7890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.704178][ T7890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.735038][ T7890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.756483][ T7985] futex_wake_op: syz.6.588 tries to shift op by 144; fix this program
[  617.818919][ T7890] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.836116][ T7986] fuse: Unknown parameter 'åôK—ðX;3„®¤uè"Í#v”~ó'
[  618.715204][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  618.724188][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  618.777286][ T7890] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.786543][ T7890] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.796665][ T7890] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  618.805708][ T7890] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  620.273710][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  620.295365][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.334273][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.406503][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  620.489602][ T4759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.518342][ T4759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.588999][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  621.041643][ T8010] loop5: detected capacity change from 0 to 512
[  621.100169][ T8010] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  621.120920][ T8010] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.582: invalid indirect mapped block 256 (level 1)
[  621.954033][ T8010] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.582: invalid indirect mapped block 2683928664 (level 1)
[  622.044750][ T8018] 9pnet_virtio: no channels available for device 127.0.0.1
[  622.676185][ T8010] EXT4-fs (loop5): 1 truncate cleaned up
[  622.700502][ T8010] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  623.795651][   T26] audit: type=1800 audit(2000000168.700:15): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.584" name="idVendor" dev="configfs" ino=57048 res=0 errno=0
[  623.897676][ T8029] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.582: Invalid block bitmap block 3 in block_group 0
[  624.200029][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.206465][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.317059][   T26] audit: type=1800 audit(2000000168.740:16): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.584" name="idProduct" dev="configfs" ino=56234 res=0 errno=0
[  624.360174][ T7716] EXT4-fs (loop5): unmounting filesystem.
[  624.655403][ T8034] fuse: Bad value for 'fd'
[  628.956948][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  628.964641][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_0
[  629.042931][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.050675][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.163711][ T8089] Cannot find add_set index 0 as target
[  636.198493][ T8093] xt_hashlimit: max too large, truncated to 1048576
[  636.348984][ T8099] loop8: detected capacity change from 0 to 512
[  636.676418][ T8099] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  636.702546][ T8099] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.601: invalid indirect mapped block 256 (level 1)
[  637.133379][ T8108] IPVS: length: 103 != 8
[  637.147366][ T8099] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.601: invalid indirect mapped block 2683928664 (level 1)
[  637.165884][ T8099] EXT4-fs (loop8): 1 truncate cleaned up
[  637.186263][ T8099] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  637.607696][ T8111] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:477: comm syz.8.601: Invalid block bitmap block 3 in block_group 0
[  638.068251][ T8114] loop5: detected capacity change from 0 to 256
[  638.392369][ T8114] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  638.424743][   T26] audit: type=1800 audit(2000000183.320:17): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.608" name="file1" dev="loop5" ino=1048621 res=0 errno=0
[  638.712453][ T8114] syz.5.608: attempt to access beyond end of device
[  638.712453][ T8114] loop5: rw=0, sector=184, nr_sectors = 120 limit=256
[  639.528563][ T7890] EXT4-fs (loop8): unmounting filesystem.
[  641.632398][ T8143] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  643.828102][ T8151] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  643.847514][ T8151] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  644.538874][ T8151] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  645.492422][ T8151] Error parsing options; rc = [-22]
[  645.638980][ T8168] fuse: Bad value for 'fd'
[  645.817975][ T8174] loop8: detected capacity change from 0 to 512
[  645.847934][ T8174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  645.880328][ T8174] System zones: 1-12
[  646.012001][ T8174] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.622: missing EA_INODE flag
[  646.028132][ T8172] loop6: detected capacity change from 0 to 2048
[  646.141682][ T8174] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.622: error while reading EA inode 12 err=-117
[  646.172213][ T8172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  646.371010][ T8174] EXT4-fs (loop8): 1 orphan inode deleted
[  646.398264][ T8174] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  649.648519][ T8206] futex_wake_op: syz.6.627 tries to shift op by 144; fix this program
[  649.688963][ T8206] loop6: detected capacity change from 0 to 256
[  649.864424][ T8206] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  650.268655][ T7890] EXT4-fs (loop8): unmounting filesystem.
[  650.622247][ T8218] fuse: Bad value for 'fd'
[  650.755956][ T8221] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  651.474321][ T8215] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  651.482526][ T8215] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  651.491414][ T8215] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  651.501534][ T8215] Error parsing options; rc = [-22]
[  653.428610][   T26] audit: type=1800 audit(2000000198.330:18): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.638" name="ipv4_address" dev="configfs" ino=57259 res=0 errno=0
[  653.540769][   T26] audit: type=1800 audit(2000000198.380:19): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.638" name="ipv4_port" dev="configfs" ino=57260 res=0 errno=0
[  653.662387][   T26] audit: type=1800 audit(2000000198.380:20): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.638" name="num" dev="configfs" ino=57261 res=0 errno=0
[  653.808130][   T26] audit: type=1800 audit(2000000198.380:21): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.638" name="local" dev="configfs" ino=57262 res=0 errno=0
[  653.868549][   T26] audit: type=1800 audit(2000000198.380:22): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.638" name="ipv4_address" dev="configfs" ino=57264 res=0 errno=0
[  654.054834][ T8259] futex_wake_op: syz.7.641 tries to shift op by 144; fix this program
[  654.924075][ T5381] wlan0 speed is unknown, defaulting to 1000
[  657.230754][ T8309] loop6: detected capacity change from 0 to 512
[  657.300341][ T8309] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  657.313742][ T8309] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.651: invalid indirect mapped block 256 (level 1)
[  657.333112][ T8309] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.651: invalid indirect mapped block 2683928664 (level 1)
[  657.348983][ T8309] EXT4-fs (loop6): 1 truncate cleaned up
[  657.354715][ T8309] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  657.555846][ T8313] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  657.679072][ T8315] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.651: Invalid block bitmap block 3 in block_group 0
[  658.239203][ T5460] EXT4-fs (loop6): unmounting filesystem.
[  660.090562][ T8327] futex_wake_op: syz.6.653 tries to shift op by 144; fix this program
[  665.474826][ T8387] futex_wake_op: syz.8.662 tries to shift op by 144; fix this program
[  665.509839][ T8387] loop8: detected capacity change from 0 to 256
[  666.321663][ T8394] futex_wake_op: syz.7.665 tries to shift op by 144; fix this program
[  666.555268][ T8387] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  666.671884][   T26] audit: type=1800 audit(2000000211.570:23): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.662" name="file1" dev="loop8" ino=1048622 res=0 errno=0
[  668.123826][ T4290] Bluetooth: hci0: hardware error 0x04
[  668.159126][ T8422] loop5: detected capacity change from 0 to 128
[  668.244854][ T8422] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  668.301928][ T8422] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  668.376367][ T8424] tipc: Started in network mode
[  668.381334][ T8424] tipc: Node identity 4, cluster identity 4711
[  668.447228][ T8424] tipc: Node number set to 4
[  668.492918][ T8431] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  668.585694][ T8434] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  669.030145][ T8424] tipc: Resetting bearer <eth:syz_tun>
[  669.310067][ T7716] EXT4-fs (loop5): unmounting filesystem.
[  670.488352][ T8424] tipc: Disabling bearer <eth:syz_tun>
[  670.515140][ T4290] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  671.743504][ T8460] futex_wake_op: syz.5.677 tries to shift op by 144; fix this program
[  671.809479][ T8460] loop5: detected capacity change from 0 to 256
[  672.192180][ T8460] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  672.245366][   T26] audit: type=1800 audit(2000000217.120:24): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.677" name="file1" dev="loop5" ino=1048623 res=0 errno=0
[  672.621597][ T8465] futex_wake_op: syz.6.679 tries to shift op by 144; fix this program
[  675.505086][ T4359] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  675.750490][ T4359] usb 9-1: no configurations
[  675.758428][ T4359] usb 9-1: can't read configurations, error -22
[  675.940032][ T8516] loop6: detected capacity change from 0 to 128
[  676.012661][ T8516] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  676.052151][ T8521] futex_wake_op: syz.0.696 tries to shift op by 144; fix this program
[  676.113498][ T8516] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  678.180018][ T8542] loop8: detected capacity change from 0 to 164
[  680.050296][ T5460] EXT4-fs (loop6): unmounting filesystem.
[  681.127506][ T8559] fuse: Bad value for 'fd'
[  681.484974][ T8561] loop6: detected capacity change from 0 to 32768
[  682.521707][ T8561] XFS (loop6): Mounting V5 Filesystem
[  683.574831][ T8561] XFS (loop6): Ending clean mount
[  684.666211][ T5460] XFS (loop6): Unmounting Filesystem
[  686.062644][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.161102][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  688.109685][ T8634] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  692.996775][ T8663] futex_wake_op: syz.5.716 tries to shift op by 144; fix this program
[  693.890814][ T8668] loop5: detected capacity change from 0 to 2048
[  693.970560][ T8668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  695.786479][ T8683] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  696.404191][ T8694] loop8: detected capacity change from 0 to 32768
[  696.588312][ T8694] XFS (loop8): Mounting V5 Filesystem
[  697.415967][ T8677] overlayfs: failed to clone upperpath
[  698.135653][ T4290] Bluetooth: hci4: command 0x0406 tx timeout
[  698.245131][ T8694] XFS (loop8): Ending clean mount
[  698.271465][ T8694] XFS (loop8): Quotacheck needed: Please wait.
[  698.642905][ T8694] XFS (loop8): Quotacheck: Done.
