last executing test programs:

22m29.177883887s ago: executing program 32 (id=37):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff)
sendfile(r1, r0, 0x0, 0xc00)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff)
sendfile(r2, r0, 0x0, 0xc00)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff)
sendfile(r3, r0, 0x0, 0xc00)
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff)
sendfile(0xffffffffffffffff, r0, 0x0, 0xc00)
close(0xffffffffffffffff)
unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)

20m31.206984914s ago: executing program 33 (id=158):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0x2)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect)
prctl$PR_SET_SECUREBITS(0x1c, 0xb3d6f486854de123)
socket$inet6_udplite(0xa, 0x2, 0x88)
clock_adjtime(0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x4e8, 0x7}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0)

18m52.648850435s ago: executing program 34 (id=260):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x200000c0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10)
ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
mremap(&(0x7f0000666000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7003f00)
fchdir(r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x82, 0xa0)
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x208080, &(0x7f0000000080)={[{@quota}, {@grpjquota}, {@dioread_lock}, {@abort}, {@acl}, {@data_writeback}, {@data_journal}, {@norecovery}]}, 0xfc, 0x5a8, &(0x7f0000000240)="$eJzs3U1rG0cfAPD/ypbjxHmeOBDC8/RQDDk0JY0cO31JoYf0WNrQQHsovaTGVkywHAVLDrEbSHJoLr2UUCilgVJ67r3H0C/QTxFoA6ENpj2UFpWVV45fJL9Flhz794O1ZnZWmhntzuyMdmUFsG8NpX9yEf+PiC+SiCPL0nojSxxa3G7hyc3xdEmiVvvgtySSbF1j+yR7HMgi/4uInz7ri1O5tflW5uanxkql4kwWH65OXxuuzM2fvjI9NlmcLF4dPXv23GtnR9984/W21fXli39+/f6Dd859fmLhqx8eHb2XxPk4nKUtr8czuL08MhRD2XuSj/OrNhxpQ2a7SdKh59BePVk7z0faBxyJnqzVA3vfrYioNdXTfDWwhyQt2j+w1zXGAY25fZvmwc+Nx28vToDW1r938bOR6K/PjQ4tJCtmRuncdbAN+ad5/Pjr/XvpEu37HAJgQ7fvRMSZ3t61/V+S9X/bd2YT26zOQ/8HnfMgHf+80mz8k1sa/0ST8c9Ak7a7HRu3/9yjNmTTUjr+e6vp+HfpotVgTxb7T33Ml08uXykV077tvxFxMvIH0vh613N+rz2stUpbPv5LlzT/xlgwK8ej3gMrnzMxVh17ljov9/hOxAsrxr+1Vf1/f32su3r/p+/HxU3mcbx4/8VWaRvXf2fVvot4qen+f3p1Kln/+uRw/XgYvtzTKo8/7h7/uVVat+uf7v9DS/X/6O8m9R9Mll+vrWw9j2/7/yq2StvS8f/x4kN6/PclH9bDfVnSjbFqdWYkoi//3tr1o09frRFvbJ/W/+SJ9fu/Zsf/wYj4ZJP1v3vsbstNd8P+n1j/+F+1/7ceePjup9+0yn9z+//VeuhktmYz/d9mC/gs7x0AAAAAAADsNrmIOBxJrrAUzuUKhcX7O47FoVypXKmeulyevToR9e/KDkY+17j/4ciy+yFGsvthG/HRFfHFS+NHI+LLnoP19MJ4uTTR7coDAAAAAAAAAAAAAAAAAADALjEQ0d/s+/+pX1r+R3tgz/CT37BvrXOaz3qGVb/SlNvZ8gAdtO3zf3K7vQUBOq5p+/+n5W8WAnuI+T/sX6vb/4UulQPoPOd/2L+0f9i/Vrb//q6VA+g8538AAAAAAAAAAAAAAAAAAAAAAAAAAABoq4sXLqRLbeHJzfE0PnF9bnaqfP30RLEyVZieHS+Ml2euFSbL5clSsTBent7o9Url8rWR0Zi9MVwtVqrDlbn5S9Pl2avVS1emxyaLl4r5jtQKAAAAAAAAAAAAAAAAAAAAni+VufmpsVKpOCOws4Fb30dsvPFARHS9qFsL9O7EKx/ofr02F7gfu6IYzQP5iNj207vdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAU/8GAAD//7NZNbQ=")
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept$inet(r6, 0x0, 0x0)
r7 = socket$inet(0x2, 0x80003, 0x84)
getsockopt$inet_mreq(r7, 0x0, 0x50, 0x0, &(0x7f0000000080)=0xff00)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

18m17.194758161s ago: executing program 35 (id=299):
r0 = syz_io_uring_setup(0x34b5, &(0x7f0000000540)={0x0, 0x2730, 0x0, 0x201, 0x7f}, &(0x7f0000000180)=<r1=>0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000000}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112})
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = userfaultfd(0x80000)
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000005c0)={{&(0x7f0000d1e000/0x4000)=nil, 0x4000}, 0x3})
syz_io_uring_submit(r1, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_clone(0x40800200, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)

17m11.731956145s ago: executing program 36 (id=365):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r4, 0xffffffffffffffff, 0x36, 0x0, @void}, 0x10)
keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r3, r3, r3, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r5, 0x0, 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108)
read$FUSE(r5, 0x0, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0/file0\x00')
openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff)
syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@broadcast}]}, @lsrr={0x83, 0x7, 0x40, [@loopback]}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
write$FUSE_INTERRUPT(r5, &(0x7f0000000040)={0x10, 0xffffffffffffffda}, 0x10)
umount2(&(0x7f0000000000)='./file0\x00', 0x3)

12m26.717864037s ago: executing program 37 (id=1236):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0)
read(r0, &(0x7f0000000440)=""/13, 0xd)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
read$FUSE(r0, &(0x7f0000002b40)={0x2020}, 0x2020)

11m16.65265301s ago: executing program 38 (id=1466):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x20, 0x1, 0x0, 0xfffff024}, {0x6, 0x4, 0x0, 0x2}]})
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)

10m39.967757414s ago: executing program 39 (id=1560):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='e:mygroup/myevent sched.sched_switch\n\x00', 0x25)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/instances/foo/events/mygroup/myevent/enable\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='1\n\x00', 0x2)
close(r1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200)

10m32.685365911s ago: executing program 8 (id=1641):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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")
r0 = fanotify_init(0x40, 0x40000)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
getdents64(r1, &(0x7f00000001c0)=""/163, 0xba974ed140df4995)
getdents64(r1, 0x0, 0x0)

10m31.330792246s ago: executing program 8 (id=1646):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6})
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)

10m30.135776217s ago: executing program 8 (id=1650):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000040)="76ea", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x2000000007, 0x4, 0x41, 0xc3d, 0x0, 0x104, 0x1000000003, 0xa17, 0x7, 0x100005, 0x79, 0x5, 0x3], 0x3332d000, 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x3, 0x6, 0xa}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x3, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0xc2, 0x6, 0x9, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0xd, 0x6, 0x8, 0x3, 0xff, 0x1c, 0xa3, 0x6, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x1, 0x0, 0x0, 0x7, 0x20}, {0x0, 0xdddd0000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x8, 0xf801, 0x3000, [0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m29.6350913s ago: executing program 8 (id=1653):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)

10m29.509066643s ago: executing program 8 (id=1655):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x12)
read$FUSE(r1, &(0x7f0000004580)={0x2020}, 0x2020)
write$FUSE_BMAP(r1, 0x0, 0x0)

10m28.718970814s ago: executing program 8 (id=1659):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6})
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)

10m28.130422258s ago: executing program 40 (id=1659):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6})
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)

9m34.640616615s ago: executing program 9 (id=1898):
recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b", 0x53}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

9m27.015222311s ago: executing program 9 (id=1910):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x1, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81, 0xfe}}}}}]}}]}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x26e9affff64e7ce6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9m19.541859723s ago: executing program 9 (id=1929):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='e:my_', 0x5)

9m16.996181899s ago: executing program 9 (id=1937):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

9m12.054690486s ago: executing program 9 (id=1949):
socket$igmp6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
r4 = dup(r3)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0x1, 0x7fff, 0x8000006, 0x83, 0x9, "f4010054595d3407f1cc68a33ccd509e392c16", 0xa, 0x2009})
write$UHID_INPUT(r4, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)

9m9.982699199s ago: executing program 9 (id=1953):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0)
pipe(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

8m54.524221167s ago: executing program 41 (id=1953):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0)
pipe(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

6m59.984208374s ago: executing program 6 (id=2141):
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0xe, 0x4, 0x4, 0xc, 0x1]}, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x6, 0x7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000100)={0x1, r4, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1})
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r5, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x32314152, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}})

6m57.978268096s ago: executing program 6 (id=2146):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001100)={0x0, r1}, 0x8)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2)
fcntl$setlease(r2, 0x400, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52, 0x0, 0x3af}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="000000000000000000000000ffdf0000000000007afb1dcd2dab285ff8cc9f466d8051fff3a2493e24900e90b376a999123fb24210ef195c9f1f02c41fdbf0353b6565dfe88cc1e277170f5cdebe897efe3c0a1de09dd2d41983ce392ec599119550244781642cba97a13e8c665d0d8f0eb55fca3d9dc12be5d74eed443fff9fb63d8b552f2e563315c410f1aad3150778cd446da9b90305bd6f9fa758464bf775dd0fdd794a00f20cdb53804648690ec9ca1d0e89de04d259ddbf88b912a9fc496f0a18e82cbf448a4088d9036e52f1ca8ceb7fdfb3daab8562a9d576493f", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x50)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = epoll_create1(0x80000)
r6 = fcntl$dupfd(r4, 0x406, r5)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x10000014})
r7 = getpid()
kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r5, &(0x7f0000000100)={r5})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001180)={0x4720, 0x8001, 0x7fffffff, 0x9, r11}, 0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r11, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000040)=0x84)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, 0x0)

6m55.310640504s ago: executing program 6 (id=2149):
r0 = gettid()
prlimit64(r0, 0x3, &(0x7f0000000140)={0x5, 0x80000100408b}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setresgid(0xee00, 0x0, 0x0)
ftruncate(r2, 0x6000809)
sendfile(r1, r2, 0x0, 0x7ffff004)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r7 = getpgrp(0x0)
sched_setaffinity(r7, 0x8, &(0x7f00000000c0)=0x5)

6m53.270668977s ago: executing program 6 (id=2152):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x10, 0x80002, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}}, 0x20}, 0x1, 0x0, 0x0, 0x4c001}, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

6m48.697905355s ago: executing program 6 (id=2157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
fsopen(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100)
fcntl$setlease(r6, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c)
preadv(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
rt_tgsigqueueinfo(r0, r2, 0x28, 0x0)

6m47.390947188s ago: executing program 6 (id=2159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000300)={0x1, 0x20, 0x1, 0x1b, 0x3, 0xff, 0x4, 0x14b, 0x1})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
listen(r5, 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'})
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xa000006, 0x0, 0x0, 0x9, 0x4000003})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)

6m30.653343799s ago: executing program 42 (id=2159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000300)={0x1, 0x20, 0x1, 0x1b, 0x3, 0xff, 0x4, 0x14b, 0x1})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
listen(r5, 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'})
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xa000006, 0x0, 0x0, 0x9, 0x4000003})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)

2m47.106986941s ago: executing program 2 (id=2922):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14)
syz_emit_ethernet(0xd81, &(0x7f0000000a00)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0xd4b, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x3b, 0x19b, '\x00', [@generic={0x1, 0x4d, "f7f89bb337826d614d89335b8676226ba9ed2941a4110d0c745239ad090e5cd8aed4003dd3669929aa12d5fca87d81f3632525cde616f24e6b07bd616a5ffdade4c8df70e2b9b2c0f1ec04670f"}, @jumbo, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x5, 0xc7d, "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"}]}], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x2, {[@exp_smc={0xfe, 0x6}]}}, {"ffaf37c94bd77d95f8a7484ed5752f3c6fb324fa40e0752e7aeed8dbcb9f5dec2fac17c637d154e0e3e643c5c4ad6e690f5d716d8f8bd53711e5c2afbc460074139a39173b2d24"}}}}}}}, 0x0)

2m46.819143258s ago: executing program 2 (id=2924):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210})
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010)

2m44.886522228s ago: executing program 2 (id=2929):
mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='zstd\x00', 0x4)
mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
read(r1, &(0x7f0000000000), 0x10000)
r2 = eventfd(0x11223344)
read(r2, &(0x7f0000000000), 0x8)
r3 = eventfd(0x11223344)
read(r3, &(0x7f0000000008), 0x8)
madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15)

2m44.161988926s ago: executing program 2 (id=2932):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m39.556193645s ago: executing program 2 (id=2943):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r1 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r2, &(0x7f0000000300)=""/172, 0xdc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20)

2m37.194880556s ago: executing program 2 (id=2954):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./rpc_pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='8\n', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./nfs4\x00', 0x1ff)
mount$nfs4(&(0x7f0000000900)='127.0.0.1:/\x00', &(0x7f0000000800)='./nfs4\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000b00)={[{'addr=127.0.0.1'}, {'vers=4'}]})

2m31.459329003s ago: executing program 4 (id=2962):
r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)

2m27.359929919s ago: executing program 4 (id=2970):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d", 0x7e}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c48", 0x18}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m27.113973945s ago: executing program 4 (id=2971):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000700)='\x00'/32, 0x20)
write(r0, &(0x7f0000000700)='\x00'/32, 0x20)
write(r0, &(0x7f0000000700)='\x00'/20, 0x14)
write(r0, 0x0, 0x0)
write(r0, 0x0, 0x0)
write(r0, &(0x7f0000000700)='\x00'/32, 0x20)
write(r0, &(0x7f0000000700)='\x00'/32, 0x20)
write(r0, &(0x7f0000000700), 0x0)
write(r0, &(0x7f0000000700)='\x00'/16, 0x10)
write(r0, &(0x7f0000000700)='\x00'/25, 0x19)

2m24.6096948s ago: executing program 4 (id=2974):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

2m22.742917438s ago: executing program 4 (id=2983):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

2m20.919726294s ago: executing program 43 (id=2954):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./rpc_pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='8\n', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./nfs4\x00', 0x1ff)
mount$nfs4(&(0x7f0000000900)='127.0.0.1:/\x00', &(0x7f0000000800)='./nfs4\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000b00)={[{'addr=127.0.0.1'}, {'vers=4'}]})

