last executing test programs:

29.197267688s ago: executing program 1 (id=576):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
sigaltstack(0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
openat$nullb(0xffffffffffffff9c, 0x0, 0x225681, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000bfd000/0x400000)=nil, r1, 0x4, 0x4000010, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x652c82)
socket(0xa, 0x2400000001, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
close(r4)
setsockopt(r3, 0x0, 0x482, &(0x7f0000000000)="110000007f0000014e200000000000006d68000000000000000000000000000010", 0x21)

26.741115262s ago: executing program 0 (id=582):
mkdir(&(0x7f0000000300)='./my_configfs\x00', 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000000940)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019940)=0x7)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000019980)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
acct(&(0x7f00000001c0)='./file0\x00')
open$dir(&(0x7f0000000200)='./file0\x00', 0x8400, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./my_configfs\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0)
rmdir(&(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0\x00')

24.222205509s ago: executing program 0 (id=585):
socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$MSR(0x0, 0x8000000000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000bc0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000c00)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000c40), 0x0, 0x0)
read$msr(r3, &(0x7f0000001140)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f000001a140)=0x80000000000003)
openat(0xffffffffffffff9c, &(0x7f000001a180)='./file0\x00', 0x142, 0x193)
mkdirat(0xffffffffffffff9c, &(0x7f000001a1c0)='./tracing\x00', 0x1ff)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f000001a200), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f000001a240)={0x2, {0x2, 0x9, 0x5, 0x404}, {0x8, 0x4, 0x6, 0xfffffff8}, {0x800, 0x5}})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_clone3(&(0x7f0000000280)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x5}, &(0x7f00000000c0)=""/65, 0x41, &(0x7f0000000140)=""/221, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58)
openat$rnull_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x7)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000007c0)="8924d6d4200d5d57", 0x8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
syz_clone(0x1000, &(0x7f0000000800), 0x0, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="3e374cf8d54efbc456779d085787bc7cc6724a55339c2fa29a3fbac42589a980e39ca27539f48e5c7dfe0548b9c9813600cf0f43a29eab60df4463bf95fad603f7d5ceeeb37ad94b474fcf265b6371df8b168695564cc8dbb13d18ba6d6458ae4e46799dea8055e891711473aecb04694da1bf8a89005a56fc29611fc19a17d958f254ebee04f3274132ea0c101c")
openat$zero(0xffffffffffffff9c, &(0x7f0000001100), 0x80002, 0x0)

24.000810296s ago: executing program 3 (id=586):
mkdir(&(0x7f0000000300)='./my_configfs\x00', 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000000940)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019940)=0x7)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000019980)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
acct(&(0x7f00000001c0)='./file0\x00')
open$dir(&(0x7f0000000200)='./file0\x00', 0x8400, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mount(0x0, &(0x7f0000000340)='./my_configfs\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0)
rmdir(&(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0\x00')

22.563714247s ago: executing program 3 (id=587):
open(&(0x7f00000000c0)='.\x00', 0x5ca00, 0x70)
socket$inet6(0xa, 0x80003, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000900)={@null, 0x4, 'bond0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

20.14074927s ago: executing program 0 (id=588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20)
sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)}, 0x400c0c0)
open(0x0, 0x80242, 0x0)
r5 = fsopen(&(0x7f0000000380)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f00000004c0), 0x408000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000540)={[{@huge_never}]})
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
getcwd(&(0x7f0000000580)=""/220, 0xdc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040804)

19.959028411s ago: executing program 1 (id=590):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x80800)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000a00)="b002401d42b755c94142dfeb56e69ee92fb553bbe868a4be6fba0d398c1476c229eb8a3adcb877aab2b787762fd27d5f6d6ad9a4a2a47ce39ca6e3d760cc358243db3e44e58902158e35675b209a041d546325ceff9884bda4f9fe1902ad539cf6c75b084a384d94e7216a1daa987b43280a330090fe001faf5977e6806a474c3ebbcc323190bad3dfb465dad9653e3c9c24bd86fd965db3adffb3bde57540e967954dd5a1f2389d7348b1a44d938c3f32298bd5e10c28ead285bffb9ff418ce6562a1e417ed73d0f2624bb5796cbda04c3934bb4962a6eb46dccc686bf7e14fdf2bd42a8b7402dbe09247", 0xeb}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x101, 0x4}, 0x90)
close(r1)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400))
r4 = getpid()
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(r4, &(0x7f0000000340)={0x38, 0x3, 0x1000002d, 0x12000, 0x299d4, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
r6 = syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$binfmt_script(r7, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x88}}, 0x0)
close_range(0xffffffffffffffff, r5, 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