[  700.323610][ T7890] XFS (loop8): Unmounting Filesystem
[  700.569071][ T8743] futex_wake_op: syz.5.730 tries to shift op by 144; fix this program
[  703.012082][ T8762] loop5: detected capacity change from 0 to 128
[  703.109443][ T8764] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  704.080295][ T4747] kworker/u4:15: attempt to access beyond end of device
[  704.080295][ T4747] loop5: rw=1, sector=145, nr_sectors = 6 limit=128
[  704.324514][ T8780] netlink: 'syz.5.741': attribute type 2 has an invalid length.
[  704.413247][ T8783] fuse: Bad value for 'fd'
[  705.025771][ T8795] futex_wake_op: syz.6.742 tries to shift op by 144; fix this program
[  705.054737][ T8795] loop6: detected capacity change from 0 to 256
[  705.097709][ T8795] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  705.142535][   T26] audit: type=1800 audit(2000000250.040:25): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.742" name="file1" dev="loop6" ino=1048625 res=0 errno=0
[  705.179600][ T8795] syz.6.742: attempt to access beyond end of device
[  705.179600][ T8795] loop6: rw=0, sector=184, nr_sectors = 120 limit=256
[  706.031817][ T8798] futex_wake_op: syz.7.743 tries to shift op by 144; fix this program
[  708.068374][ T8818] loop6: detected capacity change from 0 to 256
[  708.324627][ T8824] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  709.698358][ T8828] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  712.473520][ T8841] futex_wake_op: syz.5.753 tries to shift op by 144; fix this program
[  712.900264][ T8853] loop8: detected capacity change from 0 to 4096
[  714.489885][ T8853] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  715.062960][ T8864] futex_wake_op: syz.0.755 tries to shift op by 144; fix this program
[  715.589875][ T7890] EXT4-fs (loop8): unmounting filesystem.
[  716.720804][ T8876] futex_wake_op: syz.8.759 tries to shift op by 144; fix this program
[  718.131208][ T8890] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  720.317778][ T8908] futex_wake_op: syz.8.768 tries to shift op by 144; fix this program
[  722.208569][ T8918] futex_wake_op: syz.8.771 tries to shift op by 144; fix this program
[  722.237066][ T8918] loop8: detected capacity change from 0 to 256
[  722.252072][ T8922] futex_wake_op: syz.6.772 tries to shift op by 144; fix this program
[  722.286777][ T8919] loop6: detected capacity change from 0 to 256
[  722.966410][ T8919] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  722.979268][ T8918] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  723.002124][   T26] audit: type=1800 audit(2000000267.900:26): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.771" name="file1" dev="loop8" ino=1048627 res=0 errno=0
[  723.034757][ T8918] syz.8.771: attempt to access beyond end of device
[  723.034757][ T8918] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  723.038862][ T8917] syz.6.772: attempt to access beyond end of device
[  723.038862][ T8917] loop6: rw=0, sector=184, nr_sectors = 120 limit=256
[  723.063464][   T26] audit: type=1800 audit(2000000267.900:27): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.772" name="file1" dev="loop6" ino=1048628 res=0 errno=0
[  725.174842][ T8957] loop8: detected capacity change from 0 to 2048
[  725.211636][ T8957] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  726.177673][ T8973] futex_wake_op: syz.0.782 tries to shift op by 144; fix this program
[  727.588980][ T8983] futex_wake_op: syz.7.786 tries to shift op by 144; fix this program
[  728.340791][ T8992] futex_wake_op: syz.0.787 tries to shift op by 144; fix this program
[  728.969621][ T9000] netlink: 36 bytes leftover after parsing attributes in process `syz.8.789'.
[  728.980513][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.8.789'.
[  728.990040][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.789'.
[  728.999048][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.789'.
[  732.105612][ T9015] loop8: detected capacity change from 0 to 128
[  732.185120][ T9015] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  732.220089][ T9015] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  732.418620][ T9015] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  733.047924][ T7890] EXT4-fs (loop8): unmounting filesystem.
[  735.725837][ T9057] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  736.046982][ T9064] XFS (loop0): Invalid device [./loop0], error=-16
[  739.039521][ T9083] futex_wake_op: syz.0.808 tries to shift op by 144; fix this program
[  739.565357][ T9097] futex_wake_op: syz.0.811 tries to shift op by 144; fix this program
[  741.721615][ T9114] futex_wake_op: syz.0.823 tries to shift op by 144; fix this program
[  745.661478][ T9159] loop6: detected capacity change from 0 to 1024
[  747.078544][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.087459][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  747.893844][ T9182] No such timeout policy "syz1"
[  749.098728][ T9190] futex_wake_op: syz.6.826 tries to shift op by 144; fix this program
[  749.125020][ T9190] loop6: detected capacity change from 0 to 256
[  749.664402][ T9190] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  749.689702][   T26] audit: type=1800 audit(2000000294.590:28): pid=9189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.826" name="file1" dev="loop6" ino=1048629 res=0 errno=0
[  749.714257][ T9189] syz.6.826: attempt to access beyond end of device
[  749.714257][ T9189] loop6: rw=0, sector=184, nr_sectors = 120 limit=256
[  751.526454][ T9208] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  751.546847][ T9208] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  751.586780][ T9214] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6)
[  751.593816][ T9214] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  751.662808][ T9214] vhci_hcd vhci_hcd.0: Device attached
[  751.770562][ T9210] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  751.777141][ T9210] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  751.841139][ T9226] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.895064][ T5381] usb 45-2: new high-speed USB device number 2 using vhci_hcd
[  752.300320][ T9218] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9)
[  752.306919][ T9218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  752.483463][ T9214] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(8)
[  752.490069][ T9214] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  752.562759][ T9210] vhci_hcd vhci_hcd.0: Device attached
[  752.596550][ T9218] vhci_hcd vhci_hcd.0: Device attached
[  752.615057][ T9214] vhci_hcd vhci_hcd.0: Device attached
[  752.627081][ T9233] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14)
[  752.633764][ T9233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  753.276065][ T9233] vhci_hcd vhci_hcd.0: Device attached
[  753.758638][ T9243] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(5)
[  753.765247][ T9243] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  753.845179][ T9210] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(16)
[  753.851863][ T9210] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  753.867302][ T9243] vhci_hcd vhci_hcd.0: Device attached
[  753.892634][ T9214] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  754.157948][ T9210] vhci_hcd vhci_hcd.0: Device attached
[  754.285358][ T9248] vhci_hcd: connection closed
[  754.285666][ T9224] vhci_hcd: connection closed
[  754.287093][ T9237] vhci_hcd: connection closed
[  754.296479][ T9244] vhci_hcd: connection closed
[  754.296744][ T9219] vhci_hcd: connection closed
[  754.306778][ T9215] vhci_hcd: connection reset by peer
[  754.319654][ T9211] vhci_hcd: connection closed
[  754.332142][ T4753] vhci_hcd: stop threads
[  754.349948][ T4753] vhci_hcd: release socket
[  754.357611][ T4753] vhci_hcd: disconnect device
[  754.362796][ T4753] vhci_hcd: stop threads
[  754.369045][ T4753] vhci_hcd: release socket
[  754.373626][ T4753] vhci_hcd: disconnect device
[  754.379021][ T4753] vhci_hcd: stop threads
[  754.383324][ T4753] vhci_hcd: release socket
[  754.396681][ T4753] vhci_hcd: disconnect device
[  754.439661][ T4753] vhci_hcd: stop threads
[  754.455630][ T9257] futex_wake_op: syz.5.838 tries to shift op by 144; fix this program
[  754.544989][ T4753] vhci_hcd: release socket
[  754.592213][ T4753] vhci_hcd: disconnect device
[  755.303183][ T4753] vhci_hcd: stop threads
[  755.365030][ T4753] vhci_hcd: release socket
[  755.391575][ T4753] vhci_hcd: disconnect device
[  755.411780][ T4753] vhci_hcd: stop threads
[  755.424243][ T4753] vhci_hcd: release socket
[  755.491582][ T4753] vhci_hcd: disconnect device
[  755.528301][ T4753] vhci_hcd: stop threads
[  755.552694][ T4753] vhci_hcd: release socket
[  755.571249][ T4753] vhci_hcd: disconnect device
[  755.600012][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  755.610927][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  755.621346][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3804 instead
[  755.631832][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xceb5 instead
[  755.642810][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  755.653371][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  755.663797][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  755.674185][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  755.684574][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  755.695022][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  755.705500][ T9260] jffs2: Further such events for this erase block will not be printed
[  755.714018][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  755.724428][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  755.734818][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3804 instead
[  755.745583][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xceb5 instead
[  755.755969][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  755.766346][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  755.776724][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  755.787127][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  755.797592][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  755.808017][ T9260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  755.818396][ T9260] jffs2: Further such events for this erase block will not be printed
[  755.826955][ T9260] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  755.836276][ T9260] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[  757.221186][ T9271] loop8: detected capacity change from 0 to 256
[  758.682670][ T9270] futex_wake_op: syz.8.842 tries to shift op by 144; fix this program
[  758.696254][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  758.750188][ T9271] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  758.777356][   T26] audit: type=1800 audit(2000000303.680:29): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.842" name="file1" dev="loop8" ino=1048630 res=0 errno=0
[  758.800453][ T9269] syz.8.842: attempt to access beyond end of device
[  758.800453][ T9269] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  758.814410][ T5381] vhci_hcd: vhci_device speed not set
[  762.709658][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  762.728511][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  762.736995][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  762.746382][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  762.755352][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  762.762836][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  763.910201][ T9368] futex_wake_op: syz.8.850 tries to shift op by 144; fix this program
[  763.919285][ T9370] loop8: detected capacity change from 0 to 256
[  764.899983][ T8999] bridge0: port 3(syz_tun) entered disabled state
[  764.915984][ T4290] Bluetooth: hci1: command 0x0409 tx timeout
[  764.941962][ T9370] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  765.243101][   T26] audit: type=1800 audit(2000000309.930:30): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.850" name="file1" dev="loop8" ino=1048631 res=0 errno=0
[  765.475308][ T9376] futex_wake_op: syz.6.845 tries to shift op by 144; fix this program
[  766.367681][ T8999] device syz_tun left promiscuous mode
[  766.374482][ T8999] bridge0: port 3(syz_tun) entered disabled state
[  766.508681][ T9382] loop6: detected capacity change from 0 to 256
[  766.560050][ T9382] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  766.592963][ T9382] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  766.660285][ T9385] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  766.995844][ T4290] Bluetooth: hci1: command 0x041b tx timeout
[  768.350603][ T9352] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.115135][ T4290] Bluetooth: hci1: command 0x040f tx timeout
[  769.758651][ T9352] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.908487][ T9415] loop8: detected capacity change from 0 to 512
[  769.976486][ T9415] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  770.045445][ T9415] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  770.742149][ T9415] EXT4-fs (loop8): 1 truncate cleaned up
[  770.874980][ T9415] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  770.928711][ T9352] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.224201][ T4290] Bluetooth: hci1: command 0x0419 tx timeout
[  771.976191][ T9429] Illegal XDP return value 3132206370 on prog  (id 50) dev syz_tun, expect packet loss!