2m9.154211307s ago: executing program 4 (id=3005):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r2, 0x28, 0xfffffffe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x42060680)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0)
fsopen(0x0, 0x0)
gettid()

1m52.505635845s ago: executing program 44 (id=3005):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r2, 0x28, 0xfffffffe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x42060680)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0)
fsopen(0x0, 0x0)
gettid()

1m30.351111806s ago: executing program 7 (id=3056):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x28011, r2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x6, 0x3)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2)

1m27.359254252s ago: executing program 7 (id=3059):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
r4 = socket(0x11, 0x2, 0x0)
setsockopt(r4, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a800100", 0xe)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt(r4, 0x107, 0x2, &(0x7f00000001c0)="110000000200010001001a00002b4000", 0x10)

1m23.754842205s ago: executing program 7 (id=3064):
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x1cc)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)
futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, 0x0, 0x44ffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010008b7a5c44a806d928000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80180002801400018000000c00"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000000)={[{@acl}, {@jqfmt_vfsold}, {@noload}]}, 0x1, 0x451, &(0x7f0000000f80)="$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")

1m15.067940868s ago: executing program 7 (id=3069):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000552000/0x3000)=nil, 0x3000, 0xb635773f066bbeed, 0x13, 0xffffffffffffffff, 0xed76b000)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f0000000d00))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r8, 0x0)

1m11.368676814s ago: executing program 0 (id=3075):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"})
r4 = syz_open_pts(r0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004040)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0))

1m4.757201524s ago: executing program 7 (id=3078):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = syz_open_dev$vim2m(0x0, 0x10000, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc04c561a, &(0x7f00000000c0)=0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r5, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000004100)={0x50, 0x0, 0xb3400, {0x7, 0x2d, 0x5, 0x201, 0xbcbf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc)

59.912872209s ago: executing program 0 (id=3081):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
bind$can_raw(r0, &(0x7f0000000180), 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x200)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4)

58.067162386s ago: executing program 7 (id=3083):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000007100000225bd70ff505e4b477a132db767481c66", @ANYRES32=0x0, @ANYBLOB="0c0001800800010027000300100001800c00048008000200110000000c00018005000300020000000c00018005000300040000000c00018008000100400001000c0001800800010017"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r6, &(0x7f0000000180), 0x1000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r4}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==")
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000d80)=@get={0x1, 0x0, 0x4000000000000000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

55.369888635s ago: executing program 0 (id=3086):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400)
gettid()
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff01000000", @ANYRES32=0x1], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
fsmount(0xffffffffffffffff, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003c000200af579f63fddbdf250cea3c0006000000000000000800", @ANYRES32, @ANYBLOB], 0x24}, {&(0x7f0000005dc0)={0x10, 0x3a, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830)

50.54075391s ago: executing program 0 (id=3089):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000380), 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPTPEER(r8, 0x5441, 0x6)
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="c9b510370344a14cdfe2fd9204c8735af012063d447bbf45202100"/39, @ANYRESHEX])

49.401636579s ago: executing program 0 (id=3090):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"})
r5 = syz_open_pts(r0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004040)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))

46.547329762s ago: executing program 0 (id=3092):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="0f1392a17ebe7ee8ac0306ac3900100000000000001b1384afb5948a587498", 0x1f}], 0x1}}], 0x1, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$sock(r2, &(0x7f0000001c00), 0x0, 0x40)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "894dc993eaf26ed8", "1fb6061e88442c01e0e82e4bbe8c2eaf", "66da42f1", "4c5b0107fbbfde6e"}, 0x28)
readv(r3, &(0x7f00000006c0), 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r5, 0x4611, 0x4)

40.264117694s ago: executing program 45 (id=3083):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000007100000225bd70ff505e4b477a132db767481c66", @ANYRES32=0x0, @ANYBLOB="0c0001800800010027000300100001800c00048008000200110000000c00018005000300020000000c00018005000300040000000c00018008000100400001000c0001800800010017"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r6, &(0x7f0000000180), 0x1000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r4}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000d80)=@get={0x1, 0x0, 0x4000000000000000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

29.087198202s ago: executing program 46 (id=3092):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="0f1392a17ebe7ee8ac0306ac3900100000000000001b1384afb5948a587498", 0x1f}], 0x1}}], 0x1, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$sock(r2, &(0x7f0000001c00), 0x0, 0x40)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "894dc993eaf26ed8", "1fb6061e88442c01e0e82e4bbe8c2eaf", "66da42f1", "4c5b0107fbbfde6e"}, 0x28)
readv(r3, &(0x7f00000006c0), 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r5, 0x4611, 0x4)

11.105709374s ago: executing program 1 (id=3130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000340)=""/90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x46}, 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmsg$alg(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x4008011}, 0x4040004)
recvmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/11, 0xb}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {0x0}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x3, 0x40, 0x7, 0x72cf}, {0x7, 0x2, 0xe2, 0x3ff}]})
syz_usb_connect(0x0, 0x34, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000640))
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008001)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r4, 0x16, 0x8, 0x8, 0x207a})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r1}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x0, 0x8402}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000)

8.782648605s ago: executing program 5 (id=3134):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
getrlimit(0xd, &(0x7f0000000040))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x8)

7.682610582s ago: executing program 5 (id=3135):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
getrlimit(0xd, &(0x7f0000000040))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
ptrace(0x10, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x358, 0x8)

7.511034607s ago: executing program 1 (id=3136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080)

6.582548011s ago: executing program 5 (id=3137):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
readv(r0, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}, {0x0}], 0x2)
close_range(r0, r1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000010000020000040900010073797a30000000000900020073797a320000000034000000080a050000000000000000000200000609"], 0x88}}, 0x20000040)

6.448218965s ago: executing program 1 (id=3138):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x24, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}})
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))

5.110471869s ago: executing program 5 (id=3139):
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c5}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r1 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

4.436469806s ago: executing program 3 (id=3140):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[@ANYBLOB="340200000002010300000000000000000700001008010a804c0002802c0001801400030000000000000000000000ffff6401010114000400ff010000000000000000002c00000001060003400004000006000340000200000c000280050001002100000008000140000000001c0002800c000280050001002f0000000c000280050001003a00000008000140000000008c0002800c000280050001003a0000000c000280050001003a0000000600034000030000060003400001000014000180080001006401010208000200ac1414120c000280050001008800000006000340000100002c00018014000300fe8000000000000000000000000000bb14000400fe8800000000000000000000000001010c000280050001008400000018010a80580002800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffffac1414bb06000340000300000c000280050001002f00000006000340000400006000028006000340000400002c00018014000300fe80000000000000000000000000001b140004000000000000000000000000000000000014000180080001000a01010008000200e000000206000340000000000c00028005000100840000005c0002800c0002800500010084502c720800018014000300fe8000000000000000000000000000bb14000400000000000000000000000000000000010c000280050001002f000000b6277714000180080001000a01010108000200ff0655ba602bb7628f00460fcb1c8a014bfcfc5cb97efd19f119e8c684bd8a8349b12905728f4c04e9f0c96630009bc27025720ed3b8a214dddc77623993c8415c42716e78c00f99d5202830c59e748cdf9e49a5fe79a8ee5e7dd449263b71cba15421900ecb575f5b1c5eb2b6"], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMWRITEOOB(r1, 0xc0104d03, &(0x7f0000000140)={0x1e7, 0x100000, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

4.391199067s ago: executing program 5 (id=3141):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMWRITEOOB(r1, 0xc0104d03, &(0x7f0000000140)={0x1e7, 0x100000, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940))
madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0)
close(0x3)

3.810646982s ago: executing program 1 (id=3142):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x8)

3.666704036s ago: executing program 3 (id=3143):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMWRITEOOB(r1, 0xc0104d03, &(0x7f0000000140)={0x1e7, 0x100000, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940))
madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0)
close(0x3)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080)

2.680296511s ago: executing program 1 (id=3144):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMWRITEOOB(r1, 0xc0104d03, &(0x7f0000000140)={0x1e7, 0x100000, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940))
madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0)
close(0x3)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080)

1.868992142s ago: executing program 3 (id=3145):
r0 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0xc044)

875.496747ms ago: executing program 3 (id=3146):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='4', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='4096', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='1:0', 0x3)
write(r4, &(0x7f00000004c0)='1:1', 0x3)
write(r4, &(0x7f0000000500)='1:2', 0x3)
write(r4, &(0x7f0000000540)='1:3', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f00000005c0), 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r6, &(0x7f0000000640)='1', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0)
write(r7, &(0x7f00000006c0)='2', 0x1)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r8, &(0x7f00000007c0)='active', 0x6)

866.017168ms ago: executing program 5 (id=3154):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMWRITEOOB(r1, 0xc0104d03, &(0x7f0000000140)={0x1e7, 0x100000, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940))
madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0)

767.422ms ago: executing program 3 (id=3147):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMWRITEOOB(r1, 0xc0104d03, &(0x7f0000000140)={0x1e7, 0x100000, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

90.958908ms ago: executing program 3 (id=3148):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMWRITEOOB(r1, 0xc0104d03, &(0x7f0000000140)={0x1e7, 0x100000, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940))
madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=3149):
r0 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0xc044)

kernel console output (not intermixed with test programs):