17.57424514s ago: executing program 4 (id=593):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
io_submit(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000003c0)='espintcp', 0x8)
write(r4, &(0x7f00000001c0)="f7d9a2eb", 0x4)
sendfile(r3, r3, 0x0, 0x200000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040))
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)

17.505650883s ago: executing program 3 (id=594):
socket$inet6(0xa, 0x1, 0x0)
execve(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x3, 0x1)
unshare(0x22020600)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000000000000000000000001122334411"], 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
r6 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
munmap$IORING_OFF_CQ_RING(r6, 0x9)
syz_io_uring_complete(r5, r6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

17.406644827s ago: executing program 1 (id=595):
mkdir(&(0x7f0000000300)='./my_configfs\x00', 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000000940)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019940)=0x7)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000019980)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
acct(&(0x7f00000001c0)='./file0\x00')
open$dir(&(0x7f0000000200)='./file0\x00', 0x8400, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0)
rmdir(&(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0\x00')

17.255171019s ago: executing program 4 (id=597):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0085666, 0x0)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mount(&(0x7f00000001c0)=@filename='./file2\x00', &(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0)='zonefs\x00', 0x80, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0xce23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r4 = dup(r3)
write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[], 0x8)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10)
rename(0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)

15.957091578s ago: executing program 1 (id=598):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x7ffc0001}]})
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)={0x2, {{0xa, 0x4620, 0x407, @mcast2, 0x7f}}}, 0x90)
close(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './sys/bus/pci/rescan\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18)
unshare(0x20000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='measure #', 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r4, &(0x7f00000000c0)='1', 0x1)

14.83798825s ago: executing program 4 (id=599):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
io_submit(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000003c0)='espintcp', 0x8)
write(r4, &(0x7f00000001c0)="f7d9a2eb", 0x4)
sendfile(r3, r3, 0x0, 0x200000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040))
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)

14.565837018s ago: executing program 4 (id=601):
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5)
set_robust_list(&(0x7f0000000300), 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000780)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000800)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000019800)=0x80000000000003)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000019840)={0x0, 0x0, &(0x7f0000019880)=[{&(0x7f00000198c0)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20008810)
write(r5, &(0x7f0000019940)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000199c0)={0x0, 0x0, &(0x7f0000019a00)={&(0x7f0000019a40)=@newtaction={0x138, 0x30, 0x9, 0x0, 0x8, {}, [{0x124, 0x1, [@m_mpls={0x120, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1ff, 0x2, 0x20000000, 0x1, 0x2}, 0x3}}, @TCA_MPLS_BOS={0x5}]}, {0xcd, 0x4, "22f35271b46f83ddd8b73dc68963438bc08eb966c13e6d9c7c9b3bbd2a60f7e6ef4353a9cf19b6769446d6b9045892bdf2db781cc71be4faa16035720eababcbe77857a5b4be2a4ab78b35f48b95451f719980e13b5effd493f54e2a84a1efd54f753109d7a28a04b84c1bda8a8c69c1d3f58a9daf4b04ce41fd1d84932d67a46136e20f788599373c2a1fefb4ee3abd5e49e4bcaf26f6ca005cdb88154cda774b1efef25457ddc17bc07a9b8637ac088353c17a868ea0b21962a516e03cecf16e51b79bdc87f10000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000001e00000000000000000a20000000000000000000010000000900010063797a30000000002c000000030a01140000000000190000010000000900010073797a30000000000900030073797a30000000004fffe100060a010400000000000100000100000005000b40000000002800048024000180090001007866726d0000000014000280050027d3415fe148f26e9e89eade49a81803000100060008000240000000020900010073797a3000000000140000001108010000000000000000000000000a000000000000"], 0xc4}}, 0x40080)
socket$inet(0x2, 0x5, 0x4c59fc0b)