[  772.238174][ T9337] chnl_net:caif_netlink_parms(): no params data found
[  772.277836][ T7890] EXT4-fs (loop8): unmounting filesystem.
[  772.616687][ T9432] loop8: detected capacity change from 0 to 1024
[  772.625069][ T9352] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.851964][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.893020][ T9452] loop8: detected capacity change from 0 to 256
[  773.916485][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.921441][ T9452] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  773.960324][ T9452] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  773.973694][ T9337] device bridge_slave_0 entered promiscuous mode
[  773.997766][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.024188][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state
[  774.069012][ T9337] device bridge_slave_1 entered promiscuous mode
[  774.164105][ T9352] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  774.219992][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  774.252422][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  774.306111][ T9352] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  774.399736][ T9352] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  774.493614][ T9337] team0: Port device team_slave_0 added
[  774.608801][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  774.619396][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  774.629928][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3804 instead
[  774.637012][ T9352] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  774.640563][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xceb5 instead
[  774.659195][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  774.669750][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  774.680247][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  774.690757][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  774.701326][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  774.711984][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  774.722450][ T9465] jffs2: Further such events for this erase block will not be printed
[  774.732789][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  774.743319][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  774.753800][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3804 instead
[  774.764316][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xceb5 instead
[  774.774891][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  774.785390][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  774.790197][ T9337] team0: Port device team_slave_1 added
[  774.795834][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  774.795911][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  774.796062][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  774.796256][ T9465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  774.843396][ T9465] jffs2: Further such events for this erase block will not be printed
[  774.853837][ T9465] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  774.863333][ T9465] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[  775.398984][ T9352] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.519904][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  775.552127][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  776.042996][ T9337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  776.445852][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  776.493935][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  776.661614][ T9337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  776.876657][ T9352] netdevsim netdevsim120 eth21: set [1, 0] type 2 family 0 port 6081 - 0
[  776.960178][ T9337] device hsr_slave_0 entered promiscuous mode
[  776.995447][ T9337] device hsr_slave_1 entered promiscuous mode
[  777.034114][ T9337] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  777.045135][ T9337] Cannot create hsr debugfs directory
[  777.210418][ T9487] loop8: detected capacity change from 0 to 512
[  777.268134][ T9488] loop6: detected capacity change from 0 to 512
[  777.406305][ T9487] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.879: bad orphan inode 15
[  777.445563][ T9488] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  777.463629][ T9488] EXT4-fs (loop6): 1 truncate cleaned up
[  777.473597][ T9488] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  777.509584][ T9487] ext4_test_bit(bit=14, block=5) = 0
[  777.536773][ T9495] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  777.633333][ T9487] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  778.605205][ T9490] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  780.214826][ T7890] EXT4-fs (loop8): unmounting filesystem.
[  781.467126][ T9528] overlayfs: failed to resolve './file1': -2
[  782.240085][ T5460] EXT4-fs (loop6): unmounting filesystem.
[  783.709234][ T9337] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  784.324195][ T9562] loop6: detected capacity change from 0 to 256
[  785.121827][ T9337] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  785.757808][ T9337] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  786.975662][ T9580] netlink: 'syz.6.887': attribute type 11 has an invalid length.
[  787.436883][ T9337] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  788.590179][ T9599] futex_wake_op: syz.5.891 tries to shift op by 144; fix this program
[  789.126400][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  789.137184][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  789.147767][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3804 instead
[  789.158449][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xceb5 instead
[  789.168891][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  789.179686][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  789.190131][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  789.200548][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  789.211068][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  789.221852][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  789.232292][ T9614] jffs2: Further such events for this erase block will not be printed
[  789.241095][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  789.251537][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  789.261966][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3804 instead
[  789.272386][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xceb5 instead
[  789.282846][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  789.293296][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  789.303742][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  789.314205][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  789.325287][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  789.335899][ T9614] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  789.346310][ T9614] jffs2: Further such events for this erase block will not be printed
[  789.354983][ T9614] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  789.364312][ T9614] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[  790.501680][ T9623] No such timeout policy "syz1"
[  792.562291][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0
[  792.617423][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  792.638091][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  792.827275][ T9653] nvme_fabrics: no handler found for transport fc-ôraddrR+ê0x333:pn-0x0444444444444444+host_traddr?nn-0x1111111111111111ð7—Ïxé¶:pn-0x22r222.
[  795.245494][ T9667] futex_wake_op: syz.5.900 tries to shift op by 144; fix this program
[  795.707622][ T9337] 8021q: adding VLAN 0 to HW filter on device team0
[  795.861805][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  795.924175][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  796.033495][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.040737][ T9357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  796.562440][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  796.576001][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  796.616464][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  796.630252][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.637442][ T9357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  796.649474][ T9688] futex_wake_op: syz.8.907 tries to shift op by 144; fix this program
[  796.682124][ T9688] loop8: detected capacity change from 0 to 256
[  796.751941][ T9688] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  796.792541][   T26] audit: type=1800 audit(2000000341.690:31): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.907" name="file1" dev="loop8" ino=1048636 res=0 errno=0
[  796.827151][ T9688] syz.8.907: attempt to access beyond end of device
[  796.827151][ T9688] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  798.262428][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  798.453661][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  799.356133][ T9701] overlayfs: conflicting options: nfs_export=on,index=off
[  799.404318][ T9701] netlink: 220 bytes leftover after parsing attributes in process `syz.6.912'.
[  800.151892][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  800.190217][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  800.227745][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  800.426657][ T9708] netlink: 14 bytes leftover after parsing attributes in process `syz.0.913'.
[  802.657380][ T9339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  802.690088][ T9339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  802.964545][ T9735] futex_wake_op: syz.5.916 tries to shift op by 144; fix this program
[  803.965015][ T9352] device hsr_slave_0 left promiscuous mode
[  804.504984][ T9352] device hsr_slave_1 left promiscuous mode
[  804.805116][ T9352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  804.815296][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  805.327210][ T9352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  805.334687][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  805.374543][   T14] libceph: connect (1)[c::]:6789 error -101
[  805.387329][   T14] libceph: mon0 (1)[c::]:6789 connect error
[  805.417624][ T9751] ceph: No mds server is up or the cluster is laggy
[  805.429796][ T9352] device bridge_slave_1 left promiscuous mode
[  806.537037][   T14] libceph: connect (1)[c::]:6789 error -101
[  806.543398][   T14] libceph: mon0 (1)[c::]:6789 connect error
[  806.575261][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.685486][ T9352] device bridge_slave_0 left promiscuous mode
[  806.705916][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.967056][ T9772] futex_wake_op: syz.5.923 tries to shift op by 144; fix this program
[  808.095259][ T9352] device veth1_macvtap left promiscuous mode
[  808.101383][ T9352] device veth0_macvtap left promiscuous mode
[  808.125107][ T9352] device veth1_vlan left promiscuous mode
[  808.140404][ T9352] device veth0_vlan left promiscuous mode
[  809.010377][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  809.016821][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  809.536470][ T9792] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  811.900494][ T9806] loop8: detected capacity change from 0 to 512
[  811.998788][ T9808] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  813.972996][ T9813] loop8: detected capacity change from 0 to 512
[  813.984068][ T9813] EXT4-fs: Ignoring removed i_version option
[  815.082490][ T9813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  815.091771][ T9813] EXT4-fs warning (device loop8): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop8.