 address 0xAB, skipping
[ 1091.114588][T14349] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1091.248693][ T4327] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1091.263305][ T4327] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1091.272518][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.285061][ T4327] usb 3-1: config 0 descriptor??
[ 1091.295773][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1091.775792][   T49] Bluetooth: hci5: command 0x040f tx timeout
[ 1092.317947][T14349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1092.429041][ T4327] ldusb 3-1:0.55: Interrupt in endpoint not found
[ 1092.483510][T14349] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1092.502093][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1092.659550][T14349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.778038][ T5512] device hsr_slave_0 left promiscuous mode
[ 1092.815370][ T5512] device hsr_slave_1 left promiscuous mode
[ 1093.136985][ T5512] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1093.147312][ T5512] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1093.181536][ T5512] device bridge_slave_1 left promiscuous mode
[ 1094.048711][   T49] Bluetooth: hci5: command 0x0419 tx timeout
[ 1094.082880][T14533] 9pnet_fd: Insufficient options for proto=fd
[ 1094.241186][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1094.366123][ T5512] device bridge_slave_0 left promiscuous mode
[ 1094.372634][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1094.512450][   T14] usb 3-1: USB disconnect, device number 22
[ 1094.570782][T14539] loop0: detected capacity change from 0 to 1024
[ 1094.602726][T14539] hfsplus: unable to parse mount options
[ 1096.710242][   T49] Bluetooth: hci5: command 0x0405 tx timeout
[ 1099.792100][ T5512] team0 (unregistering): Port device team_slave_1 removed
[ 1099.909274][ T5512] team0 (unregistering): Port device team_slave_0 removed
[ 1100.075544][ T5512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1100.235020][ T5512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1100.940792][ T5512] bond0 (unregistering): Released all slaves
[ 1101.155831][T14577] sch_tbf: burst 6281 is lower than device lo mtu (32783) !
[ 1101.269897][T14349] device hsr_slave_0 entered promiscuous mode
[ 1101.284005][   T26] audit: type=1800 audit(1786063798.252:85): pid=14593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2206" name="power" dev="configfs" ino=102028 res=0 errno=0
[ 1101.461134][T14349] device hsr_slave_1 entered promiscuous mode
[ 1101.680892][T14452] chnl_net:caif_netlink_parms(): no params data found
[ 1101.868462][T14594] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1103.253885][T14452] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1103.261160][T14452] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1103.292769][T14452] device bridge_slave_0 entered promiscuous mode
[ 1103.320376][T14452] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1103.329044][T14452] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1103.338052][T14452] device bridge_slave_1 entered promiscuous mode
[ 1104.488077][T14622] loop0: detected capacity change from 0 to 512
[ 1104.811342][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1104.827481][T14622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1104.945284][T14622] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1104.971806][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1105.073356][T14452] team0: Port device team_slave_0 added
[ 1105.149898][T14452] team0: Port device team_slave_1 added
[ 1106.422624][   T26] audit: type=1800 audit(1786063803.053:86): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2211" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1106.717838][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1106.768622][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1107.013823][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1107.037687][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1107.044803][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1107.090770][T11125] EXT4-fs (loop0): unmounting filesystem.
[ 1107.098625][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1107.647231][T14452] device hsr_slave_0 entered promiscuous mode
[ 1107.697238][T14452] device hsr_slave_1 entered promiscuous mode
[ 1107.721189][T14452] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1107.757381][T14452] Cannot create hsr debugfs directory
[ 1108.670480][T14349] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1108.701263][T14349] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1110.157727][T14349] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1110.189002][T14349] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1110.390209][T14349] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1110.488981][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1110.516947][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1110.576147][T14349] 8021q: adding VLAN 0 to HW filter on device team0
[ 1110.767924][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'.
[ 1112.330367][T14698] overlayfs: missing 'lowerdir'
[ 1112.568519][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1112.614291][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1112.655393][T14698] netlink: 'syz.4.2222': attribute type 1 has an invalid length.
[ 1112.664427][T14698] netlink: 'syz.4.2222': attribute type 2 has an invalid length.
[ 1112.675781][T14332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.683829][T14332] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1113.907574][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1113.924900][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1113.965664][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1113.995835][T14332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1114.003248][T14332] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1114.066273][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1114.320877][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1114.425838][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1115.271358][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1115.593340][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1115.806060][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1116.016127][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1116.413946][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1116.652384][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1116.955985][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1117.122376][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1117.394958][T14349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1118.414638][T14452] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1118.499105][T14452] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1118.539641][T14452] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1118.578313][T14452] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1118.854036][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1118.882350][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1119.040364][T14349] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1119.309744][T14452] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1119.379916][T14781] ./file0: Can't open blockdev
[ 1119.766663][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1119.781019][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1119.871541][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1119.891719][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1119.913820][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1119.949616][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1120.037812][T14452] 8021q: adding VLAN 0 to HW filter on device team0
[ 1120.051905][T14349] device veth0_vlan entered promiscuous mode
[ 1120.071261][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1120.084540][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1120.163991][T14349] device veth1_vlan entered promiscuous mode
[ 1120.205490][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1120.228223][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1120.278117][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1120.285336][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1120.302859][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1120.317673][   T49] Bluetooth: hci1: ACL packet too small
[ 1120.327344][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1120.336379][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1120.344237][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1120.371135][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1120.380602][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1120.411458][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1120.458529][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1120.510345][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1120.566392][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1120.773301][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1120.988432][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1121.248184][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'.
[ 1121.621968][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1121.631358][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1121.715851][T14349] device veth0_macvtap entered promiscuous mode
[ 1121.755203][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1121.805779][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1121.860068][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1121.932445][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1121.964998][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1122.011830][T14349] device veth1_macvtap entered promiscuous mode
[ 1122.036957][T14452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1122.092634][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1122.157280][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.189127][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1122.233172][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.276494][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1122.348306][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.402513][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1122.453958][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.481658][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1122.500304][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.527512][T14349] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1122.567018][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1122.600451][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1122.641942][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.685658][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.733603][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.768296][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.791419][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.809177][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.831223][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.871916][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.892898][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.928255][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.972415][T14349] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1123.010146][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1123.035789][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1123.104350][T14843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2254'.
[ 1123.131346][T14349] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1123.157186][T14349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1123.257260][T14349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1123.371434][T14349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.051199][T14334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1124.062899][   T49] Bluetooth: hci4: unexpected cc 0x0c05 length: 4 > 1
[ 1124.080620][T14334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1124.118334][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1124.186158][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1124.218636][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1124.226320][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1124.395729][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1124.410993][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1124.437044][T14452] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1124.776010][T14877] loop3: detected capacity change from 0 to 8
[ 1124.869562][T14877] SQUASHFS error: Failed to read block 0x6de: -5
[ 1124.890809][T14877] SQUASHFS error: Unable to read metadata cache entry [6dc]
[ 1124.922326][T14877] SQUASHFS error: Unable to read directory block [26067d:ffff]
[ 1126.118455][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1126.134037][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1126.247239][T14452] device veth0_vlan entered promiscuous mode
[ 1126.272206][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1126.289239][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1126.341455][T14452] device veth1_vlan entered promiscuous mode
[ 1126.359832][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1126.377900][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1126.399278][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1126.501875][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1126.521920][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1126.550187][T14893] loop0: detected capacity change from 0 to 32768
[ 1126.594777][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1126.626958][T14452] device veth0_macvtap entered promiscuous mode
[ 1126.638598][T14893] XFS (loop0): Mounting V5 Filesystem
[ 1126.664740][T14452] device veth1_macvtap entered promiscuous mode
[ 1126.709057][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.720681][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.731471][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.742840][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.753969][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.765038][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.777705][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.788724][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.799770][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.810830][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.821511][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.832559][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.844843][T14452] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1126.854600][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1126.868512][ T7992] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1126.878011][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1126.912572][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1126.935069][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1126.984043][T14893] XFS (loop0): Ending clean mount
[ 1127.000548][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1127.045514][T14893] XFS (loop0): Quotacheck needed: Please wait.
[ 1127.099951][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1127.116071][ T7992] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00
[ 1127.146386][ T7992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.146857][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1127.248711][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1127.285181][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1127.307707][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1127.328147][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1127.349363][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1127.365135][T14893] XFS (loop0): Quotacheck: Done.
[ 1127.370439][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1127.432173][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1127.475138][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1127.495776][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1127.542812][T14452] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1127.576778][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1127.606499][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1127.625627][T11125] XFS (loop0): Unmounting Filesystem
[ 1127.927660][ T7992] r8152-cfgselector 4-1: reset high-speed USB device number 5 using dummy_hcd
[ 1127.942718][T14951] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[ 1127.953942][T14951] overlayfs: missing 'lowerdir'
[ 1128.183085][ T7992] r8152-cfgselector 4-1: device descriptor read/64, error -32
[ 1128.490415][ T7992] r8152-cfgselector 4-1: reset high-speed USB device number 5 using dummy_hcd
[ 1128.538189][T14969] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[ 1128.708925][ T7992] r8152-cfgselector 4-1: device descriptor read/64, error -32
[ 1129.006032][ T7992] r8152-cfgselector 4-1: reset high-speed USB device number 5 using dummy_hcd
[ 1129.060653][ T7992] r8152-cfgselector 4-1: device descriptor read/8, error -32
[ 1129.294586][   T49] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1129.304095][   T49] Bluetooth: hci1: Injecting HCI hardware error event
[ 1129.320522][ T4283] Bluetooth: hci1: hardware error 0x00
[ 1129.358451][ T7992] r8152-cfgselector 4-1: reset high-speed USB device number 5 using dummy_hcd
[ 1129.391870][ T7992] r8152-cfgselector 4-1: device descriptor read/8, error -32
[ 1129.527022][T14452] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.536958][ T7992] r8152 4-1:1.0: USB reset failed, errno=-19
[ 1129.542169][T14452] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.554148][ T7992] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1129.561786][T14452] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.576216][T14452] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.585493][ T7992] r8152-cfgselector 4-1: USB disconnect, device number 5
[ 1129.618273][T14998] netlink: 'syz.2.2297': attribute type 10 has an invalid length.
[ 1129.659960][T14998] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1129.753820][ T7992] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1129.935523][ T7992] usb 4-1: device descriptor read/64, error -32
[ 1129.950395][T14334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.983155][T14334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.015524][T13963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1130.128670][ T4453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1130.140220][ T4453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.158393][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1130.271640][T15011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2302'.
[ 1130.396594][ T7992] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1130.549355][T15018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2301'.
[ 1131.335307][ T7992] usb 4-1: device descriptor read/64, error -32
[ 1131.438898][T15023] Mass Storage Function, version: 2009/09/11
[ 1131.450602][T15023] LUN: removable file: (no medium)
[ 1131.466750][   T26] audit: type=1800 audit(1786063826.500:87): pid=15023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2176" name="nofua" dev="configfs" ino=104619 res=0 errno=0
[ 1131.495759][ T7992] usb usb4-port1: attempt power cycle
[ 1131.517204][ T4283] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1131.545104][T15023] loop5: detected capacity change from 0 to 16
[ 1131.576439][T15031] binder_alloc: 15026: binder_alloc_buf, no vma
[ 1131.605432][T15023] erofs: Unknown parameter '
'
[ 1133.490963][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1133.515627][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1133.569135][ T7992] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1133.624384][ T7992] usb 4-1: device descriptor read/8, error -71