12.516280056s ago: executing program 0 (id=603):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}, 0x1, 0x0, 0x0, 0x92eda4082f935ab3}, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178})
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00')
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f00000019c0), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000001b00)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
shutdown(r3, 0x0)
syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$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")
creat(0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15)
pwrite64(r4, &(0x7f0000001540)='2', 0xfdef, 0xe7c)

12.51302746s ago: executing program 4 (id=604):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x610)
r4 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e21, 0x40, @remote, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x470}}}, 0x108)
r5 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace(0x8, r5)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @random="378bc1562b6c"}, 0x14)
ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0)

11.283584125s ago: executing program 0 (id=605):
socket(0x9, 0x1, 0xffefffef)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x2)
capset(0x0, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x100000, 0x115)
symlinkat(&(0x7f00000000c0)='./file2\x00', r5, &(0x7f0000000180)='./dev\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ae}, 0x0, &(0x7f0000000040), &(0x7f0000000180))

10.814884084s ago: executing program 2 (id=606):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8)
r0 = getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
statfs(0x0, &(0x7f00000005c0)=""/216)
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000700)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000800), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000840), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000280f82849d7eb78000000020000194f0000"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d0000000a00000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000a00000000000000000000f934c1f17a00f0e700000000"], 0x50)
close(r3)
r4 = epoll_create1(0x0)
poll(&(0x7f0000000980)=[{r4, 0x251}], 0x1, 0xdb3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000a00))
shutdown(r5, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000a40)={0x2000200b})
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000b40), 0x64)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50)
mkdirat(0xffffffffffffff9c, 0x0, 0x1fd)

8.135070609s ago: executing program 3 (id=607):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
io_submit(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000003c0)='espintcp', 0x8)
write(r4, &(0x7f00000001c0)="f7d9a2eb", 0x4)
sendfile(r3, r3, 0x0, 0x200000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040))
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)

8.12616084s ago: executing program 0 (id=608):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000240)}, {0x0}], 0x2)
r4 = syz_open_dev$video(&(0x7f0000000280), 0x3, 0x40)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r5=>r2, {0x2}}, './file0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000380)={{0x8, 0x4, 0xfff, 0xcf, 'syz0\x00', 0x8d20}, 0x3, 0x1a3, 0x1, 0xffffffffffffffff, 0x0, 0x9, 'syz1\x00', 0x0})
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0)
ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000004c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000540)}, 0x400000})
mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000640)='ext4\x00', 0x40, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000700)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000740)='./dev\x00', 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000780)={'netdevsim0\x00', &(0x7f00000007c0)=@ethtool_pauseparam={0x11, 0x0, 0xb9, 0x4}})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0x19)

7.254882764s ago: executing program 2 (id=609):
mkdir(&(0x7f0000000300)='./my_configfs\x00', 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000000940)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019940)=0x7)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000019980)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
acct(&(0x7f00000001c0)='./file0\x00')
open$dir(&(0x7f0000000200)='./file0\x00', 0x8400, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./my_configfs\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0)

4.707761528s ago: executing program 3 (id=610):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c850)
r0 = getpgid(0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r5)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r6, &(0x7f0000000180)='nullb1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='1\x00', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r7, &(0x7f0000000280)='12', 0x2)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, 0x0)
sched_getaffinity(r0, 0x8, &(0x7f0000000200))

4.641347957s ago: executing program 1 (id=611):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000002940)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000002980)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendto$inet(r0, &(0x7f00000029c0)="02", 0x1, 0x14, 0x0, 0x0)
pipe2(&(0x7f0000002a00)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x42, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}})
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x190)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000580)={0x2020}, 0x2020)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002640)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x24058041)
io_uring_setup(0x7, &(0x7f0000002700)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x12, 0x3, 0x0, &(0x7f0000002840)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="16"], 0x50)
rt_sigsuspend(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002900)='./file0/file1\x00', 0x880cc3, 0x20)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11c0, 0x0)