[  815.879527][ T9826] loop8: detected capacity change from 0 to 256
[  816.323790][ T9826] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  816.364787][   T26] audit: type=1800 audit(2000000361.260:32): pid=9825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.940" name="file1" dev="loop8" ino=1048637 res=0 errno=0
[  816.407700][ T9825] syz.8.940: attempt to access beyond end of device
[  816.407700][ T9825] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  816.944374][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  816.957546][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  816.968994][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  816.985639][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  816.994754][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  817.007045][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  818.721254][ T9352] team0 (unregistering): Port device team_slave_1 removed
[  819.035674][ T9352] team0 (unregistering): Port device team_slave_0 removed
[  819.075225][ T4291] Bluetooth: hci3: command 0x0409 tx timeout
[  819.306769][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  819.655337][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  821.165098][ T4291] Bluetooth: hci3: command 0x041b tx timeout
[  821.897683][ T9352] bond0 (unregistering): Released all slaves
[  822.520164][ T9827] chnl_net:caif_netlink_parms(): no params data found
[  822.632966][ T9827] bridge0: port 1(bridge_slave_0) entered blocking state
[  822.640997][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.649665][ T9827] device bridge_slave_0 entered promiscuous mode
[  822.658878][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.666429][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.675926][ T9827] device bridge_slave_1 entered promiscuous mode
[  822.716881][ T9827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  822.729704][ T9827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  822.763402][ T9827] team0: Port device team_slave_0 added
[  822.772079][ T9827] team0: Port device team_slave_1 added
[  822.797349][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.805067][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.833105][ T9827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.846389][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.853653][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.894974][ T9827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  823.030710][ T9827] device hsr_slave_0 entered promiscuous mode
[  823.057549][ T9827] device hsr_slave_1 entered promiscuous mode
[  823.095838][ T9827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  823.103488][ T9827] Cannot create hsr debugfs directory
[  823.234971][ T4291] Bluetooth: hci3: command 0x040f tx timeout
[  825.315183][ T4291] Bluetooth: hci3: command 0x0419 tx timeout
[  826.770788][ T9827] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  827.007475][ T9827] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  827.256845][ T9827] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  827.308237][ T9827] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  827.745102][ T9352] device hsr_slave_0 left promiscuous mode
[  827.834986][ T9352] device hsr_slave_1 left promiscuous mode
[  827.895145][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  827.935613][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  827.955773][ T9352] device bridge_slave_1 left promiscuous mode
[  827.962093][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.065614][ T9352] device bridge_slave_0 left promiscuous mode
[  828.071917][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state
[  829.108890][ T9352] team0 (unregistering): Port device team_slave_1 removed
[  829.435702][ T9352] team0 (unregistering): Port device team_slave_0 removed
[  829.725526][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  830.076508][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  831.267937][ T9352] bond0 (unregistering): Released all slaves
[  831.684131][ T9827] 8021q: adding VLAN 0 to HW filter on device bond0
[  831.703689][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  831.720537][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  831.733368][ T9827] 8021q: adding VLAN 0 to HW filter on device team0
[  831.750276][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  831.762774][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  831.775153][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state
[  831.782342][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state
[  831.801388][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  831.828857][ T9316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  831.844290][ T9316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  831.860644][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.867971][ T9316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  831.881722][ T9316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  831.891553][ T9316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  831.919878][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  831.940516][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  831.973853][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  831.983016][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  831.993286][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  832.003874][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  832.013108][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  832.025889][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  832.035711][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  832.047048][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  832.456547][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  832.464118][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  832.481158][ T9827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  833.205031][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  833.214807][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  833.252772][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  833.267534][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  833.280386][ T9827] device veth0_vlan entered promiscuous mode
[  833.291101][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  833.302279][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  833.318924][ T9827] device veth1_vlan entered promiscuous mode
[  833.348091][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  833.358406][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  833.370151][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  833.382918][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  833.403239][ T9827] device veth0_macvtap entered promiscuous mode
[  833.418054][ T9827] device veth1_macvtap entered promiscuous mode
[  833.441496][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  833.452357][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.464597][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  833.481562][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.496556][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  833.506307][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  833.516212][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  833.524505][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  833.534035][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  833.550599][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  833.565678][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.576982][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  833.587972][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.600017][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  833.612951][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  833.623549][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  833.634386][ T9827] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  833.644167][ T9827] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  833.653885][ T9827] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  833.669617][ T9827] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  833.882898][ T4772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.902507][ T4772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  833.930484][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  833.951356][ T9316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.965665][ T9316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  833.978244][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  835.043062][T10000] ip_tables: iptables: counters copy to user failed while replacing table
[  837.428817][T10024] fuse: Bad value for 'fd'
[  838.736731][T10042] loop9: detected capacity change from 0 to 512
[  838.805515][T10042] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  838.951533][T10042] EXT4-fs (loop9): 1 truncate cleaned up
[  839.027932][T10042] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  840.278652][ T9827] EXT4-fs (loop9): unmounting filesystem.
[  841.933668][   T26] audit: type=1326 audit(2000000386.830:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[  842.054929][   T26] audit: type=1326 audit(2000000386.870:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[  842.396968][   T26] audit: type=1326 audit(2000000386.870:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[  843.125044][   T26] audit: type=1326 audit(2000000386.870:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[  843.258271][   T26] audit: type=1326 audit(2000000386.870:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[  843.378016][   T26] audit: type=1326 audit(2000000386.880:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[  843.470737][T10086] tipc: Started in network mode
[  843.475963][T10086] tipc: Node identity 4, cluster identity 4711
[  843.482224][T10086] tipc: Node number set to 4
[  845.378551][   T26] audit: type=1326 audit(2000000386.880:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[  845.443172][   T26] audit: type=1326 audit(2000000386.890:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fead5e98e code=0x7ffc0000
[  845.610548][   T26] audit: type=1326 audit(2000000386.890:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[  845.706045][T10101] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  845.716131][T10101] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  845.724971][T10101] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  845.733735][T10101] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  845.752973][   T26] audit: type=1326 audit(2000000386.890:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[  848.367911][T10116] loop6: detected capacity change from 0 to 8192
[  848.846736][ T3638] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.888571][ T3638] Buffer I/O error on dev loop6, logical block 0, async page read
[  848.975163][ T3638] ldm_validate_partition_table(): Disk read failed.
[  848.982670][ T3638] Dev loop6: unable to read RDB block 0
[  849.018241][ T3638]  loop6: unable to read partition table
[  849.038779][ T3638] loop6: partition table beyond EOD, truncated
[  849.392011][T10127] loop6: detected capacity change from 0 to 512
[  850.460837][T10127] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.970: missing EA_INODE flag
[  850.607175][T10127] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.970: error while reading EA inode 2 err=-117
[  850.655646][T10127] EXT4-fs (loop6): 1 orphan inode deleted
[  850.695299][T10127] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  852.834205][ T5460] EXT4-fs (loop6): unmounting filesystem.
[  856.828656][T10172] loop9: detected capacity change from 0 to 512
[  856.864104][T10172] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  856.989768][T10172] EXT4-fs (loop9): 1 truncate cleaned up
[  857.264198][T10172] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  860.828160][ T9827] EXT4-fs (loop9): unmounting filesystem.
[  861.398789][T10195] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  861.426555][T10195] CIFS: Attempting to mount \\127.0.0.1\share
[  861.457971][T10195] CIFS: VFS: Error connecting to socket. Aborting operation.
[  861.467780][T10195] CIFS: VFS: cifs_mount failed w/return code = -111
[  864.005791][T10220] loop9: detected capacity change from 0 to 512
[  864.140155][T10220] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #2: comm syz.9.985: missing EA_INODE flag
[  864.276482][T10220] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.985: error while reading EA inode 2 err=-117
[  864.435183][T10220] EXT4-fs (loop9): 1 orphan inode deleted
[  864.441126][T10220] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  866.240462][ T9827] EXT4-fs (loop9): unmounting filesystem.
[  866.555502][T10243] netlink: 'syz.5.995': attribute type 11 has an invalid length.
[  868.596508][T10243] device wlan0 entered promiscuous mode
[  869.975415][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  869.985310][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  870.992927][T10274] futex_wake_op: syz.8.989 tries to shift op by 144; fix this program
[  871.016967][T10278] loop8: detected capacity change from 0 to 256
[  871.057114][T10278] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  871.074012][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  871.074028][   T26] audit: type=1800 audit(2000000414.965:57): pid=10274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.989" name="file1" dev="loop8" ino=1048641 res=0 errno=0
[  871.129581][T10278] syz.8.989: attempt to access beyond end of device
[  871.129581][T10278] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  872.994972][ T4290] Bluetooth: hci4: command 0x040a tx timeout
[  873.122183][T10295] loop6: detected capacity change from 0 to 128
[  873.483197][T10300] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5460] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10300]
[  875.427711][T10324] NILFS (nullb0): couldn't find nilfs on the device
[  878.212822][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1009'.
[  878.222917][T10338] block nbd0: Unsupported socket: should be TCP or UNIX.