[ 1134.648297][ T4283] Bluetooth: hci3: unexpected subevent 0x06 length: 18 > 10
[ 1137.672373][ T4283] Bluetooth: hci3: command 0x2021 tx timeout
[ 1142.130828][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1142.171525][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1143.650294][T15113] siw: device registration error -23
[ 1150.228763][T15158] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1151.399918][T15187] loop5: detected capacity change from 0 to 512
[ 1152.983841][T15187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1153.415278][T15190] usb usb8: usbfs: process 15190 (syz.2.2343) did not claim interface 0 before use
[ 1153.913558][T14452] EXT4-fs (loop5): unmounting filesystem.
[ 1154.312192][T15207] loop0: detected capacity change from 0 to 4096
[ 1154.359698][T15207] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[ 1154.492300][T15207] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1154.524303][T15207] ntfs3: loop0: Failed to load $Extend.
[ 1154.573760][   T26] audit: type=1800 audit(1786063848.117:88): pid=15207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2351" name="file1" dev="loop0" ino=30 res=0 errno=0
[ 1158.058369][T15242] loop3: detected capacity change from 0 to 512
[ 1158.615380][T15242] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1159.430759][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1159.596861][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'.
[ 1160.206274][T15280] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2372'.
[ 1160.431361][T15287] futex_wake_op: syz.2.2373 tries to shift op by 144; fix this program
[ 1161.318943][T15291] netlink: 'syz.4.2375': attribute type 8 has an invalid length.
[ 1161.929887][ T4377] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[ 1162.229397][ T4377] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1162.346186][ T4377] usb 6-1: config 0 has no interface number 0
[ 1162.370647][ T4377] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 1162.431735][ T4377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1162.527854][ T4377] usb 6-1: Product: syz
[ 1162.540718][ T4377] usb 6-1: Manufacturer: syz
[ 1162.574010][ T4377] usb 6-1: SerialNumber: syz
[ 1162.620839][ T4377] usb 6-1: config 0 descriptor??
[ 1162.650357][ T4377] usb 6-1: selecting invalid altsetting 1
[ 1162.720482][ T4377] dvb_ttusb_budget: ttusb_init_controller: error
[ 1162.752328][ T4377] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1162.828529][   T26] audit: type=1800 audit(1786063855.837:89): pid=15322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2386" name="addr_trsvcid" dev="configfs" ino=104365 res=0 errno=0
[ 1163.164820][T15332] ip_tables: iptables: counters copy to user failed while replacing table
[ 1163.200643][ T4377] DVB: Unable to find symbol stv0299_attach()
[ 1163.606642][ T4377] DVB: Unable to find symbol tda8083_attach()
[ 1163.621183][ T4377] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[ 1163.692837][ T4377] usb 6-1: USB disconnect, device number 8
[ 1163.800540][T15355] loop3: detected capacity change from 0 to 128
[ 1164.771885][ T4283] Bluetooth: hci3: command 0x0000 tx timeout
[ 1165.937294][T15380] random: crng reseeded on system resumption
[ 1166.288310][T15347] loop0: detected capacity change from 0 to 32768
[ 1166.399595][T15347] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1166.546702][   T26] audit: type=1800 audit(1786063859.327:90): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2396" name="file1" dev="loop0" ino=17058 res=0 errno=0
[ 1166.578380][T15395] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2407'.
[ 1166.777666][T11125] ocfs2: Unmounting device (7,0) on (node local)
[ 1169.737205][T15428] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1170.798429][   T26] audit: type=1800 audit(1786063863.295:91): pid=15441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2421" name="b_vendor_code" dev="configfs" ino=105249 res=0 errno=0
[ 1171.006322][ T4377] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1172.831281][ T4377] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[ 1172.839566][ T4377] usb 6-1: config 0 has no interface number 0
[ 1172.892976][ T4377] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1172.951373][ T4377] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1172.987683][ T4377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.123780][ T4377] usb 6-1: Product: syz
[ 1174.128126][ T4377] usb 6-1: Manufacturer: syz
[ 1174.133312][ T4377] usb 6-1: SerialNumber: syz
[ 1174.141119][ T4377] usb 6-1: config 0 descriptor??
[ 1174.228874][ T4377] usb 6-1: can't set config #0, error -71
[ 1174.389689][ T4377] usb 6-1: USB disconnect, device number 9
[ 1181.069162][T15487] loop3: detected capacity change from 0 to 32768
[ 1181.180277][T15487] XFS (loop3): Mounting V5 Filesystem
[ 1181.239675][T15487] XFS (loop3): Ending clean mount
[ 1181.400601][T15531] random: crng reseeded on system resumption
[ 1183.107406][T13951] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1183.231114][T15545] batman_adv: batadv0: Adding interface: gretap1
[ 1183.260369][T15545] batman_adv: batadv0: The MTU of interface gretap1 is too small (1454) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[ 1184.797027][T15545] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[ 1184.805423][T15487] syz.3.2431 (15487) used greatest stack depth: 19392 bytes left
[ 1185.097824][T13951] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1186.238826][T14349] XFS (loop3): Unmounting Filesystem
[ 1186.847676][T13951] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.620318][T13951] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1191.540628][T15588] 9pnet_fd: Insufficient options for proto=fd
[ 1192.821748][T15593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1192.829184][T15593] IPv6: NLM_F_CREATE should be set when creating new route
[ 1192.836886][T15593] IPv6: NLM_F_CREATE should be set when creating new route
[ 1192.844230][T15593] IPv6: NLM_F_CREATE should be set when creating new route
[ 1195.263477][T15612] loop0: detected capacity change from 0 to 512
[ 1195.289738][T15612] EXT4-fs: inline encryption not supported
[ 1195.466727][T15612] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1196.366031][   T26] audit: type=1800 audit(1786063887.224:92): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2458" name="power" dev="configfs" ino=106546 res=0 errno=0
[ 1196.499016][T15612] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[ 1196.533037][T15612] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2457: invalid indirect mapped block 2683928664 (level 1)
[ 1196.610670][T15622] siw: device registration error -23
[ 1196.620313][T15612] EXT4-fs (loop0): 1 truncate cleaned up
[ 1196.626594][T15612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1197.756070][T15633] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[11718] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15633]
[ 1197.781419][T15633] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2459'.
[ 1197.791059][T15633] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2459'.
[ 1197.801096][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2459'.
[ 1197.812948][ T4283] Bluetooth: Wrong link type (-22)
[ 1197.870094][   T26] audit: type=1800 audit(1786063888.637:93): pid=15632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2457" name="file0" dev="loop0" ino=13 res=0 errno=0
[ 1198.024987][T11125] EXT4-fs (loop0): unmounting filesystem.
[ 1198.082815][T15635] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1198.371909][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1198.378664][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1200.504044][T15665] futex_wake_op: syz.2.2467 tries to shift op by 144; fix this program
[ 1204.359751][T13951] device hsr_slave_0 left promiscuous mode
[ 1204.410550][T13951] device hsr_slave_1 left promiscuous mode
[ 1204.424742][T13951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1204.471142][T13951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1204.512464][T15702] loop3: detected capacity change from 0 to 512
[ 1204.545054][T13951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1204.558955][T15702] EXT4-fs: inline encryption not supported
[ 1204.587727][T15702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1204.598239][T13951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1204.648178][T13951] device bridge_slave_1 left promiscuous mode
[ 1204.665383][T15708] loop5: detected capacity change from 0 to 128
[ 1204.906935][T13951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1204.937566][T13951] device bridge_slave_0 left promiscuous mode
[ 1205.457563][T13951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1205.514382][T15702] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[ 1205.709023][T15702] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2473: invalid indirect mapped block 2683928664 (level 1)
[ 1205.804389][T15719] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[14452] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15719]
[ 1205.865049][T15719] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2475'.
[ 1205.874990][T15719] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2475'.
[ 1205.884765][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2475'.
[ 1205.926541][   T49] Bluetooth: Wrong link type (-22)
[ 1206.148515][ T4283] Bluetooth: hci3: command 0x0406 tx timeout
[ 1206.190342][T15702] EXT4-fs (loop3): 1 truncate cleaned up
[ 1206.209220][T15702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1206.380192][T13951] device veth1_macvtap left promiscuous mode
[ 1206.389867][T13951] device veth0_macvtap left promiscuous mode
[ 1206.501146][T13951] device veth1_vlan left promiscuous mode
[ 1206.538490][T13951] device veth0_vlan left promiscuous mode
[ 1207.000467][   T26] audit: type=1800 audit(1786063897.181:94): pid=15725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2473" name="file0" dev="loop3" ino=13 res=0 errno=0
[ 1207.266473][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1209.778840][T15753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2489'.
[ 1209.934862][T15756] program syz.2.2490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1210.645393][T15764] overlayfs: missing 'lowerdir'
[ 1210.972181][T15765] netlink: 'syz.2.2493': attribute type 1 has an invalid length.
[ 1210.980587][T15765] netlink: 'syz.2.2493': attribute type 2 has an invalid length.
[ 1212.235591][T15779] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1212.956319][T13951] team0 (unregistering): Port device team_slave_1 removed
[ 1213.175745][T13951] team0 (unregistering): Port device team_slave_0 removed
[ 1213.367029][T13951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1213.592934][T13951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1216.328069][T13951] bond0 (unregistering): Released all slaves
[ 1216.496784][T15791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2503'.
[ 1216.982354][T15791] team0 (unregistering): Port device team_slave_0 removed
[ 1217.006182][ T4283] Bluetooth: hci5: command 0x0406 tx timeout
[ 1217.028929][T15791] team0 (unregistering): Port device team_slave_1 removed
[ 1217.464857][ T4327] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1219.362072][ T4327] usb 3-1: Using ep0 maxpacket: 8
[ 1219.372274][ T4327] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1219.381339][ T4327] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1219.392178][ T4327] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1219.403473][ T4327] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1219.414322][ T4327] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1219.428436][ T4327] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1219.443025][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.745854][ T4327] usb 3-1: GET_CAPABILITIES returned 0
[ 1219.762354][ T4327] usbtmc 3-1:16.0: can't read capabilities
[ 1219.983382][ T4327] usb 3-1: USB disconnect, device number 23
[ 1220.907180][T15858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2522'.
[ 1223.732554][T15910] loop3: detected capacity change from 0 to 1024
[ 1223.848195][T15914] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1224.160683][T15910] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1224.778527][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1225.357039][T15922] lo speed is unknown, defaulting to 1000
[ 1225.650436][ T6679] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1225.938957][ T6679] usb 4-1: Using ep0 maxpacket: 32
[ 1225.953455][ T6679] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1225.973870][ T6679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1226.766137][ T6679] usb 4-1: Product: syz
[ 1226.771741][ T6679] usb 4-1: Manufacturer: syz
[ 1226.777285][ T6679] usb 4-1: SerialNumber: syz
[ 1227.065959][ T6679] usb 4-1: selecting invalid altsetting 1
[ 1227.089027][ T6679] usb 4-1: unit 9 not found!
[ 1227.257208][ T6679] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[ 1227.312898][ T6679] usb 4-1: USB disconnect, device number 10
[ 1227.564849][T14346] udevd[14346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1227.803638][T15982] loop3: detected capacity change from 0 to 128
[ 1227.969343][ T4377] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1228.185007][ T4377] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1228.206248][ T4377] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1228.223219][T15991] Format for deleting device is "id" (uint).
[ 1228.253281][ T4377] usb 3-1: config 220 has no interface number 2
[ 1228.275076][ T4377] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1228.323949][ T4377] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1228.350442][ T4377] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1228.367147][ T4377] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1228.381227][ T4377] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1228.391082][ T4377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.409702][ T4377] usb 3-1: Product: syz
[ 1228.418325][ T4377] usb 3-1: Manufacturer: syz
[ 1228.432486][ T4377] usb 3-1: SerialNumber: syz
[ 1228.694119][ T4377] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[ 1228.725090][ T4377] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[ 1228.754483][ T4377] usb 3-1: No valid video chain found.
[ 1228.775387][ T4377] usb 3-1: selecting invalid altsetting 0
[ 1229.866778][ T4377] usb 3-1: selecting invalid altsetting 0
[ 1229.873639][ T4377] usbtest: probe of 3-1:220.1 failed with error -22
[ 1229.883801][ T4377] usb 3-1: USB disconnect, device number 24
[ 1230.060565][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'.
[ 1230.108406][T16008] syz.2.2568[16008] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1230.108562][T16008] syz.2.2568[16008] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1233.464641][T16060] loop3: detected capacity change from 0 to 1024
[ 1233.655058][T16060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1233.698041][T16060] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1233.790931][T16060] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.2585: lblock 3 mapped to illegal pblock 3 (length 1)
[ 1233.901932][T16060] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[ 1233.991972][T16060] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1233.991972][T16060] 
[ 1234.027286][T16081] netlink: 'syz.2.2590': attribute type 29 has an invalid length.
[ 1234.069901][T16075] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.2585: lblock 3 mapped to illegal pblock 3 (length 1)
[ 1234.097986][   T26] audit: type=1800 audit(1786063922.540:95): pid=16075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2585" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 1234.143379][T16081] netlink: 'syz.2.2590': attribute type 29 has an invalid length.
[ 1234.267686][T16082] netlink: 'syz.2.2590': attribute type 29 has an invalid length.
[ 1234.332422][T16083] netlink: 'syz.2.2590': attribute type 29 has an invalid length.
[ 1234.350597][T16085] netlink: 'syz.2.2590': attribute type 29 has an invalid length.
[ 1234.419205][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1236.037473][T16144] loop3: detected capacity change from 0 to 512
[ 1236.061525][T16144] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2608: inode has both inline data and extents flags
[ 1236.076470][T16144] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2608: couldn't read orphan inode 15 (err -117)
[ 1236.090232][T16144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1236.132901][T16147] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1236.158587][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1236.714617][T16164] loop3: detected capacity change from 0 to 512
[ 1236.842945][T16164] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.2615: missing EA_INODE flag
[ 1237.457179][T16164] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2615: error while reading EA inode 12 err=-117
[ 1237.627177][T16164] EXT4-fs (loop3): 1 orphan inode deleted
[ 1237.667866][T16164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1238.410506][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1239.795780][T16220] loop0: detected capacity change from 0 to 512
[ 1239.890200][T16220] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1239.940884][T16220] ext4 filesystem being mounted at /263/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1240.352577][T11125] EXT4-fs (loop0): unmounting filesystem.
[ 1241.117440][T16253] loop3: detected capacity change from 0 to 4096
[ 1241.176201][T16259] comedi comedi3: pcl816: I/O port conflict (0x100,16)
[ 1241.189623][   T49] Bluetooth: hci4: hardware error 0x00
[ 1241.218683][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1241.228336][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1241.555856][ T4283] Bluetooth: hci4: unexpected event for opcode 0x1009
[ 1241.588629][ T4283] Bluetooth: hci4: unexpected event for opcode 0x2003
[ 1241.612034][ T4283] Bluetooth: hci4: unexpected event for opcode 0x1002
[ 1243.775064][   T49] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1244.681785][T16288] loop5: detected capacity change from 0 to 128
[ 1244.770158][T16288] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1244.828877][T16288] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1244.838496][T16288] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1244.885228][ T7992] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1244.965043][T16284] kvm [16282]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00
[ 1245.026399][T16284] kvm [16282]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00
[ 1245.097597][T16284] kvm [16282]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00
[ 1245.106727][ T7992] usb 3-1: Using ep0 maxpacket: 8
[ 1245.115809][ T7992] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.163510][ T7992] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1245.199310][T16284] kvm [16282]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00
[ 1245.223792][ T7992] usb 3-1: config 1 has no interface number 0
[ 1245.254536][ T7992] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1245.265502][T16284] kvm [16282]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00
[ 1245.284089][ T7992] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 1245.337546][ T7992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.366762][ T7992] usb 3-1: Product: syz
[ 1245.376959][ T7992] usb 3-1: Manufacturer: syz
[ 1245.381674][ T7992] usb 3-1: SerialNumber: syz
[ 1245.554281][T16288] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1245.787176][T14452] EXT4-fs (loop5): unmounting filesystem.
[ 1246.178017][ T6675] usb 3-1: USB disconnect, device number 25
[ 1247.168772][T16321] serio: Serial port ptm0
[ 1248.105070][   T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1248.336835][   T14] usb 4-1: Using ep0 maxpacket: 16
[ 1248.344538][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1248.367491][   T14] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1248.411691][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1248.420009][   T14] usb 4-1: Product: syz
[ 1248.443715][   T14] usb 4-1: Manufacturer: syz
[ 1248.448602][   T14] usb 4-1: SerialNumber: syz
[ 1248.519682][   T14] usb 4-1: config 0 descriptor??
[ 1248.567577][   T14] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1248.605286][   T14] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1249.178326][   T14] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1249.848300][   T14] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1249.901832][   T14] em28xx 4-1:0.0: board has no eeprom
[ 1250.070272][   T14] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1250.100120][   T14] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1250.171416][   T14] usb 4-1: USB disconnect, device number 11
[ 1250.200764][   T14] em28xx 4-1:0.0: Disconnecting em28xx
[ 1250.235414][ T4377] em28xx 4-1:0.0: Binding DVB extension
[ 1250.608547][ T4377] em28xx 4-1:0.0: Registering input extension
[ 1250.645587][   T14] em28xx 4-1:0.0: Closing input extension
[ 1250.778286][T16397] tipc: Started in network mode
[ 1250.783551][T16397] tipc: Node identity 7f000001, cluster identity 4711
[ 1250.818724][   T14] em28xx 4-1:0.0: Freeing device
[ 1250.863685][T16397] tipc: New replicast peer: 127.0.0.1
[ 1250.911033][T16397] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1251.015951][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1251.062016][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1251.110978][T16404] tipc: Disabling bearer <udp:syz0>
[ 1251.443850][T16415] loop3: detected capacity change from 0 to 1024
[ 1251.609854][T16415] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1251.714980][T16415] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1252.352960][T16415] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1252.499997][T16415] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.2681: Freeing blocks not in datazone - block = 0, count = 4096
[ 1252.536456][T16415] EXT4-fs (loop3): Remounting filesystem read-only
[ 1252.545018][T16415] EXT4-fs (loop3): 1 orphan inode deleted
[ 1252.553519][T16415] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1252.670747][T16415] syz.3.2681: attempt to access beyond end of device
[ 1252.670747][T16415] loop3: rw=2051, sector=81920, nr_sectors = 180224 limit=1024
[ 1252.817298][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1253.111374][T16431] loop3: detected capacity change from 0 to 1024
[ 1253.138330][T16431] EXT4-fs: Ignoring removed bh option
[ 1253.221172][T16431] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1254.085416][T16447] overlayfs: failed to clone upperpath
[ 1254.515670][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2689'.
[ 1255.044177][T16463] loop0: detected capacity change from 0 to 128
[ 1255.155153][T16463] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 1255.474284][T16472] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1255.483815][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1255.591478][T16472] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1255.668685][T16472] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1255.714817][T16479] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1255.741759][T16472] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1255.804517][T16472] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1255.929070][T16472] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1256.172044][T16496] loop5: detected capacity change from 0 to 1024
[ 1256.235443][T16496] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1256.332474][T16496] EXT4-fs (loop5): revision level too high, forcing read-only mode
[ 1256.354360][T16496] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1256.853302][T16496] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.2705: Freeing blocks not in datazone - block = 0, count = 4096
[ 1257.117399][T16496] EXT4-fs (loop5): Remounting filesystem read-only
[ 1257.132270][T16496] EXT4-fs (loop5): 1 orphan inode deleted
[ 1257.138118][T16496] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1257.421623][T14452] EXT4-fs (loop5): unmounting filesystem.
[ 1257.725547][T16508] loop0: detected capacity change from 0 to 4096
[ 1257.755104][T16508] EXT4-fs: inline encryption not supported
[ 1257.769467][T16510] loop5: detected capacity change from 0 to 2048
[ 1257.801632][T16508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1257.871505][T16508] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ee1a8, mo2=0003]
[ 1257.924299][T16510] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1257.940232][   T26] audit: type=1800 audit(1786063944.844:96): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2709" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1257.977887][T16508] System zones: 0-5
[ 1258.041051][T16508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1258.055918][T16521] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.2709: Invalid inode table block 4 in block_group 0
[ 1258.167609][T16521] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.2709: Invalid inode table block 4 in block_group 0
[ 1258.209413][T16521] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 1258.236903][T16521] EXT4-fs error (device loop5): ext4_setattr:5634: inode #15: comm syz.5.2709: mark_inode_dirty error
[ 1258.330709][T16521] EXT4-fs error (device loop5) in ext4_setattr:5695: Corrupt filesystem
[ 1258.663497][T11125] EXT4-fs (loop0): unmounting filesystem.
[ 1259.048387][T14452] EXT4-fs (loop5): unmounting filesystem.
[ 1259.406774][T16542] using random self ethernet address
[ 1259.416984][T16542] using random host ethernet address
[ 1259.625651][T16530] loop3: detected capacity change from 0 to 32768
[ 1259.664549][T16530] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2712 (16530)
[ 1259.725085][T16530] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1259.755596][T16530] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 1259.854101][T16530] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1259.912129][T16530] BTRFS info (device loop3): use zstd compression, level 3
[ 1259.920011][T16530] BTRFS info (device loop3): using free space tree
[ 1259.956868][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'.
[ 1260.048918][ T6679] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1260.262436][ T6679] usb 3-1: Using ep0 maxpacket: 32
[ 1260.268036][T16530] BTRFS info (device loop3): enabling ssd optimizations
[ 1260.277838][ T6679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1260.295791][ T6679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59344, setting to 1024
[ 1260.307850][ T6679] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1260.317686][ T6679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.328744][ T6679] usb 3-1: config 0 descriptor??
[ 1260.334575][T16552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1260.345159][ T6679] hub 3-1:0.0: USB hub found
[ 1260.409594][   T26] audit: type=1800 audit(1786063947.156:97): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2712" name="bus" dev="loop3" ino=263 res=0 errno=0
[ 1260.548460][   T26] audit: type=1800 audit(1786063947.193:98): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2712" name="bus" dev="loop3" ino=263 res=0 errno=0
[ 1260.581138][ T6679] hub 3-1:0.0: 1 port detected
[ 1260.797414][   T26] audit: type=1800 audit(1786063947.352:99): pid=16587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2712" name="file1" dev="loop3" ino=260 res=0 errno=0
[ 1261.541394][T14349] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1261.586789][T16601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2727'.
[ 1261.638827][T16603] netlink: 'syz.4.2729': attribute type 13 has an invalid length.
[ 1261.724337][ T6679] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 1261.744261][ T6679] usb 3-1-port1: connect-debounce failed
[ 1262.117786][T16598] loop0: detected capacity change from 0 to 32768
[ 1262.557213][T16598] XFS (loop0): Mounting V5 Filesystem
[ 1262.621061][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1262.637720][T16611] usb 3-1: USB disconnect, device number 26
[ 1262.675064][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1262.675858][T16598] XFS (loop0): Ending clean mount
[ 1262.708698][T16598] XFS (loop0): Quotacheck needed: Please wait.
[ 1262.833005][T16598] XFS (loop0): Quotacheck: Done.
[ 1263.139837][T16601] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2727'.
[ 1263.242483][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2728'.
[ 1263.251922][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802f7bd800: rx timeout, send abort
[ 1263.278126][T11125] XFS (loop0): Unmounting Filesystem
[ 1264.029791][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1264.036742][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1266.899290][T16723] loop0: detected capacity change from 0 to 256
[ 1266.917699][T16723] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1266.974736][T16723] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[ 1267.020631][T16723] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1267.245487][   T26] audit: type=1800 audit(1786063953.557:100): pid=16727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2748" name="file1" dev="loop0" ino=1048756 res=0 errno=0
[ 1267.528608][T16740] netlink: 'syz.2.2753': attribute type 13 has an invalid length.
[ 1272.448998][T16810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1272.876711][T16829] overlayfs: failed to clone upperpath
[ 1272.889181][T16829] overlayfs: failed to clone upperpath
[ 1273.060650][T16834] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2782'.
[ 1273.735326][T16856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1273.839444][T16856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1273.938258][T16863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1275.111877][T16876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1275.712727][T16909] gadgetfs: bound to dummy_udc driver
[ 1276.102142][T16891] loop5: detected capacity change from 0 to 32768
[ 1276.902242][T16634] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[ 1276.911856][    C0] gadgetfs: connected
[ 1276.986351][T16634] gadgetfs: disconnected
[ 1277.047331][T16891] XFS (loop5): Mounting V5 Filesystem
[ 1277.172092][T16891] XFS (loop5): Ending clean mount
[ 1277.242896][    C0] gadgetfs: connected
[ 1277.249064][T16634] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1277.285560][T16634] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1277.294928][T16634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.344256][   T26] audit: type=1800 audit(1786063963.008:101): pid=16939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2796" name="bus" dev="loop5" ino=5769 res=0 errno=0
[ 1277.406810][T16908] gadgetfs: suspended from state 3
[ 1277.458623][T16908] gadgetfs: disconnected
[ 1277.478489][T16939] XFS (loop5): User initiated shutdown received.
[ 1277.487139][T16939] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[ 1277.508709][T16634] usb 2-1: can't set config #1, error -71
[ 1277.564758][T16634] usb 2-1: USB disconnect, device number 5
[ 1277.619426][T16939] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[ 1277.773511][T14452] XFS (loop5): Unmounting Filesystem
[ 1279.390687][T16634] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1279.604448][T16634] usb 4-1: Using ep0 maxpacket: 16
[ 1279.612145][T16634] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.644773][T16634] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1279.676001][T16634] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[ 1279.693849][T16634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1279.714826][T16634] usb 4-1: SerialNumber: syz
[ 1279.738803][T16634] usb 4-1: 0:2 : does not exist
[ 1280.395568][T16634] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[ 1280.473091][T16634] usb 4-1: USB disconnect, device number 12
[ 1280.593473][T14346] udevd[14346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1282.952191][T17034] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[ 1283.558187][ T6675] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1283.752454][ T6675] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1283.782867][ T6675] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1283.792092][ T6675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.870195][ T6675] usb 3-1: config 0 descriptor??
[ 1283.892605][ T6675] pwc: Askey VC010 type 2 USB webcam detected.
[ 1284.162228][T17063] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1284.311425][ T6675] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1284.324084][ T6675] pwc: recv_control_msg error -32 req 02 val 2700
[ 1284.371767][ T6675] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1284.404200][ T6675] pwc: recv_control_msg error -32 req 04 val 1000
[ 1284.445542][ T6675] pwc: recv_control_msg error -32 req 04 val 1300
[ 1284.510788][T17065] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1284.525626][ T6675] pwc: recv_control_msg error -32 req 04 val 1400
[ 1284.550775][ T6675] pwc: recv_control_msg error -32 req 02 val 2000
[ 1284.796736][ T6675] pwc: recv_control_msg error -71 req 04 val 1500
[ 1284.830703][ T6675] pwc: recv_control_msg error -71 req 02 val 2500
[ 1284.863170][ T6675] pwc: recv_control_msg error -71 req 02 val 2400
[ 1284.892663][ T6675] pwc: recv_control_msg error -71 req 02 val 2600
[ 1284.923481][ T6675] pwc: recv_control_msg error -71 req 02 val 2900
[ 1284.947263][ T6675] pwc: recv_control_msg error -71 req 02 val 2800
[ 1285.998658][ T6675] pwc: recv_control_msg error -71 req 04 val 1100
[ 1286.045306][ T6675] pwc: recv_control_msg error -71 req 04 val 1200
[ 1286.085530][ T6675] pwc: Registered as video103.
[ 1286.140107][ T6675] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[ 1286.205184][ T6675] usb 3-1: USB disconnect, device number 27
[ 1287.049401][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2853'.
[ 1287.161732][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2853'.
[ 1289.024044][T17133] jffs2: notice: (17133) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1291.534446][T17176] loop5: detected capacity change from 0 to 1024
[ 1291.714655][T17155] loop3: detected capacity change from 0 to 32768
[ 1291.908925][T17156] loop0: detected capacity change from 0 to 40427
[ 1291.969639][T17155] XFS (loop3): Mounting V5 Filesystem
[ 1291.984371][T17156] F2FS-fs (loop0): invalid crc value
[ 1292.052486][T17156] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1292.128437][T17155] XFS (loop3): Ending clean mount
[ 1292.254459][T17196] loop5: detected capacity change from 0 to 256
[ 1292.313458][T17191] kvm: pic: non byte write
[ 1292.426677][T17196] exFAT-fs (loop5): hint_cluster is invalid (17)
[ 1292.580092][T17156] F2FS-fs (loop0): Start checkpoint disabled!
[ 1292.727125][T17156] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1292.775923][T14349] XFS (loop3): Unmounting Filesystem
[ 1295.870896][T17241] loop5: detected capacity change from 0 to 512
[ 1295.926226][T17241] EXT4-fs: Ignoring removed i_version option
[ 1295.963454][T17241] EXT4-fs: Ignoring removed oldalloc option
[ 1296.037059][T17241] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1296.128865][T17241] EXT4-fs (loop5): 1 truncate cleaned up
[ 1296.135047][T17241] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1296.491235][T14452] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[ 1297.238428][T14452] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0)
[ 1297.267461][T17265] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in;
[ 1297.267461][T17265]    program syz.0.2887 not setting count and/or reply_len properly
[ 1297.333718][T14452] EXT4-fs (loop5): unmounting filesystem.
[ 1299.649205][T17273] loop3: detected capacity change from 0 to 32768
[ 1299.775032][T17273] XFS (loop3): Mounting V5 Filesystem
[ 1299.923500][T17273] XFS (loop3): Ending clean mount
[ 1300.239276][T14349] XFS (loop3): Unmounting Filesystem
[ 1300.372370][T17287] loop5: detected capacity change from 0 to 32768
[ 1300.405929][T17322] netlink: 'syz.2.2902': attribute type 2 has an invalid length.
[ 1300.513355][T17287] XFS (loop5): Mounting V5 Filesystem
[ 1300.681818][T17287] XFS (loop5): Ending clean mount
[ 1301.071241][T17345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1301.093970][T17345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1301.248988][T14452] XFS (loop5): Unmounting Filesystem
[ 1301.703423][   T26] audit: type=1800 audit(1786063985.795:102): pid=17358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2901" name="size" dev="configfs" ino=113108 res=0 errno=0
[ 1301.866874][   T26] audit: type=1800 audit(1786063985.804:103): pid=17358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2901" name="zone_size" dev="configfs" ino=113109 res=0 errno=0
[ 1303.275343][T17383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1303.330657][T17383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1306.014098][T17417] ubi0: attaching mtd0
[ 1306.051073][T17417] ubi0: scanning is finished
[ 1306.064000][T17417] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1306.169478][T17421] UBIFS error (pid: 17421): cannot open "ubi0_0", error -19
[ 1306.234569][T17417] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1306.448060][T16611] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1306.842968][T16611] usb 4-1: Using ep0 maxpacket: 16
[ 1306.850379][T16611] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1306.914213][T16611] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1306.983164][T17443] random: crng reseeded on system resumption
[ 1307.915856][T16611] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1308.001609][T16611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.082496][T16611] usb 4-1: Product: syz
[ 1308.109593][T16611] usb 4-1: Manufacturer: syz
[ 1308.138111][T16611] usb 4-1: SerialNumber: syz
[ 1308.166298][T16611] usb 4-1: config 0 descriptor??
[ 1308.234589][T17448] loop0: detected capacity change from 0 to 8
[ 1308.421746][    C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1308.468893][T16611] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23
[ 1308.579382][T16611] imon:send_packet: packet tx failed (-71)
[ 1308.629977][T16611] imon 4-1:0.0: panel buttons/knobs setup failed
[ 1309.055052][T16611] rc_core: IR keymap rc-imon-pad not found
[ 1309.062541][T16611] Registered IR keymap rc-empty
[ 1309.109045][T16611] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1309.153654][T16611] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1309.197630][T16611] imon:send_packet: packet tx failed (-71)
[ 1309.236859][T16611] imon 4-1:0.0: remote input dev register failed
[ 1309.243888][T16611] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[ 1309.341687][T16611] imon 4-1:0.0: unable to initialize intf0, err 0
[ 1309.392432][T16611] imon:imon_probe: failed to initialize context!
[ 1309.410412][T16611] imon 4-1:0.0: unable to register, err -19
[ 1309.429182][T16611] usb 4-1: USB disconnect, device number 13
[ 1309.600017][ T4327] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1309.814093][ T4327] usb 3-1: Using ep0 maxpacket: 16
[ 1309.826170][T16611] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1309.839503][ T4327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1309.930774][ T4327] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1309.961627][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1309.996014][ T4327] usb 3-1: Product: syz
[ 1310.010417][ T4327] usb 3-1: Manufacturer: syz
[ 1310.031270][ T4327] usb 3-1: SerialNumber: syz
[ 1310.056439][ T4327] usb 3-1: config 0 descriptor??