[  878.645082][   T14] usb 10-1: new low-speed USB device number 2 using dummy_hcd
[  881.566721][   T14] usb 10-1: unable to get BOS descriptor or descriptor too short
[  881.580365][   T14] usb 10-1: unable to read config index 0 descriptor/start: -71
[  881.592564][   T14] usb 10-1: can't read configurations, error -71
[  881.732822][T10371] loop6: detected capacity change from 0 to 128
[  881.854519][T10377] futex_wake_op: syz.9.1016 tries to shift op by 144; fix this program
[  881.890641][T10377] loop9: detected capacity change from 0 to 256
[  881.943240][T10377] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  881.986734][   T26] audit: type=1800 audit(2000000425.875:58): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1016" name="file1" dev="loop9" ino=1048643 res=0 errno=0
[  882.016899][T10377] syz.9.1016: attempt to access beyond end of device
[  882.016899][T10377] loop9: rw=0, sector=184, nr_sectors = 120 limit=256
[  884.465358][T10387] loop9: detected capacity change from 0 to 1024
[  884.549982][   T26] audit: type=1400 audit(2000000428.445:59): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="foo" pid=10386 comm="syz.6.1020"
[  886.929923][ T9354] hfsplus: b-tree write err: -5, ino 3
[  887.172945][T10416] loop6: detected capacity change from 0 to 256
[  887.183589][T10416] exfat: Unknown parameter '184467440737095516150x00000000000000000xffffffffffffffff18446744073709551615'
[  887.863670][T10364] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  890.127259][T10432] capability: warning: `syz.0.1039' uses deprecated v2 capabilities in a way that may be insecure
[  890.373183][T10442] loop9: detected capacity change from 0 to 256
[  890.449639][T10442] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  891.366285][T10449] futex_wake_op: syz.0.1033 tries to shift op by 144; fix this program
[  891.375491][T10442] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  894.957031][T10498] futex_wake_op: syz.5.1046 tries to shift op by 144; fix this program
[  895.353691][T10506] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1045'.
[  896.472285][T10513] loop9: detected capacity change from 0 to 256
[  896.524315][T10513] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  896.633213][T10513] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  898.009284][T10531] loop6: detected capacity change from 0 to 512
[  898.035320][T10531] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  898.183318][T10531] EXT4-fs (loop6): 1 truncate cleaned up
[  898.311491][T10531] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  899.287790][ T5460] EXT4-fs (loop6): unmounting filesystem.
[  901.327112][T10561] futex_wake_op: syz.6.1058 tries to shift op by 144; fix this program
[  901.347280][T10561] loop6: detected capacity change from 0 to 256
[  901.426479][T10561] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  901.441950][   T26] audit: type=1800 audit(2000000445.345:60): pid=10561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1058" name="file1" dev="loop6" ino=1048649 res=0 errno=0
[  901.466019][T10561] syz.6.1058: attempt to access beyond end of device
[  901.466019][T10561] loop6: rw=0, sector=184, nr_sectors = 120 limit=256
[  901.735303][T10569] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  903.222773][T10592] loop6: detected capacity change from 0 to 256
[  903.242583][T10592] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  903.329604][T10592] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  903.766814][T10603] futex_wake_op: syz.8.1069 tries to shift op by 144; fix this program
[  903.785833][T10603] loop8: detected capacity change from 0 to 256
[  903.804744][T10603] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  903.827465][   T26] audit: type=1800 audit(2000000447.735:61): pid=10603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1069" name="file1" dev="loop8" ino=1048652 res=0 errno=0
[  903.854157][T10603] syz.8.1069: attempt to access beyond end of device
[  903.854157][T10603] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  904.305528][T10612] tipc: New replicast peer: 255.255.255.255
[  904.313898][T10612] tipc: Enabled bearer <udp:syz2>, priority 10
[  905.344011][T10618] loop8: detected capacity change from 0 to 256
[  905.387039][T10618] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  905.439015][T10625] futex_wake_op: syz.9.1075 tries to shift op by 144; fix this program
[  905.454730][T10625] loop9: detected capacity change from 0 to 256
[  905.469057][T10625] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  905.485937][T10618] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  905.497396][   T26] audit: type=1800 audit(2000000449.405:62): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1075" name="file1" dev="loop9" ino=1048653 res=0 errno=0
[  905.522517][T10625] syz.9.1075: attempt to access beyond end of device
[  905.522517][T10625] loop9: rw=0, sector=184, nr_sectors = 120 limit=256
[  905.795372][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  906.250463][T10622] loop6: detected capacity change from 0 to 512
[  906.479050][T10622] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1076: bg 0: block 385: padding at end of block bitmap is not set
[  907.515053][T10622] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  907.730961][T10622] EXT4-fs (loop6): 2 truncates cleaned up
[  907.818295][T10622] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  907.973470][T10648] loop9: detected capacity change from 0 to 256
[  908.050182][T10654] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1080'.
[  908.704445][T10648] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  909.076166][T10648] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  909.428807][T10670] loop8: detected capacity change from 0 to 128
[  909.840376][T10675] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7890] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10675]
[  911.328753][T10688] futex_wake_op: syz.8.1087 tries to shift op by 144; fix this program
[  911.343079][T10688] loop8: detected capacity change from 0 to 256
[  911.357162][T10688] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  911.402961][   T26] audit: type=1800 audit(2000000455.295:63): pid=10688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1087" name="file1" dev="loop8" ino=1048659 res=0 errno=0
[  911.438573][T10688] syz.8.1087: attempt to access beyond end of device
[  911.438573][T10688] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  915.059828][ T5460] EXT4-fs (loop6): unmounting filesystem.
[  917.072485][T10734] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  917.921163][T10740] loop8: detected capacity change from 0 to 512
[  917.956543][T10742] futex_wake_op: syz.0.1101 tries to shift op by 144; fix this program
[  918.155082][T10740] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  919.250161][T10754] atomic_op ffff888027629198 conn xmit_atomic 0000000000000000
[  919.273918][T10740] EXT4-fs (loop8): 1 truncate cleaned up
[  920.480470][T10761] loop9: detected capacity change from 0 to 256
[  920.491246][T10740] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  920.516249][T10761] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  920.601343][T10761] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  920.901489][ T7890] EXT4-fs (loop8): unmounting filesystem.
[  922.376479][T10782] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  923.152089][T10800] loop9: detected capacity change from 0 to 256
[  923.191446][T10800] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  924.425386][T10800] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  924.920589][T10811] loop6: detected capacity change from 0 to 1024
[  925.009977][T10811] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  925.029586][T10811] EXT4-fs (loop6): barriers disabled
[  925.826775][T10811] JBD2: no valid journal superblock found
[  925.833625][T10811] EXT4-fs (loop6): error loading journal
[  927.676393][T10828] loop6: detected capacity change from 0 to 256
[  928.096424][T10828] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  928.280003][T10828] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  930.222312][T10856] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  930.272440][T10857] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  931.759980][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.760375][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  932.081758][T10869] futex_wake_op: syz.6.1129 tries to shift op by 144; fix this program
[  936.479615][T10895] loop8: detected capacity change from 0 to 256
[  936.546041][T10895] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  936.827392][T10909] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  937.311008][T10895] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  939.189581][T10927] loop6: detected capacity change from 0 to 256
[  939.229542][T10927] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  939.478814][T10927] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  940.347664][T10941] futex_wake_op: syz.8.1146 tries to shift op by 144; fix this program
[  940.365387][T10941] loop8: detected capacity change from 0 to 256
[  940.380018][T10941] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  940.397315][   T26] audit: type=1800 audit(2000000484.295:64): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1146" name="file1" dev="loop8" ino=1048670 res=0 errno=0
[  940.433961][T10941] syz.8.1146: attempt to access beyond end of device
[  940.433961][T10941] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  940.583819][T10944] overlayfs: missing 'workdir'
[  940.986829][T10950] using random self ethernet address
[  940.994591][T10950] using random host ethernet address
[  941.003740][T10951] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  942.955606][T10973] futex_wake_op: syz.5.1157 tries to shift op by 144; fix this program
[  943.794948][ T4291] Bluetooth: hci3: command 0x0406 tx timeout
[  944.710986][T10977] mmap: syz.9.1156 (10977): VmData 49479680 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data.
[  944.787280][T10982] loop6: detected capacity change from 0 to 256
[  944.913378][T10984] futex_wake_op: syz.5.1158 tries to shift op by 144; fix this program
[  945.155901][T10989] futex_wake_op: syz.8.1160 tries to shift op by 144; fix this program
[  945.170336][T10989] loop8: detected capacity change from 0 to 256
[  945.187193][T10989] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  945.213131][T10989] syz.8.1160: attempt to access beyond end of device
[  945.213131][T10989] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  945.479299][   T26] audit: type=1800 audit(2000000489.105:65): pid=10989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1160" name="file1" dev="loop8" ino=1048671 res=0 errno=0
[  945.710414][T10991] loop9: detected capacity change from 0 to 512
[  945.734449][T10991] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  945.900957][T10991] EXT4-fs (loop9): 1 truncate cleaned up
[  945.965448][T10991] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  948.418713][ T9827] EXT4-fs (loop9): unmounting filesystem.
[  948.653179][T11005] loop8: detected capacity change from 0 to 2048
[  948.897546][T11010] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  950.677050][T11012] Process accounting resumed
[  950.902320][T11030] using random self ethernet address
[  951.332144][T11034] overlayfs: failed to clone upperpath
[  951.434945][T11036] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1170'.
[  952.439464][T11030] using random host ethernet address
[  953.920588][T11039] futex_wake_op: syz.8.1168 tries to shift op by 144; fix this program
[  953.977173][T11046] loop8: detected capacity change from 0 to 256
[  954.028227][T11046] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  954.044603][   T26] audit: type=1800 audit(2000000497.935:66): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1168" name="file1" dev="loop8" ino=1048673 res=0 errno=0
[  954.069710][T11046] syz.8.1168: attempt to access beyond end of device
[  954.069710][T11046] loop8: rw=0, sector=184, nr_sectors = 120 limit=256
[  954.307007][T11062] futex_wake_op: syz.6.1173 tries to shift op by 144; fix this program
[  954.478649][T11064] loop6: detected capacity change from 0 to 256
[  955.221527][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1177'.
[  955.231368][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1177'.
[  955.871693][T11074] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  955.891157][T11064] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  957.137895][T11062] syz.6.1173: attempt to access beyond end of device
[  957.137895][T11062] loop6: rw=0, sector=184, nr_sectors = 120 limit=256
[  957.138376][   T26] audit: type=1800 audit(2000000501.035:67): pid=11062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1173" name="file1" dev="loop6" ino=1048674 res=0 errno=0
[  961.765907][T11116] futex_wake_op: syz.9.1186 tries to shift op by 144; fix this program
[  961.818398][T11116] loop9: detected capacity change from 0 to 256
[  961.919450][T11116] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  962.035709][   T26] audit: type=1800 audit(2000000505.935:68): pid=11116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1186" name="file1" dev="loop9" ino=1048675 res=0 errno=0
[  962.064062][T11116] syz.9.1186: attempt to access beyond end of device
[  962.064062][T11116] loop9: rw=0, sector=184, nr_sectors = 120 limit=256
[  962.544557][T11126] loop8: detected capacity change from 0 to 512
[  963.453859][T11126] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1187: bg 0: block 385: padding at end of block bitmap is not set
[  963.505395][T11126] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  964.070050][T11126] EXT4-fs (loop8): 2 truncates cleaned up
[  964.076043][T11126] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  965.334380][T11126] EXT4-fs (loop8): unmounting filesystem.
[  968.255291][T11147] futex_wake_op: syz.5.1185 tries to shift op by 144; fix this program
[  968.581479][T11152] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  970.642020][T11178] Bluetooth: MGMT ver 1.22
[  974.560053][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1199'.
[  974.569239][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1199'.
[  975.497917][T11211] loop6: detected capacity change from 0 to 128
[  976.201381][T11211] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  976.989556][T11217] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  977.174996][T11207] mmap: syz.8.1203 (11207) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  977.555508][T11227] futex_wake_op: syz.6.1204 tries to shift op by 144; fix this program
[  978.089539][T11227] loop6: detected capacity change from 0 to 256
[  978.315822][T11227] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  978.361368][   T26] audit: type=1800 audit(2000000522.255:69): pid=11227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1204" name="file1" dev="loop6" ino=1048676 res=0 errno=0
[  978.385625][T11227] syz.6.1204: attempt to access beyond end of device
[  978.385625][T11227] loop6: rw=0, sector=184, nr_sectors = 120 limit=256
[  978.521976][T11238] overlayfs: failed to clone upperpath
[  978.910564][T11239] futex_wake_op: syz.5.1207 tries to shift op by 144; fix this program
[  981.573537][T11280] loop9: detected capacity change from 0 to 256
[  983.418268][T11298] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  985.731619][T11314] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  986.649170][T11309] Process accounting resumed
[  987.768150][T11331] xt_policy: output policy not valid in PREROUTING and INPUT
[  990.275003][ T4290] Bluetooth: hci3: command 0x0409 tx timeout
[  990.287677][T11360] loop6: detected capacity change from 0 to 512
[  990.318271][T11360] EXT4-fs: Ignoring removed i_version option
[  990.389402][T11360] EXT4-fs: Ignoring removed mblk_io_submit option
[  990.476000][T11360] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  991.259901][T11379] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  993.409623][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  993.416121][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  994.094973][T11377] futex_wake_op: syz.8.1233 tries to shift op by 144; fix this program
[  994.116927][T11378] overlayfs: failed to clone upperpath
[  994.124646][T11381] futex_wake_op: syz.9.1230 tries to shift op by 144; fix this program
[  994.157161][T11381] loop9: detected capacity change from 0 to 256
[  994.182417][ T5460] EXT4-fs (loop6): unmounting filesystem.
[  994.203173][T11381] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  994.290535][   T26] audit: type=1800 audit(2000000538.185:70): pid=11381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1230" name="file1" dev="loop9" ino=1048678 res=0 errno=0
[  994.350364][T11381] syz.9.1230: attempt to access beyond end of device
[  994.350364][T11381] loop9: rw=0, sector=184, nr_sectors = 120 limit=256
[  994.562038][T11384] Process accounting resumed
[  994.754522][T11387] loop6: detected capacity change from 0 to 32768
[  994.782665][T11387] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.1236 (11387)
[  994.823819][T11387] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  994.835219][T11387] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  994.845078][T11387] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  994.856651][T11387] BTRFS info (device loop6): use zstd compression, level 3
[  994.863936][T11387] BTRFS info (device loop6): force clearing of disk cache
[  994.871324][T11387] BTRFS info (device loop6): enabling disk space caching
[  994.878668][T11387] BTRFS info (device loop6): disk space caching is enabled
[  995.182687][T11387] BTRFS info (device loop6): enabling ssd optimizations
[  995.201619][T11387] BTRFS info (device loop6): rebuilding free space tree
[  995.330173][T11387] BTRFS info (device loop6): disabling free space tree
[  995.337404][T11387] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  995.347955][T11387] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  998.180843][ T5460] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  998.558079][T11455] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  999.586145][T11464] futex_wake_op: syz.0.1248 tries to shift op by 144; fix this program
[ 1001.380495][T11361] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop6 scanned by udevd (11361)
[ 1001.726605][T11480] overlayfs: failed to clone upperpath
[ 1002.194519][T11479] sctp: [Deprecated]: syz.0.1251 (pid 11479) Use of int in max_burst socket option.
[ 1002.194519][T11479] Use struct sctp_assoc_value instead
[ 1005.174235][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1254'.
[ 1007.423036][T11527] loop6: detected capacity change from 0 to 512
[ 1008.785450][T11527] EXT4-fs (loop6): invalid journal inode
[ 1008.791569][T11527] EXT4-fs (loop6): can't get journal size
[ 1009.081770][T11535] sctp: [Deprecated]: syz.5.1266 (pid 11535) Use of int in max_burst socket option.
[ 1009.081770][T11535] Use struct sctp_assoc_value instead
[ 1009.103273][T11535] device wlan0 left promiscuous mode
[ 1010.091515][T11527] EXT4-fs: error -4 creating inode table initialization thread
[ 1010.159544][T11527] EXT4-fs (loop6): mount failed
[ 1013.323506][T11571] comedi comedi1: 8255: I/O port conflict (0x6,4)
[ 1013.331271][T11571] comedi comedi1: 8255: I/O port conflict (0x2,4)
[ 1013.338077][T11571] comedi comedi1: 8255: I/O port conflict (0xc,4)
[ 1013.345020][T11571] comedi comedi1: 8255: I/O port conflict (0x90000,4)
[ 1013.352274][T11571] comedi comedi1: 8255: I/O port conflict (0x9,4)
[ 1013.359763][T11571] comedi comedi1: 8255: I/O port conflict (0x40000,4)
[ 1013.379509][T11571] comedi comedi1: 8255: I/O port conflict (0x280ffa,4)
[ 1013.387061][T11571] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffdfc,4)
[ 1013.395834][T11571] comedi comedi1: 8255: I/O port conflict (0x5,4)
[ 1013.404042][T11571] comedi comedi1: 8255: I/O port conflict (0x8,4)
[ 1013.411156][T11571] comedi comedi1: 8255: I/O port conflict (0x1000008,4)
[ 1013.419985][T11571] comedi comedi1: 8255: I/O port conflict (0x40000009,4)
[ 1013.428779][T11571] comedi comedi1: 8255: I/O port conflict (0xfffffffffff7ffa6,4)
[ 1013.437403][T11571] comedi comedi1: 8255: I/O port conflict (0x3fb,4)
[ 1013.445610][T11571] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffe,4)
[ 1013.454014][T11571] comedi comedi1: 8255: I/O port conflict (0x3,4)
[ 1013.460966][T11571] comedi comedi1: 8255: I/O port conflict (0x9,4)
[ 1013.467939][T11571] comedi comedi1: 8255: I/O port conflict (0xc,4)
[ 1013.576788][T11571] comedi comedi1: 8255: I/O port conflict (0x1,4)
[ 1013.735621][T11571] comedi comedi1: 8255: I/O port conflict (0xffff,4)
[ 1013.742884][T11571] comedi comedi1: 8255: I/O port conflict (0x400018,4)
[ 1013.797208][T11571] comedi comedi1: 8255: I/O port conflict (0x82,4)
[ 1013.873845][T11571] comedi comedi1: 8255: I/O port conflict (0x2000006,4)
[ 1013.919261][T11571] comedi comedi1: 8255: I/O port conflict (0x5,4)
[ 1014.929949][T11582] sctp: failed to load transform for md5: -2
[ 1016.489335][T11607] loop6: detected capacity change from 0 to 256
[ 1017.612150][ T9350] rpcbind: server 127.0.0.1 not responding, timed out
[ 1019.498475][T11625] sctp: [Deprecated]: syz.8.1282 (pid 11625) Use of int in max_burst socket option.