[ 1310.081002][T16611] usb 4-1: Using ep0 maxpacket: 16
[ 1310.095196][T16611] usb 4-1: device descriptor read/all, error -71
[ 1310.129689][ T4327] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1310.189038][ T4327] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 1311.419483][ T4327] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1311.699589][T17497] device syzkaller0 entered promiscuous mode
[ 1313.735525][ T4327] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1313.744634][ T4327] em28xx 3-1:0.0: board has no eeprom
[ 1313.885263][ T4327] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1313.903202][ T4327] em28xx 3-1:0.0: dvb set to bulk mode.
[ 1313.944300][ T6675] em28xx 3-1:0.0: Binding DVB extension
[ 1313.976632][ T4327] usb 3-1: USB disconnect, device number 28
[ 1314.017365][ T4327] em28xx 3-1:0.0: Disconnecting em28xx
[ 1314.282416][   T26] audit: type=1326 audit(1786063997.577:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf9259e0d9 code=0x0
[ 1314.344293][ T6675] em28xx 3-1:0.0: Registering input extension
[ 1314.395414][ T4327] em28xx 3-1:0.0: Closing input extension
[ 1314.443704][ T4327] em28xx 3-1:0.0: Freeing device
[ 1315.328636][T17541] loop0: detected capacity change from 0 to 128
[ 1315.624715][T17550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1315.703362][T17550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1318.870026][T17581] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1320.771419][T17591] loop3: detected capacity change from 0 to 512
[ 1320.805095][T17591] EXT4-fs: Ignoring removed nobh option
[ 1320.837935][T17591] EXT4-fs: Ignoring removed nobh option
[ 1320.884719][T17591] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1320.943486][T17591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002]
[ 1321.013558][T17591] System zones: 1-12
[ 1321.018794][T17591] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1321.050719][T17591] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 1042: comm syz.3.2959: invalid block
[ 1321.091043][T17591] EXT4-fs (loop3): Remounting filesystem read-only
[ 1321.112171][T17591] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2959: couldn't read orphan inode 11 (err -117)
[ 1321.167700][T17597] device syzkaller0 entered promiscuous mode
[ 1321.183465][T17591] EXT4-fs (loop3): Remounting filesystem read-only
[ 1321.208161][T17591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1321.413574][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1321.824814][T16633] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1322.030304][T16633] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1322.046238][T16633] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1322.076139][T16633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1322.111422][T16633] usb 6-1: config 0 descriptor??
[ 1322.130976][T16633] pwc: Askey VC010 type 2 USB webcam detected.
[ 1322.562432][T16633] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1322.575944][T16633] pwc: recv_control_msg error -32 req 02 val 2700
[ 1322.605903][T16633] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1324.280098][T16633] pwc: recv_control_msg error -32 req 04 val 1000
[ 1324.289771][T16633] pwc: recv_control_msg error -32 req 04 val 1300
[ 1324.333619][T16633] pwc: recv_control_msg error -32 req 04 val 1400
[ 1324.377260][T16633] pwc: recv_control_msg error -32 req 02 val 2000
[ 1324.414359][T16633] pwc: recv_control_msg error -32 req 02 val 2100
[ 1324.451605][T16633] pwc: recv_control_msg error -32 req 04 val 1500
[ 1324.700210][T16633] pwc: recv_control_msg error -71 req 02 val 2400
[ 1324.731497][T16633] pwc: recv_control_msg error -71 req 02 val 2600
[ 1324.742567][T16633] pwc: recv_control_msg error -71 req 02 val 2900
[ 1324.760351][T16633] pwc: recv_control_msg error -71 req 02 val 2800
[ 1324.786762][T16633] pwc: recv_control_msg error -71 req 04 val 1100
[ 1324.794348][T16633] pwc: recv_control_msg error -71 req 04 val 1200
[ 1324.868671][T16633] pwc: Registered as video103.
[ 1324.898029][T17632] device syzkaller0 entered promiscuous mode
[ 1324.913449][T16633] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26
[ 1324.967657][T16633] usb 6-1: USB disconnect, device number 10
[ 1325.534543][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2967'.
[ 1325.639967][T17643] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address
[ 1325.669657][T17643] bond1: (slave ip_vti0): Error -95 calling set_mac_address
[ 1325.684356][T17641] bond1 (unregistering): Released all slaves
[ 1325.817485][T17648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1325.828690][T17648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1326.211948][ T6675] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1326.306503][T17648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1326.329218][T17648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1327.969874][ T6675] usb 6-1: Using ep0 maxpacket: 16
[ 1327.977318][ T6675] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1328.024600][ T6675] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1328.049265][ T6675] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1328.076365][ T6675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1328.084580][ T6675] usb 6-1: Product: syz
[ 1328.098419][ T6675] usb 6-1: Manufacturer: syz
[ 1328.103695][ T6675] usb 6-1: SerialNumber: syz
[ 1328.266743][T17666] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1328.348235][ T6675] usb 6-1: 0:2 : does not exist
[ 1328.368870][ T6675] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1328.416739][ T6675] usb 6-1: USB disconnect, device number 11
[ 1328.687545][T14346] udevd[14346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1329.681763][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1329.688530][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1333.111739][T17740] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1333.121225][T17740] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1334.073563][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1334.090844][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1334.135528][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1334.149863][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1334.159955][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1334.278776][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1336.435367][T17742] lo speed is unknown, defaulting to 1000
[ 1336.518430][   T49] Bluetooth: hci0: command 0x0409 tx timeout
[ 1336.589825][T17762] loop0: detected capacity change from 0 to 2048
[ 1336.627947][T17762] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=11586, location=11586
[ 1336.664108][T17762] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1336.717628][T17742] chnl_net:caif_netlink_parms(): no params data found
[ 1336.861720][T17766] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 1338.070697][T17742] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1338.089430][T17742] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1338.136677][T17742] device bridge_slave_0 entered promiscuous mode
[ 1338.265022][T17786] CacheFiles: Failed to register: -95
[ 1338.397824][T17742] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1338.477928][T17742] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1338.700778][T17742] device bridge_slave_1 entered promiscuous mode
[ 1338.751597][   T49] Bluetooth: hci0: command 0x041b tx timeout
[ 1339.246368][T17742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1339.295444][T17742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1339.384747][T17799] device syzkaller0 entered promiscuous mode
[ 1339.413426][T17742] team0: Port device team_slave_0 added
[ 1339.491750][T17742] team0: Port device team_slave_1 added
[ 1339.678764][T17742] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1339.734489][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1339.823936][T17742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1339.863971][T17742] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1339.882102][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1339.968266][T17742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1341.370561][   T49] Bluetooth: hci0: command 0x040f tx timeout
[ 1343.387492][T17742] device hsr_slave_0 entered promiscuous mode
[ 1343.420578][T17742] device hsr_slave_1 entered promiscuous mode
[ 1343.436573][T17742] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1343.458388][T17742] Cannot create hsr debugfs directory
[ 1343.528417][   T49] Bluetooth: hci0: command 0x0419 tx timeout
[ 1344.853637][T17742] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.219787][T17742] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.411417][T17742] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.872185][T17742] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.988801][T17853] Bluetooth: MGMT ver 1.22
[ 1347.017915][T17852] loop3: detected capacity change from 0 to 1024
[ 1347.085111][T17852] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1347.260360][T17852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1349.697828][T17742] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1349.917338][T17742] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1349.980846][T17742] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1350.125755][T17742] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1350.234614][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1350.455974][T17742] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1350.500182][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1350.520947][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1350.620780][T17742] 8021q: adding VLAN 0 to HW filter on device team0
[ 1350.714073][T17873] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[ 1350.859651][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1351.039679][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1351.141715][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1351.149695][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1351.570940][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1351.629622][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1351.694304][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1351.702294][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1351.823818][T16634] libceph: connect (1)[c::]:6789 error -101
[ 1351.870765][T16634] libceph: mon0 (1)[c::]:6789 connect error
[ 1351.946216][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1351.991229][T17882] ceph: No mds server is up or the cluster is laggy
[ 1352.035497][T16634] libceph: connect (1)[c::]:6789 error -101
[ 1352.113081][T16634] libceph: mon0 (1)[c::]:6789 connect error
[ 1352.161300][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1352.334224][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1352.477934][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1352.595038][T16633] libceph: connect (1)[c::]:6789 error -101
[ 1352.679576][T16633] libceph: mon0 (1)[c::]:6789 connect error
[ 1352.752521][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1352.780868][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1352.918047][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1352.984729][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1353.061638][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1353.151497][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1353.184902][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1353.215019][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1353.231159][ T6675] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1353.243170][T17742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1353.434665][ T6675] usb 4-1: Using ep0 maxpacket: 8
[ 1353.443531][ T6675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 110, changing to 10
[ 1353.504078][ T6675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26466, setting to 1024
[ 1353.549550][ T6675] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1353.577375][ T6675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1353.616618][ T6675] usb 4-1: config 0 descriptor??
[ 1353.628162][T17893] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1353.754480][T17845] lo speed is unknown, defaulting to 1000
[ 1353.882257][ T6675] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1354.227470][    C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1
[ 1354.239778][ T4323] usb 4-1: USB disconnect, device number 16
[ 1354.340908][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1354.361764][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1354.383464][T17742] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1356.668756][ T3933] configfs-gadget.g1 gadget.0 usb0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1358.463641][T17943] input: syz1 as /devices/virtual/input/input27
[ 1359.373281][T17949] loop5: detected capacity change from 0 to 256
[ 1360.128529][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1360.202865][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1360.923963][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1360.955059][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1360.998432][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1361.038719][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1362.468031][T17742] device veth0_vlan entered promiscuous mode
[ 1362.487513][T17966] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[ 1363.230339][T17987] tipc: Started in network mode
[ 1363.236250][T17987] tipc: Node identity 06df9d8db911, cluster identity 4711
[ 1363.277694][T17987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1363.331779][T17962] tipc: Disabling bearer <eth:syzkaller0>
[ 1363.662704][   T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1363.687410][   T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1363.705193][   T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1363.715465][   T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1363.725164][   T49] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1363.733837][   T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1363.802749][T17742] device veth1_vlan entered promiscuous mode
[ 1363.917856][T18002] loop3: detected capacity change from 0 to 512
[ 1364.482202][T18008] loop0: detected capacity change from 0 to 128
[ 1364.523749][T18002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1364.533039][T18002] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1364.881462][   T49] Bluetooth: hci0: command 0x0407 tx timeout
[ 1365.737609][T17998] lo speed is unknown, defaulting to 1000
[ 1365.745441][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1365.806124][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1365.821005][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1365.916209][T18016] loop5: detected capacity change from 0 to 512
[ 1365.927264][ T4289] Bluetooth: hci6: command 0x0409 tx timeout
[ 1365.961791][T17742] device veth0_macvtap entered promiscuous mode
[ 1365.979231][T17742] device veth1_macvtap entered promiscuous mode
[ 1366.170867][T18016] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1366.278991][T18016] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1366.867095][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1367.031513][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1367.075249][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1367.144436][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.155612][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1367.166725][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.177113][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1367.188120][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.199359][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1367.211401][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.710276][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1367.764541][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.806131][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1367.829242][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.842036][T17742] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1367.864265][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1367.884967][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1367.951772][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1368.006930][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.104177][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1368.138968][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.150900][ T4289] Bluetooth: hci6: command 0x041b tx timeout
[ 1368.185139][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1368.212950][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.242765][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1368.266815][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.305546][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1368.317133][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.327724][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1368.339116][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.353079][T17742] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1368.353315][T14452] EXT4-fs (loop5): unmounting filesystem.
[ 1370.489103][ T4289] Bluetooth: hci6: command 0x040f tx timeout
[ 1372.478038][T18039] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1372.490106][T18039] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1372.500037][T18039] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1372.510001][T18039] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1372.641359][T14322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1372.661384][T14322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1372.675226][T17742] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.686683][T17742] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.696456][T17742] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.706194][T17742] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.936638][ T4289] Bluetooth: hci6: command 0x0419 tx timeout
[ 1372.973709][T18055] loop3: detected capacity change from 0 to 128
[ 1373.007336][T18055] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1373.109271][T18055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1373.126971][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1373.290758][T18062] loop5: detected capacity change from 0 to 8192
[ 1374.183422][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1374.257129][T18055] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1374.555077][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1375.019946][T18059] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[ 1375.033930][T17998] chnl_net:caif_netlink_parms(): no params data found
[ 1375.205042][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1375.621524][ T5755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1375.655494][ T5755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1375.825134][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1375.929240][T17998] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1376.044901][T17998] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1376.150304][ T4305] Bluetooth: Error in BCSP hdr checksum
[ 1376.742793][T17998] device bridge_slave_0 entered promiscuous mode
[ 1376.790674][T17998] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1378.137543][T17998] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1378.323147][ T4289] Bluetooth: hci7: Opcode 0x1003 failed: -110
[ 1378.332461][   T49] Bluetooth: hci7: command 0x1003 tx timeout
[ 1378.784985][T17998] device bridge_slave_1 entered promiscuous mode
[ 1379.016800][T18100] loop3: detected capacity change from 0 to 256