[ 1019.498475][T11625] Use struct sctp_assoc_value instead
[ 1023.045288][   T26] audit: type=1326 audit(2000000566.895:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1023.280842][   T26] audit: type=1326 audit(2000000566.895:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1023.784842][   T26] audit: type=1326 audit(2000000566.925:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1024.033656][   T26] audit: type=1326 audit(2000000566.925:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1024.343210][   T26] audit: type=1326 audit(2000000566.925:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1024.390928][   T26] audit: type=1326 audit(2000000566.925:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1024.572371][   T26] audit: type=1326 audit(2000000566.925:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1024.645538][   T26] audit: type=1326 audit(2000000566.925:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1024.890385][   T26] audit: type=1326 audit(2000000566.925:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1026.128594][   T26] audit: type=1326 audit(2000000566.935:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3fead9e159 code=0x7ffc0000
[ 1030.669884][   T26] kauditd_printk_skb: 51 callbacks suppressed
[ 1030.669903][   T26] audit: type=1800 audit(2000000574.565:132): pid=11751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1307" name=08 dev="sda1" ino=2077 res=0 errno=0
[ 1031.481072][T11756] syz.6.1307 (11756) used greatest stack depth: 19392 bytes left
[ 1032.044215][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[ 1032.055045][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[ 1032.065568][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3804 instead
[ 1032.076276][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xceb5 instead
[ 1032.086883][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[ 1032.097702][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[ 1032.108277][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[ 1032.118973][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[ 1032.129706][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[ 1032.140363][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[ 1032.151014][T11765] jffs2: Further such events for this erase block will not be printed
[ 1032.161207][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[ 1032.171893][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[ 1032.182440][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3804 instead
[ 1032.193001][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xceb5 instead
[ 1032.203753][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[ 1032.214535][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[ 1032.225117][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[ 1032.235805][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[ 1032.246451][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[ 1032.257335][T11765] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[ 1032.267897][T11765] jffs2: Further such events for this erase block will not be printed
[ 1032.278499][T11765] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1032.288323][T11765] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[ 1032.793013][T11771] loop6: detected capacity change from 0 to 256
[ 1032.874085][T11771] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1033.024167][T11771] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1036.320567][T11806] loop6: detected capacity change from 0 to 512
[ 1038.074509][T11806] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1038.084022][T11806] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1038.221932][T11806] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.1318: corrupted inode contents
[ 1038.239416][T11806] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #2: comm syz.6.1318: mark_inode_dirty error
[ 1038.253209][T11806] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.1318: corrupted inode contents
[ 1038.268988][T11806] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.1318: mark_inode_dirty error
[ 1038.435989][T11818] loop9: detected capacity change from 0 to 128
[ 1038.547792][T11818] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1038.727561][ T5460] EXT4-fs (loop6): unmounting filesystem.
[ 1038.772644][T11818] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1039.522482][T11818] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1040.744083][ T9827] EXT4-fs (loop9): unmounting filesystem.
[ 1042.143533][T11857] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5460] was attempted by " Àÿ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ                                                                                                                
                                            
       rr                                              @                                                                             @
      
                       
                                                                                    
       rr                         s  
       
                                                                                                                                                                                                                                                                          & 

%½p ûÛß%   \x07 g
F-                              
[ 1042.448425][   T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1043.394056][T11876] futex_wake_op: syz.8.1331 tries to shift op by 144; fix this program
[ 1044.545277][T11879] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0)
[ 1045.926890][   T14] usb 7-1: device descriptor read/all, error -71
[ 1047.597906][T11895] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0)
[ 1048.580013][T11902] Cannot find set identified by id 0 to match
[ 1054.309577][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.316027][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.423221][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[ 1054.433865][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[ 1054.445514][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3804 instead
[ 1054.456185][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xceb5 instead
[ 1054.466657][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[ 1054.477339][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[ 1054.487947][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[ 1054.498582][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[ 1054.509856][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[ 1054.520769][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[ 1054.531702][T11934] jffs2: Further such events for this erase block will not be printed
[ 1054.542029][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[ 1054.552757][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[ 1054.563431][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3804 instead
[ 1054.573993][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xceb5 instead
[ 1054.584612][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[ 1054.595552][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[ 1054.606101][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[ 1054.616881][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[ 1054.628044][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[ 1054.638721][T11934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[ 1054.649396][T11934] jffs2: Further such events for this erase block will not be printed
[ 1054.659932][T11934] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1054.669482][T11934] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[ 1057.226306][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1348'.
[ 1062.037272][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[ 1062.048107][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[ 1062.058687][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3804 instead
[ 1062.069299][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xceb5 instead
[ 1062.080193][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[ 1062.090921][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[ 1062.101619][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[ 1062.113270][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[ 1062.124059][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[ 1062.182902][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[ 1062.193582][T12001] jffs2: Further such events for this erase block will not be printed
[ 1062.204236][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[ 1062.214998][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[ 1062.225930][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3804 instead
[ 1062.236781][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xceb5 instead
[ 1062.247651][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[ 1062.258271][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[ 1062.268877][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[ 1062.279591][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[ 1062.290499][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[ 1062.301180][T12001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[ 1062.312686][T12001] jffs2: Further such events for this erase block will not be printed
[ 1062.323472][T12001] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1062.334035][T12001] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[ 1064.902688][T12015] loop9: detected capacity change from 0 to 256
[ 1070.323108][T12040] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0)
[ 1071.295435][T12042] loop6: detected capacity change from 0 to 164
[ 1072.735000][T12050] rock: directory entry would overflow storage
[ 1072.746694][T12050] rock: sig=0x4f50, size=4, remaining=3
[ 1072.754958][T12050] iso9660: Corrupted directory entry in block 5 of inode 1792
[ 1072.803803][T12054] futex_wake_op: syz.8.1352 tries to shift op by 144; fix this program
[ 1075.615151][T12072] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1373'.
[ 1075.889482][T12075] loop6: detected capacity change from 0 to 512
[ 1076.105409][T12075] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1076.159959][T12075] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1078.028656][   T26] audit: type=1800 audit(2000000621.595:133): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1378" name="memory_backed" dev="configfs" ino=68628 res=0 errno=0
[ 1078.558503][ T5460] EXT4-fs (loop6): unmounting filesystem.
[ 1080.418268][T12113] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1082.237806][T12153] futex_wake_op: syz.9.1384 tries to shift op by 144; fix this program
[ 1082.578120][T12162] block device autoloading is deprecated and will be removed.
[ 1082.660119][T12153] loop9: detected capacity change from 0 to 256