[ 1379.062103][T17998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1379.085479][T18100] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1379.289785][T17998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1382.871580][T17998] team0: Port device team_slave_0 added
[ 1382.942833][T17998] team0: Port device team_slave_1 added
[ 1383.026471][T17998] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1383.056552][T17998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1383.129986][T17998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1383.188866][T17998] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1383.222074][T17998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1383.332262][T17998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1384.577712][T17998] device hsr_slave_0 entered promiscuous mode
[ 1384.628759][T17998] device hsr_slave_1 entered promiscuous mode
[ 1384.663326][T17998] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1384.672511][T17998] Cannot create hsr debugfs directory
[ 1388.577467][   T94] block nbd0: Attempted send on invalid socket
[ 1388.586441][   T94] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1389.073112][   T94] block nbd0: Attempted send on invalid socket
[ 1389.079621][   T94] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1389.095809][T18153] Mount JFS Failure: -5
[ 1394.586578][ T4345] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1394.803482][ T4345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1394.831961][ T4345] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1394.879638][ T4345] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1394.928448][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1394.958886][ T4345] usb 4-1: Product: syz
[ 1394.980578][ T4345] usb 4-1: Manufacturer: syz
[ 1394.990987][ T4345] usb 4-1: SerialNumber: syz
[ 1395.029234][ T4345] cdc_mbim 4-1:1.0: skipping garbage
[ 1395.245944][T18173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1395.342772][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1395.350093][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1396.878467][T18193] loop7: detected capacity change from 0 to 512
[ 1397.424490][T18193] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1397.540330][T18193] EXT4-fs (loop7): 1 truncate cleaned up
[ 1397.546469][T18193] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1397.603574][T18197] x_tables: arp_tables: NFQUEUE target: not valid for this family
[ 1398.061231][T18191] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1398.071414][T18191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1398.079050][T18191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1398.252449][T17742] EXT4-fs (loop7): unmounting filesystem.
[ 1398.295449][T17998] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1398.318156][T17998] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1398.364105][ T4345] cdc_mbim 4-1:1.0: bind() failure
[ 1398.372500][T17998] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1398.393128][ T4345] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1398.400415][ T4345] cdc_ncm 4-1:1.1: bind() failure
[ 1398.426906][T18203] loop5: detected capacity change from 0 to 512
[ 1398.459032][ T4345] usb 4-1: USB disconnect, device number 17
[ 1398.483435][T17998] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1398.506491][T18203] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.3070: iget: bad i_size value: 38620345925642
[ 1398.835327][T18203] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3070: couldn't read orphan inode 15 (err -117)
[ 1398.883377][T18203] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1399.128665][T18199] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1399.477261][T17998] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1399.955943][T14452] EXT4-fs (loop5): unmounting filesystem.
[ 1400.029674][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1400.753004][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1400.814196][T17998] 8021q: adding VLAN 0 to HW filter on device team0
[ 1400.937394][T17998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1401.024354][T17998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1401.062912][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1401.071853][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1401.827177][T14332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1401.835908][T14332] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1402.269769][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1402.278569][T18223] futex_wake_op: syz.5.3073 tries to shift op by 36; fix this program
[ 1402.529467][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'.
[ 1402.608707][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1402.747253][T14332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1402.754548][T14332] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1403.036345][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1403.132971][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1403.670040][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1403.724127][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1403.819553][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1404.095036][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1404.844054][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1404.899085][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1404.952860][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1404.988249][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1405.023628][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1405.074493][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1405.140910][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1405.732089][T18239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1406.157731][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1406.202525][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1406.289956][T17998] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1409.052429][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1409.079311][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1409.230467][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1409.273253][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1409.314791][T17998] device veth0_vlan entered promiscuous mode
[ 1409.360286][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1409.376617][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1409.461611][T17998] device veth1_vlan entered promiscuous mode
[ 1409.655942][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1409.698163][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1409.742135][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1409.803795][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1409.819675][T17998] device veth0_macvtap entered promiscuous mode
[ 1409.886573][T17998] device veth1_macvtap entered promiscuous mode
[ 1409.986926][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1410.053426][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1410.094909][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1410.165699][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1410.220669][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1410.336251][T18254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3079'.
[ 1411.169786][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1411.267398][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1411.333560][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1411.384644][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1411.470953][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1411.544887][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1411.606064][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1411.649412][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1411.815654][T18259] wusb3801 0-004a: supply vbus not found, using dummy regulator
[ 1411.951496][T18259] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a
[ 1412.766972][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1412.849692][T17998] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1412.928581][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1412.960451][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1413.029072][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1413.127038][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1413.213866][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1413.318952][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1413.377939][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1413.479588][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1413.550768][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1413.657456][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1414.729597][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1414.750643][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1414.771875][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1414.814771][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1414.857550][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1414.909498][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1414.964537][T17998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1414.997916][T17998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1415.055603][T17998] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1415.109865][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1415.129618][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1415.164425][T17998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.206738][T17998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.239079][T17998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.326815][T17998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1417.545119][T18282] xt_CT: No such helper "netbios-ns"
[ 1418.052069][T18295] loop5: detected capacity change from 0 to 512
[ 1418.072995][T18298] loop3: detected capacity change from 0 to 8
[ 1418.165538][T18295] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1418.431677][T18298] SQUASHFS error: Unable to read inode 0x11f
[ 1418.452998][T18295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022]
[ 1418.627768][T18295] System zones: 1-2, 4-12, 8-8
[ 1418.819750][T18295] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.3084: iget: bad i_size value: 38620345925642
[ 1419.045017][T18295] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3084: couldn't read orphan inode 15 (err -117)
[ 1419.282415][T18306] loop7: detected capacity change from 0 to 512
[ 1419.357919][T18306] EXT4-fs (loop7): 1 truncate cleaned up
[ 1419.363847][T18306] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1419.705342][T18292] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1419.983349][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1421.333253][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1421.371716][T18295] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1421.417100][T18303] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1421.454922][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1421.502139][T18303] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[ 1421.534750][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1421.566199][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1421.638334][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1421.675313][ T4323] Process accounting resumed
[ 1422.575444][T14452] EXT4-fs (loop5): unmounting filesystem.
[ 1426.887756][T18337] loop3: detected capacity change from 0 to 1024
[ 1426.941996][T18337] hfsplus: unable to parse mount options
[ 1427.028949][T18253] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1427.093062][T18337] loop3: detected capacity change from 0 to 4096
[ 1427.102811][T18337] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1427.314239][T18096] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 1427.326350][T18096] CPU: 1 PID: 18096 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1427.334234][T18096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1427.345882][T18096] Workqueue: hci5 hci_rx_work
[ 1427.351691][T18096] Call Trace:
[ 1427.355106][T18096]  <TASK>
[ 1427.358175][T18096]  dump_stack_lvl+0x188/0x24e
[ 1427.363515][T18096]  ? show_regs_print_info+0x12/0x12
[ 1427.370531][T18096]  ? load_image+0x410/0x410
[ 1427.375376][T18096]  sysfs_create_dir_ns+0x26a/0x290
[ 1427.381053][T18096]  ? __lock_acquire+0x7c40/0x7c40
[ 1427.387293][T18096]  ? sysfs_warn_dup+0xa0/0xa0
[ 1427.393207][T18096]  ? do_raw_spin_unlock+0x11d/0x230
[ 1427.399264][T18096]  kobject_add_internal+0x617/0xca0
[ 1427.404793][T18096]  kobject_add+0x160/0x230
[ 1427.409655][T18096]  ? kobject_init+0x1c0/0x1c0
[ 1427.414571][T18096]  ? __raw_spin_lock_init+0x41/0x100
[ 1427.420127][T18096]  ? klist_children_get+0x50/0x50
[ 1427.426024][T18096]  ? get_device_parent+0x121/0x3e0
[ 1427.431735][T18096]  device_add+0x470/0x1050
[ 1427.436598][T18096]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1427.442150][T18096]  le_conn_complete_evt+0xfac/0x15c0
[ 1427.447795][T18096]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[ 1427.454825][T18096]  ? lockdep_hardirqs_on+0x94/0x140
[ 1427.460923][T18096]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1427.467010][T18096]  ? hci_le_meta_evt+0x14b/0x560
[ 1427.473330][T18096]  ? skb_pull_data+0xec/0x1f0
[ 1427.478606][T18096]  hci_le_conn_complete_evt+0x183/0x440
[ 1427.484347][T18096]  ? hci_remote_host_features_evt+0x230/0x230
[ 1427.490590][T18096]  hci_event_packet+0x7b3/0x1290
[ 1427.495616][T18096]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1427.501319][T18096]  ? bis_list+0x280/0x280
[ 1427.506014][T18096]  ? kcov_remote_start+0x1b1/0x7e0
[ 1427.512299][T18096]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1427.519772][T18096]  hci_rx_work+0x3eb/0xd40
[ 1427.524974][T18096]  ? _raw_spin_unlock+0x40/0x40
[ 1427.531298][T18096]  ? process_one_work+0x7b4/0x1160
[ 1427.537899][T18096]  process_one_work+0x8ab/0x1160
[ 1427.543458][T18096]  ? worker_detach_from_pool+0x240/0x240
[ 1427.549606][T18096]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1427.555577][T18096]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1427.561301][T18096]  ? wq_worker_running+0x97/0x190
[ 1427.566438][T18096]  worker_thread+0xaf5/0x12a0
[ 1427.571831][T18096]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1427.578265][T18096]  kthread+0x29d/0x330
[ 1427.582580][T18096]  ? worker_clr_flags+0x1a0/0x1a0
[ 1427.588140][T18096]  ? kthread_blkcg+0xd0/0xd0
[ 1427.592808][T18096]  ret_from_fork+0x1f/0x30
[ 1427.597579][T18096]  </TASK>
[ 1427.620900][T18096] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1427.635713][T18096] Bluetooth: hci5: failed to register connection device
[ 1428.951039][T18337] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[ 1429.009965][T18337] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1429.019037][T18337] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1429.040023][T18337] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1429.049153][T18337] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[ 1429.070047][T18337] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1429.079000][T18337] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1429.099907][T18337] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1429.109076][T18337] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[ 1429.131892][T18337] ntfs: volume version 3.1.
[ 1433.690591][T14349] __ntfs_warning: 11 callbacks suppressed
[ 1433.690691][T14349] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[ 1435.006261][T18096] Bluetooth: hci5: command 0x0406 tx timeout
[ 1437.188850][T18305] EXT4-fs (loop7): unmounting filesystem.
[ 1437.458152][T18381] dlm: no local IP address has been set
[ 1437.805383][T18381] dlm: cannot start dlm midcomms -107
[ 1440.080024][T18096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1440.098448][T18096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1440.108162][T18096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1440.129712][T18096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1440.145421][T18096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1440.154408][T18096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1442.085182][T18390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3092'.
[ 1442.353023][   T49] Bluetooth: hci4: command 0x0409 tx timeout
[ 1444.431316][T18434] loop3: detected capacity change from 0 to 512
[ 1444.577781][T18434] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1444.581537][T18096] Bluetooth: hci4: command 0x041b tx timeout
[ 1444.584270][T18434] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[ 1444.693191][T18434] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 1444.785535][T18434] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.3110: attempt to clear invalid blocks 2 len 1
[ 1444.868400][T13963] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.881027][T18434] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3110: invalid indirect mapped block 1819239214 (level 0)
[ 1444.970908][T18434] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3110: invalid indirect mapped block 1819239214 (level 1)
[ 1444.997054][T18434] EXT4-fs (loop3): 1 truncate cleaned up
[ 1445.024310][T18434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1445.323307][T13963] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1445.492907][   T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1445.516956][   T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1445.528704][   T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1445.536959][   T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1445.549941][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1445.557593][   T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1446.242945][T18393] lo speed is unknown, defaulting to 1000
[ 1446.947481][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[ 1447.130599][T14349] EXT4-fs (loop3): unmounting filesystem.
[ 1448.318534][T13963] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.361450][ T4289] Bluetooth: hci0: command 0x0409 tx timeout
[ 1449.187335][ T4289] Bluetooth: hci4: command 0x0419 tx timeout
[ 1450.608367][ T4289] Bluetooth: hci0: command 0x041b tx timeout
[ 1451.038789][T13963] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1452.473144][T18441] lo speed is unknown, defaulting to 1000
[ 1452.938584][T18096] Bluetooth: hci0: command 0x040f tx timeout
[ 1453.090044][T18487] md: could not open device unknown-block(1,0).
[ 1453.144440][T18491] loop3: detected capacity change from 0 to 1024
[ 1455.294164][ T4289] Bluetooth: hci0: command 0x0419 tx timeout
[ 1455.619672][T18487] md: personality for level  is not loaded!
[ 1455.839095][   T26] audit: type=1800 audit(1786064129.927:105): pid=18499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3119" name="file1" dev="loop3" ino=20 res=0 errno=0
[ 1457.407348][T18393] chnl_net:caif_netlink_parms(): no params data found
[ 1457.612470][ T4289] Bluetooth: hci0: command 0x0405 tx timeout
[ 1458.809283][T18096] Bluetooth: hci6: command 0x0409 tx timeout
[ 1459.144358][T18539] ieee802154 phy0 wpan0: encryption failed: -22
[ 1460.994320][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1461.000837][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1461.331436][T18096] Bluetooth: hci6: command 0x0409 tx timeout
[ 1462.635529][   T26] audit: type=1326 audit(1786064136.215:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.3130" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f668379e0d9 code=0x0
[ 1463.626491][T18393] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1463.637798][T18393] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1463.652711][T18393] device bridge_slave_0 entered promiscuous mode
[ 1463.661809][T18578] loop3: detected capacity change from 0 to 2048
[ 1463.679138][T18393] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1463.689284][T18578] EXT4-fs: Ignoring removed i_version option
[ 1463.714471][T18393] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1463.774709][T18393] device bridge_slave_1 entered promiscuous mode
[ 1463.795537][T18578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1463.804304][T18578] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1463.856556][T18578] fs-verity: sha512 using implementation "sha512-avx2"
[ 1464.077239][T18393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1464.098392][T18441] chnl_net:caif_netlink_parms(): no params data found
[ 1464.136736][T18578] EXT4-fs (loop3): unmounting filesystem.
[ 1464.154242][T18393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1464.422123][T18393] team0: Port device team_slave_0 added
[ 1464.500193][T18393] team0: Port device team_slave_1 added
[ 1466.820086][T18393] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1466.886806][T18393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1467.013078][T18393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1467.426446][T18624] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3137'.
[ 1467.712205][T18393] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1467.735231][T18393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1467.913541][T18393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1467.957503][T18441] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1467.967567][T18441] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1468.008559][T18441] device bridge_slave_0 entered promiscuous mode
[ 1468.139055][T18441] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1468.159655][T18441] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1468.181232][T18441] device bridge_slave_1 entered promiscuous mode
[ 1468.460262][T18441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1468.520418][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1468.559930][T13963] device hsr_slave_0 left promiscuous mode
[ 1468.567021][T13963] device hsr_slave_1 left promiscuous mode
[ 1468.662318][T13963] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1468.669859][T13963] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1468.700421][T13963] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1468.730273][T13963] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1468.774235][T13963] device bridge_slave_1 left promiscuous mode
[ 1468.784406][T13963] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1468.813024][T13963] device bridge_slave_0 left promiscuous mode
[ 1468.838002][T13963] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1469.041762][T13963] device veth1_macvtap left promiscuous mode
[ 1469.049948][T13963] device veth0_macvtap left promiscuous mode
[ 1469.064259][T13963] device veth1_vlan left promiscuous mode
[ 1469.078999][T13963] device veth0_vlan left promiscuous mode
[ 1469.389151][T18370] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1469.591745][T18370] usb 6-1: Using ep0 maxpacket: 16
[ 1469.600106][T18370] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1469.631348][T18370] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1469.674477][T18370] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1469.869856][T18370] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[ 1470.050586][T18370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1470.229881][T18370] usb 6-1: Product: syz
[ 1470.332720][T18370] usb 6-1: Manufacturer: syz
[ 1470.462152][T18370] usb 6-1: SerialNumber: syz
[ 1471.045074][   T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1471.054029][T18370] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu
[ 1471.080000][T18370] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1471.117745][T18370] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[ 1471.161014][T18370] usb 6-1: USB disconnect, device number 12
[ 1471.179290][T18572] udevd[18572]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1471.247978][   T14] usb 2-1: Using ep0 maxpacket: 16
[ 1471.256062][   T14] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1471.300076][   T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1471.318821][   T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1471.357876][   T14] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[ 1471.384842][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.395979][   T14] usb 2-1: Product: syz
[ 1471.400559][   T14] usb 2-1: Manufacturer: syz
[ 1471.405249][   T14] usb 2-1: SerialNumber: syz
[ 1472.677803][   T14] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu
[ 1472.689539][   T14] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1472.744790][   T14] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[ 1472.763254][   T14] usb 2-1: USB disconnect, device number 6
[ 1472.802544][T18572] udevd[18572]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1472.872134][T16611] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1473.012759][T13963] team0 (unregistering): Port device team_slave_1 removed
[ 1473.064710][T16611] usb 6-1: Using ep0 maxpacket: 16
[ 1473.082069][T16611] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1473.097609][T16611] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1473.117930][T16611] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1473.141605][T16611] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[ 1473.151298][T16611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1473.159536][T16611] usb 6-1: Product: syz
[ 1473.166369][T13963] team0 (unregistering): Port device team_slave_0 removed
[ 1473.175136][T16611] usb 6-1: Manufacturer: syz
[ 1473.180188][T16611] usb 6-1: SerialNumber: syz
[ 1473.491012][T13963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1473.576318][T18684] futex_wake_op: syz.1.3149 tries to shift op by 144; fix this program
[ 1473.987107][   T28] INFO: task syz.2.2954:17573 blocked for more than 143 seconds.
[ 1474.029469][   T28]       Not tainted syzkaller #0
[ 1474.140269][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1474.277523][   T28] task:syz.2.2954      state:D stack:27088 pid:17573 ppid:4276   flags:0x00004004
[ 1474.698374][   T28] Call Trace:
[ 1474.742174][   T28]  <TASK>
[ 1474.745251][   T28]  __schedule+0x107f/0x4030
[ 1474.749947][   T28]  ? __sched_text_start+0x8/0x8
[ 1474.763525][   T28]  ? __mutex_trylock_common+0x86/0x260
[ 1474.775706][   T28]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1474.796062][   T28]  schedule+0xb9/0x180
[ 1474.800263][   T28]  schedule_preempt_disabled+0xf/0x20
[ 1474.805808][   T28]  __mutex_lock+0x548/0xae0
[ 1474.809036][T16611] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu
[ 1474.881187][T16611] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1474.989078][   T28]  ? __mutex_lock+0x3ba/0xae0
[ 1474.993884][   T28]  ? nfsd_svc+0x61/0xab0
[ 1474.998271][   T28]  ? mutex_lock_nested+0x10/0x10
[ 1475.006316][T16611] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[ 1475.040883][T16611] usb 6-1: USB disconnect, device number 13
[ 1475.042218][   T28]  ? net_generic+0x1e/0x240
[ 1475.053086][   T28]  ? net_generic+0x1e/0x240
[ 1475.062873][   T28]  nfsd_svc+0x61/0xab0
[ 1475.067040][   T28]  ? qword_get+0x5a5/0x640
[ 1475.071750][   T28]  write_threads+0x2ea/0x350
[ 1475.084380][   T28]  ? write_unlock_fs+0x1f0/0x1f0
[ 1475.089585][   T28]  ? __might_fault+0xc2/0x120
[ 1475.109656][T18572] udevd[18572]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1475.127246][   T28]  ? _copy_from_user+0x10b/0x170
[ 1475.132440][   T28]  ? simple_transaction_get+0x119/0x140
[ 1475.150115][   T28]  nfsctl_transaction_write+0x105/0x150
[ 1475.155844][   T28]  ? nfsctl_transaction_read+0x1b0/0x1b0
[ 1475.163376][   T28]  vfs_write+0x2dc/0x9a0
[ 1475.167929][   T28]  ? file_end_write+0x250/0x250
[ 1475.175843][   T28]  ? __fget_files+0x28/0x460
[ 1475.184628][   T28]  ? __fget_files+0x3fc/0x460
[ 1475.201855][   T28]  ? __fdget_pos+0x2ae/0x360
[ 1475.206927][   T28]  ? ksys_write+0x70/0x260
[ 1475.211497][   T28]  ksys_write+0x14d/0x260
[ 1475.229965][   T28]  ? __ia32_sys_read+0x80/0x80
[ 1475.236100][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[ 1475.241368][   T28]  do_syscall_64+0x4c/0xa0
[ 1475.246599][   T28]  ? clear_bhb_loop+0x60/0xb0
[ 1475.251424][   T28]  ? clear_bhb_loop+0x60/0xb0
[ 1475.257148][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1475.263101][   T28] RIP: 0033:0x7f63f3d9e0d9
[ 1475.268433][   T28] RSP: 002b:00007f63f4c51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1475.277607][   T28] RAX: ffffffffffffffda RBX: 00007f63f4025fa0 RCX: 00007f63f3d9e0d9
[ 1475.285813][   T28] RDX: 0000000000000002 RSI: 0000200000000700 RDI: 0000000000000005
[ 1475.294316][   T28] RBP: 00007f63f3e35024 R08: 0000000000000000 R09: 0000000000000000
[ 1475.311054][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1475.341899][   T28] R13: 00007f63f4026038 R14: 00007f63f4025fa0 R15: 00007ffd2838d728
[ 1475.350028][   T28]  </TASK>
[ 1475.362592][   T28] 
[ 1475.362592][   T28] Showing all locks held in the system:
[ 1475.370590][   T28] 1 lock held by rcu_tasks_kthre/12:
[ 1475.393972][   T28]  #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[ 1475.422050][   T28] 1 lock held by rcu_tasks_trace/13:
[ 1475.436939][   T28]  #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[ 1475.469344][   T28] 2 locks held by kworker/1:1/27:
[ 1475.474546][   T28]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.500930][   T28]  #1: ffffc90000a3fd00 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.523036][   T28] 1 lock held by khungtaskd/28:
[ 1475.527987][   T28]  #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[ 1475.567030][   T28] 3 locks held by kworker/u4:3/47:
[ 1475.572363][   T28] 1 lock held by dhcpcd/3932:
[ 1475.587313][   T28]  #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0
[ 1475.608280][   T28] 2 locks held by getty/4028:
[ 1475.613621][   T28]  #0: ffff88814d97a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 1475.630213][   T28]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[ 1475.642458][   T28] 2 locks held by kworker/0:8/4377:
[ 1475.647811][   T28] 2 locks held by kworker/1:12/6675:
[ 1475.655079][   T28]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.669471][   T28]  #1: ffffc9000500fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.684268][   T28] 3 locks held by kworker/0:18/8123:
[ 1475.689934][   T28]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.705773][   T28]  #1: ffffc90004dbfd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.717139][   T28]  #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20
[ 1475.728582][   T28] 3 locks held by kworker/u4:0/13951:
[ 1475.734017][   T28]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.746981][   T28]  #1: ffffc900035b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.759634][   T28]  #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[ 1475.768970][   T28] 5 locks held by kworker/u4:4/13963:
[ 1475.774386][   T28]  #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.785622][   T28]  #1: ffffc9000364fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 1475.796548][   T28]  #2: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0
[ 1475.806336][   T28]  #3: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xee/0x9f0
[ 1475.818136][   T28]  #4: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[ 1475.831706][   T28] 3 locks held by syz.2.2954/17573:
[ 1475.838578][   T28]  #0: ffff88805ed219e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360
[ 1475.848646][   T28]  #1: ffff888074fdc460 (sb_writers#43){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0
[ 1475.858511][   T28]  #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0
[ 1475.868010][   T28] 3 locks held by syz.2.2954/17575:
[ 1475.873262][   T28]  #0: ffff88802d7f0d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360
[ 1475.883682][   T28]  #1: ffff888074fdc460 (sb_writers#43){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0
[ 1475.893208][   T28]  #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80
[ 1475.903046][   T28] 1 lock held by syz-executor/18393:
[ 1475.908689][   T28]  #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0
[ 1475.919742][   T28] 1 lock held by syz-executor/18441:
[ 1475.925142][   T28]  #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0
[ 1475.935054][   T28] 1 lock held by syz.1.3142/18656:
[ 1475.941017][   T28]  #0: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[ 1475.978326][   T28] 
[ 1475.980821][   T28] =============================================
[ 1475.980821][   T28] 
[ 1476.001052][   T28] NMI backtrace for cpu 0
[ 1476.005531][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[ 1476.012852][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1476.023141][   T28] Call Trace:
[ 1476.026452][   T28]  <TASK>
[ 1476.029498][   T28]  dump_stack_lvl+0x188/0x24e
[ 1476.034229][   T28]  ? preempt_schedule_thunk+0x16/0x18
[ 1476.039660][   T28]  ? show_regs_print_info+0x12/0x12
[ 1476.044911][   T28]  ? load_image+0x410/0x410
[ 1476.049561][   T28]  ? vprintk_emit+0x59f/0x6a0
[ 1476.054344][   T28]  ? printk_sprint+0x460/0x460
[ 1476.059174][   T28]  nmi_cpu_backtrace+0x3e6/0x460
[ 1476.064268][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[ 1476.070481][   T28]  ? _printk+0xda/0x130
[ 1476.074693][   T28]  ? load_image+0x410/0x410
[ 1476.079255][   T28]  ? load_image+0x410/0x410
[ 1476.083806][   T28]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[ 1476.090054][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1476.096248][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[ 1476.102397][   T28]  watchdog+0xf0e/0xf50
[ 1476.106993][   T28]  ? watchdog+0x1ed/0xf50
[ 1476.111388][   T28]  kthread+0x29d/0x330
[ 1476.115504][   T28]  ? hungtask_pm_notify+0x40/0x40
[ 1476.120767][   T28]  ? kthread_blkcg+0xd0/0xd0
[ 1476.125649][   T28]  ret_from_fork+0x1f/0x30
[ 1476.130611][   T28]  </TASK>
[ 1476.135171][   T28] Sending NMI from CPU 0 to CPUs 1:
[ 1476.140646][    C1] NMI backtrace for cpu 1
[ 1476.140658][    C1] CPU: 1 PID: 18583 Comm: syz.5.3132 Not tainted syzkaller #0
[ 1476.140675][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1476.140686][    C1] RIP: 0010:kasan_check_range+0x62/0x290
[ 1476.140718][    C1] Code: 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 49 c1 e9 03 4b 8d 1c 21 <49> 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c
[ 1476.140733][    C1] RSP: 0018:ffffc90003467290 EFLAGS: 00000807
[ 1476.140749][    C1] RAX: 0000000000000001 RBX: fffffbfff2162049 RCX: ffffffff81640cbd
[ 1476.140762][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b10240
[ 1476.140773][    C1] RBP: ffffc900034674f0 R08: ffffffff90b10247 R09: 1ffffffff2162048
[ 1476.140785][    C1] R10: dffffc0000000000 R11: fffffbfff2162048 R12: dffffc0000000001
[ 1476.140798][    C1] R13: ffff88802e03da00 R14: 1ffffffff2162048 R15: ffff88802e03e500
[ 1476.140826][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1476.140841][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1476.140853][    C1] CR2: 00007fe941e27dac CR3: 000000002ea07000 CR4: 00000000003506e0
[ 1476.140868][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 1476.140880][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1476.140892][    C1] Call Trace:
[ 1476.140897][    C1]  <TASK>
[ 1476.140905][    C1]  __lock_acquire+0xe4d/0x7c40
[ 1476.140939][    C1]  ? verify_lock_unused+0x140/0x140
[ 1476.140972][    C1]  ? kernel_text_address+0x9c/0xd0
[ 1476.140995][    C1]  ? __kernel_text_address+0x9/0x30
[ 1476.141017][    C1]  ? verify_lock_unused+0x140/0x140
[ 1476.141040][    C1]  ? arch_stack_walk+0xf2/0x140
[ 1476.141095][    C1]  lock_acquire+0x1bb/0x4a0
[ 1476.141119][    C1]  ? debug_check_no_obj_freed+0x9a/0x520
[ 1476.141198][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1476.141227][    C1]  _raw_spin_lock_irqsave+0xb0/0x100
[ 1476.141248][    C1]  ? debug_check_no_obj_freed+0x9a/0x520
[ 1476.141267][    C1]  ? _raw_spin_lock+0x40/0x40
[ 1476.141285][    C1]  ? page_ext_put+0x98/0xb0
[ 1476.141339][    C1]  debug_check_no_obj_freed+0x9a/0x520
[ 1476.141360][    C1]  free_unref_page_prepare+0x2c3/0x9e0
[ 1476.141387][    C1]  free_unref_page+0x2e/0x3f0
[ 1476.141412][    C1]  __vunmap+0x874/0xa40
[ 1476.141434][    C1]  ? integrity_iint_find+0x51/0x120
[ 1476.141503][    C1]  ? kcov_open+0x80/0x80
[ 1476.141522][    C1]  kcov_close+0x27/0x50
[ 1476.141541][    C1]  __fput+0x20a/0x8b0
[ 1476.141561][    C1]  task_work_run+0x1d0/0x260
[ 1476.141591][    C1]  ? task_work_cancel+0x220/0x220
[ 1476.141614][    C1]  ? do_exit+0x9d0/0x2570
[ 1476.141666][    C1]  ? kmem_cache_free+0xf7/0x2a0
[ 1476.141689][    C1]  do_exit+0x9d5/0x2570
[ 1476.141714][    C1]  ? do_raw_spin_lock+0x128/0x2f0
[ 1476.141732][    C1]  ? put_task_struct+0x80/0x80
[ 1476.141758][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1476.141783][    C1]  ? lock_chain_count+0x20/0x20
[ 1476.141808][    C1]  do_group_exit+0x229/0x2e0
[ 1476.141832][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1476.141851][    C1]  get_signal+0x1259/0x1340
[ 1476.141885][    C1]  arch_do_signal_or_restart+0xc4/0x1310
[ 1476.141963][    C1]  ? debug_object_free+0x2c6/0x470
[ 1476.141981][    C1]  ? hrtimer_nanosleep+0x2ae/0x370
[ 1476.142002][    C1]  ? __might_fault+0xc2/0x120
[ 1476.142019][    C1]  ? __might_fault+0xa6/0x120
[ 1476.142035][    C1]  ? get_sigframe_size+0x10/0x10
[ 1476.142056][    C1]  ? __remove_hrtimer+0x470/0x470
[ 1476.142081][    C1]  ? __se_sys_clock_nanosleep+0x30b/0x3a0
[ 1476.142100][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1476.142151][    C1]  exit_to_user_mode_loop+0x70/0x110
[ 1476.142176][    C1]  exit_to_user_mode_prepare+0xee/0x180
[ 1476.142201][    C1]  syscall_exit_to_user_mode+0x16/0x40
[ 1476.142219][    C1]  do_syscall_64+0x58/0xa0
[ 1476.142241][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1476.142263][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1476.142286][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1476.142308][    C1] RIP: 0033:0x7fe941b5e90e
[ 1476.142322][    C1] Code: Unable to access opcode bytes at 0x7fe941b5e8e4.
[ 1476.142360][    C1] RSP: 002b:00007fe93fdf5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1476.142379][    C1] RAX: fffffffffffffdfc RBX: 00007fe93fdf66c0 RCX: 00007fe941b5e90e
[ 1476.142392][    C1] RDX: 00007fe93fdf5fb0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1476.142403][    C1] RBP: 00007fe941c35024 R08: 0000000000000000 R09: 0000000000000000
[ 1476.142414][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1476.142424][    C1] R13: 00007fe941e26128 R14: 00007fe941e26090 R15: 00007ffdcaed5f08
[ 1476.142442][    C1]  </TASK>
[ 1476.681185][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 1476.688127][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[ 1476.695633][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1476.705734][   T28] Call Trace:
[ 1476.709154][   T28]  <TASK>
[ 1476.712995][   T28]  dump_stack_lvl+0x188/0x24e
[ 1476.718597][   T28]  ? memcpy+0x3c/0x60
[ 1476.722715][   T28]  ? show_regs_print_info+0x12/0x12
[ 1476.728045][   T28]  ? load_image+0x410/0x410
[ 1476.732604][   T28]  panic+0x2d3/0x710
[ 1476.736568][   T28]  ? schedule_preempt_disabled+0x20/0x20
[ 1476.742339][   T28]  ? bpf_jit_dump+0xd0/0xd0
[ 1476.746963][   T28]  ? __irq_work_queue_local+0x12c/0x190
[ 1476.752655][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[ 1476.759208][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[ 1476.765424][   T28]  watchdog+0xf4d/0xf50
[ 1476.769712][   T28]  ? watchdog+0x1ed/0xf50
[ 1476.774100][   T28]  kthread+0x29d/0x330
[ 1476.778403][   T28]  ? hungtask_pm_notify+0x40/0x40
[ 1476.783569][   T28]  ? kthread_blkcg+0xd0/0xd0
[ 1476.788208][   T28]  ret_from_fork+0x1f/0x30
[ 1476.793869][   T28]  </TASK>
[ 1476.798066][   T28] Kernel Offset: disabled
[ 1476.802512][   T28] Rebooting in 86400 seconds..