[ 1083.592286][T12153] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1083.847894][   T26] audit: type=1800 audit(2000000627.745:134): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1384" name="file1" dev="loop9" ino=1048693 res=0 errno=0
[ 1084.409021][T12156] syz.9.1384: attempt to access beyond end of device
[ 1084.409021][T12156] loop9: rw=0, sector=184, nr_sectors = 120 limit=256
[ 1085.604919][   T26] audit: type=1800 audit(2000000628.915:135): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1390" name="memory_backed" dev="configfs" ino=68767 res=0 errno=0
[ 1087.669706][T12196] UBIFS error (pid: 12196): cannot open "", error -22
[ 1089.749207][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1399'.
[ 1089.775745][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1399'.
[ 1089.786767][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1399'.
[ 1089.798108][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1399'.
[ 1093.736102][T12238] futex_wake_op: syz.6.1406 tries to shift op by 144; fix this program
[ 1094.005011][   T26] audit: type=1800 audit(2000000637.705:136): pid=12247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1403" name="memory_backed" dev="configfs" ino=68872 res=0 errno=0
[ 1094.048449][T12238] loop6: detected capacity change from 0 to 256
[ 1094.415522][T12238] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1094.459511][T12254] loop9: detected capacity change from 0 to 8
[ 1094.711946][   T26] audit: type=1800 audit(2000000638.605:137): pid=12238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1406" name="file1" dev="loop6" ino=1048694 res=0 errno=0
[ 1095.429172][T12254] unable to read inode lookup table
[ 1095.789429][T12059] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1098.201438][T12281] futex_wake_op: syz.9.1414 tries to shift op by 144; fix this program
[ 1098.282041][T12284] loop9: detected capacity change from 0 to 256
[ 1098.501918][T12284] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1098.630669][   T26] audit: type=1800 audit(2000000642.525:138): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1414" name="file1" dev="loop9" ino=1048695 res=0 errno=0
[ 1098.709446][T12281] syz.9.1414: attempt to access beyond end of device
[ 1098.709446][T12281] loop9: rw=0, sector=184, nr_sectors = 120 limit=256
[ 1099.580009][T12301] ==================================================================
[ 1099.580025][T12301] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0
[ 1099.580062][T12301] Write of size 4 at addr ffffc90004909fc0 by task syz.6.1416/12301
[ 1099.580083][T12301] 
[ 1099.580093][T12301] CPU: 0 PID: 12301 Comm: syz.6.1416 Not tainted syzkaller #0
[ 1099.580115][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1099.580132][T12301] Call Trace:
[ 1099.580141][T12301]  <TASK>
[ 1099.580150][T12301]  dump_stack_lvl+0x188/0x24e
[ 1099.580178][T12301]  ? sys_imageblit+0x1ba8/0x25d0
[ 1099.580204][T12301]  ? show_regs_print_info+0x12/0x12
[ 1099.580231][T12301]  ? load_image+0x410/0x410
[ 1099.580264][T12301]  ? _raw_spin_lock_irqsave+0xbc/0x100
[ 1099.580301][T12301]  ? verify_lock_unused+0x140/0x140
[ 1099.580331][T12301]  ? __virt_addr_valid+0xbf/0x540
[ 1099.580362][T12301]  ? sys_imageblit+0x1ba8/0x25d0
[ 1099.580385][T12301]  print_report+0xa8/0x210
[ 1099.580407][T12301]  kasan_report+0x10b/0x140
[ 1099.580440][T12301]  ? sys_imageblit+0x1ba8/0x25d0
[ 1099.580469][T12301]  sys_imageblit+0x1ba8/0x25d0
[ 1099.580502][T12301]  ? sys_copyarea+0x2530/0x2530
[ 1099.580529][T12301]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1099.580559][T12301]  ? trace_contention_end+0x5f/0x170
[ 1099.580587][T12301]  drm_fb_helper_sys_imageblit+0x2e/0x510
[ 1099.580621][T12301]  ? drm_fbdev_fb_imageblit+0x184/0x200
[ 1099.580646][T12301]  cw_putcs+0x15ef/0x18a0
[ 1099.580687][T12301]  ? cw_clear+0x250/0x250
[ 1099.580712][T12301]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[ 1099.580748][T12301]  ? fb_get_color_depth+0x15e/0x280
[ 1099.580779][T12301]  fbcon_putcs+0x358/0x510
[ 1099.580801][T12301]  ? cw_clear+0x250/0x250
[ 1099.580824][T12301]  do_update_region+0x4e5/0x640
[ 1099.580848][T12301]  ? memcpy+0x3c/0x60
[ 1099.580875][T12301]  ? hide_cursor+0x320/0x320
[ 1099.580904][T12301]  redraw_screen+0xa2c/0x1000
[ 1099.580929][T12301]  ? _raw_spin_unlock+0x40/0x40
[ 1099.580952][T12301]  ? clear_buffer_attributes+0x320/0x320
[ 1099.580980][T12301]  ? tty_do_resize+0xeb/0x160
[ 1099.581016][T12301]  vc_do_resize+0x122c/0x17b0
[ 1099.581056][T12301]  ? vc_resize+0x50/0x50
[ 1099.581091][T12301]  fbcon_do_set_font+0xb5c/0x1ae0
[ 1099.581113][T12301]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1099.581146][T12301]  con_font_op+0x5de/0xdb0
[ 1099.581175][T12301]  ? reset_palette+0xdc0/0xdc0
[ 1099.581201][T12301]  ? __might_fault+0xa6/0x120
[ 1099.581226][T12301]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1099.581259][T12301]  ? __might_fault+0xa6/0x120
[ 1099.581281][T12301]  ? __might_fault+0xc2/0x120
[ 1099.581302][T12301]  ? __might_fault+0xa6/0x120
[ 1099.581328][T12301]  vt_ioctl+0x161e/0x1ca0
[ 1099.581361][T12301]  ? __vt_event_wait+0x260/0x260
[ 1099.581396][T12301]  ? __fget_files+0x28/0x460
[ 1099.581429][T12301]  ? tty_jobctrl_ioctl+0x164/0xb00
[ 1099.581456][T12301]  tty_ioctl+0x7e6/0xba0
[ 1099.581481][T12301]  ? security_file_ioctl+0x7c/0xa0
[ 1099.581507][T12301]  ? tty_get_icount+0xa0/0xa0
[ 1099.581532][T12301]  __se_sys_ioctl+0xfa/0x170
[ 1099.581562][T12301]  do_syscall_64+0x4c/0xa0
[ 1099.581586][T12301]  ? clear_bhb_loop+0x60/0xb0
[ 1099.581609][T12301]  ? clear_bhb_loop+0x60/0xb0
[ 1099.581635][T12301]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1099.581667][T12301] RIP: 0033:0x7f8439b9e159
[ 1099.581692][T12301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1099.581712][T12301] RSP: 002b:00007f843aa6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1099.581736][T12301] RAX: ffffffffffffffda RBX: 00007f8439e26090 RCX: 00007f8439b9e159
[ 1099.581755][T12301] RDX: 00002000000008c0 RSI: 0000000000004b72 RDI: 0000000000000003
[ 1099.581770][T12301] RBP: 00007f8439c3506b R08: 0000000000000000 R09: 0000000000000000
[ 1099.581785][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1099.581798][T12301] R13: 00007f8439e26128 R14: 00007f8439e26090 R15: 00007ffe8e543608
[ 1099.581823][T12301]  </TASK>
[ 1099.581831][T12301] 
[ 1099.581835][T12301] The buggy address belongs to a vmalloc virtual mapping
[ 1099.581852][T12301] Memory state around the buggy address:
[ 1099.581863][T12301]  ffffc90004909e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1099.581878][T12301]  ffffc90004909f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1099.581893][T12301] >ffffc90004909f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1099.581904][T12301]                                            ^
[ 1099.581916][T12301]  ffffc9000490a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1099.581931][T12301]  ffffc9000490a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1099.581941][T12301] ==================================================================
[ 1099.589467][T12301] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1099.589482][T12301] CPU: 0 PID: 12301 Comm: syz.6.1416 Not tainted syzkaller #0
[ 1099.589505][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1099.589518][T12301] Call Trace:
[ 1099.589525][T12301]  <TASK>
[ 1099.589533][T12301]  dump_stack_lvl+0x188/0x24e
[ 1099.589565][T12301]  ? memcpy+0x3c/0x60
[ 1099.589587][T12301]  ? show_regs_print_info+0x12/0x12
[ 1099.589612][T12301]  ? load_image+0x410/0x410
[ 1099.589651][T12301]  panic+0x2d3/0x710
[ 1099.589680][T12301]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1099.589708][T12301]  ? bpf_jit_dump+0xd0/0xd0
[ 1099.589740][T12301]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 1099.589762][T12301]  ? _raw_spin_unlock+0x40/0x40
[ 1099.589784][T12301]  check_panic_on_warn+0x80/0xa0
[ 1099.589812][T12301]  ? sys_imageblit+0x1ba8/0x25d0
[ 1099.589836][T12301]  end_report+0x66/0x110
[ 1099.589866][T12301]  kasan_report+0x118/0x140
[ 1099.589898][T12301]  ? sys_imageblit+0x1ba8/0x25d0
[ 1099.589927][T12301]  sys_imageblit+0x1ba8/0x25d0
[ 1099.589959][T12301]  ? sys_copyarea+0x2530/0x2530
[ 1099.589986][T12301]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1099.590026][T12301]  ? trace_contention_end+0x5f/0x170
[ 1099.590055][T12301]  drm_fb_helper_sys_imageblit+0x2e/0x510
[ 1099.590090][T12301]  ? drm_fbdev_fb_imageblit+0x184/0x200
[ 1099.590114][T12301]  cw_putcs+0x15ef/0x18a0
[ 1099.590154][T12301]  ? cw_clear+0x250/0x250
[ 1099.590179][T12301]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[ 1099.590214][T12301]  ? fb_get_color_depth+0x15e/0x280
[ 1099.590246][T12301]  fbcon_putcs+0x358/0x510
[ 1099.590267][T12301]  ? cw_clear+0x250/0x250
[ 1099.590289][T12301]  do_update_region+0x4e5/0x640
[ 1099.590313][T12301]  ? memcpy+0x3c/0x60
[ 1099.590339][T12301]  ? hide_cursor+0x320/0x320
[ 1099.590367][T12301]  redraw_screen+0xa2c/0x1000
[ 1099.590392][T12301]  ? _raw_spin_unlock+0x40/0x40
[ 1099.590414][T12301]  ? clear_buffer_attributes+0x320/0x320
[ 1099.590441][T12301]  ? tty_do_resize+0xeb/0x160
[ 1099.590469][T12301]  vc_do_resize+0x122c/0x17b0
[ 1099.590507][T12301]  ? vc_resize+0x50/0x50
[ 1099.590538][T12301]  fbcon_do_set_font+0xb5c/0x1ae0
[ 1099.590560][T12301]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1099.590592][T12301]  con_font_op+0x5de/0xdb0
[ 1099.590621][T12301]  ? reset_palette+0xdc0/0xdc0
[ 1099.590648][T12301]  ? __might_fault+0xa6/0x120
[ 1099.590672][T12301]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1099.590705][T12301]  ? __might_fault+0xa6/0x120
[ 1099.590727][T12301]  ? __might_fault+0xc2/0x120
[ 1099.590748][T12301]  ? __might_fault+0xa6/0x120
[ 1099.590774][T12301]  vt_ioctl+0x161e/0x1ca0
[ 1099.590807][T12301]  ? __vt_event_wait+0x260/0x260
[ 1099.590842][T12301]  ? __fget_files+0x28/0x460
[ 1099.590875][T12301]  ? tty_jobctrl_ioctl+0x164/0xb00
[ 1099.590901][T12301]  tty_ioctl+0x7e6/0xba0
[ 1099.590926][T12301]  ? security_file_ioctl+0x7c/0xa0
[ 1099.590951][T12301]  ? tty_get_icount+0xa0/0xa0
[ 1099.590977][T12301]  __se_sys_ioctl+0xfa/0x170
[ 1099.591018][T12301]  do_syscall_64+0x4c/0xa0
[ 1099.591042][T12301]  ? clear_bhb_loop+0x60/0xb0
[ 1099.591066][T12301]  ? clear_bhb_loop+0x60/0xb0
[ 1099.591091][T12301]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1099.591114][T12301] RIP: 0033:0x7f8439b9e159
[ 1099.591133][T12301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1099.591152][T12301] RSP: 002b:00007f843aa6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1099.591175][T12301] RAX: ffffffffffffffda RBX: 00007f8439e26090 RCX: 00007f8439b9e159
[ 1099.591192][T12301] RDX: 00002000000008c0 RSI: 0000000000004b72 RDI: 0000000000000003
[ 1099.591207][T12301] RBP: 00007f8439c3506b R08: 0000000000000000 R09: 0000000000000000
[ 1099.591221][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1099.591234][T12301] R13: 00007f8439e26128 R14: 00007f8439e26090 R15: 00007ffe8e543608
[ 1099.591258][T12301]  </TASK>
[ 1099.591850][T12301] Kernel Offset: disabled
[ 1100.431572][T12301] Rebooting in 86400 seconds..