2.972061403s ago: executing program 3 (id=612):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x84}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
vmsplice(r4, 0x0, 0x0, 0xd)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
ioprio_get$uid(0x3, 0xffffffffffffffff)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
eventfd(0x7)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0)
r6 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r6, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="671723d7c6012c", 0x10}, {&(0x7f0000000200)="0000ffffffffffff00dfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x20008b88)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d6d616363726f617469616e2c75737271756f74612c6e6f71756f74612c646973636172643d3078303030303030303030303030303030372c646973636172643d3078303030303030303030303030303030302c696f636861727365743d63703836312c696e746567726974792c646973636172642c00450cb03af8dd94e0a9613e516665e8a64fdb7106bc23c7c6c16d47a268e23cf19c49fb12848a0375266399e37f7a6dcefedbbd360e69fcc7fe8bafb6e1de4319f9123b"], 0x1, 0x6142, &(0x7f0000009100)="$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")
chdir(&(0x7f0000000140)='./file0\x00')

2.927293657s ago: executing program 2 (id=613):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
r10 = socket(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)

2.64071171s ago: executing program 2 (id=614):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_dev$radio(&(0x7f0000001800), 0x2, 0x2)
sendto(r0, &(0x7f0000000100), 0x0, 0x24000040, &(0x7f0000000240)=@hci={0x1f, 0x0, 0x3}, 0x80)
readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/237, 0xed}], 0x1)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
write$apparmor_current(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='stack :://'], 0xf4)
sendmsg$tipc(r8, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d000100000000000100000007000000", @ANYRES32=r2, @ANYBLOB="000096010a0002"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
r10 = accept4(r0, 0x0, 0x0, 0x800)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

1.617983649s ago: executing program 2 (id=615):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}, 0x1, 0x0, 0x0, 0x92eda4082f935ab3}, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178})
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00')
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f00000019c0), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000001b00)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
shutdown(r3, 0x0)
syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$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")
creat(0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15)
pwrite64(r4, &(0x7f0000001540)='2', 0xfdef, 0xe7c)

1.559543749s ago: executing program 1 (id=616):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8)
r0 = getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
statfs(0x0, &(0x7f00000005c0)=""/216)
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000700)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000800), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000840), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000280f82849d7eb78000000020000194f0000"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d0000000a00000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000a00000000000000000000f934c1f17a00f0e700000000"], 0x50)
close(r3)
r4 = epoll_create1(0x0)
poll(&(0x7f0000000980)=[{r4, 0x251}], 0x1, 0xdb3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000a00))
shutdown(r5, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000a40)={0x2000200b})
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000b40), 0x64)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50)
mkdirat(0xffffffffffffff9c, 0x0, 0x1fd)

55.319569ms ago: executing program 4 (id=617):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)='?', 0x1}], 0x1}, 0x0)
recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000120)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000700)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@stripe={'stripe', 0x3d, 0x4004}}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@commit={'commit', 0x3d, 0xb}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nogrpid}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '\x00\x7f\x00\x00\x00'}}, {@dont_measure}, {@euid_lt}, {@smackfsfloor}, {@smackfsdef={'smackfsdef', 0x3d, 'stripe'}}, {@uid_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, 'uF\xcf/B\x1f\x80\xddgCQ\xc7\xe51\xfa\xf2\x95\x93\xf1\x92\x18\xd7\xf3\x0e\xff{\xde\xa0%\xe9\x90z\xc8TI\x83\x87\xb0\xb1\xa2\xbe\xfe\xb3&\xd6\x98*\x8a\xeb\x96\xbc\x88e*k\xa7.\xdc\xa8oi@\x15\\\x8f\xd0\xd9\x8dk\xf0\xd3\xe3B\x89,:\x06Xb>\x838\x06\t\x93\x06\x85\xbb\v!\aQ\xe4f\xd3\xd5\xd1m/\xdd\x98\xe5\xfa{!x\x1b\xcd>\xce\xf4\xa4fi\xd0\xbb\x9f\xb8\x9en/\x02Bey&\xdd\xd1\x89A\xf0a\xf3\xe2\xf8L\xb8_\f\xd0\xc0\xa8\x91\xfb\x06\x1aPb\x9cuo\t\"\xfe,N\xc4\xcb\xf1,\xd5)\xe1\xd0/qnq\xe7\x96\xa9\x8a\x05\xce{0\x8e\xa8$\xe6\xa4\x15\xd5\x81>p\x0e{e\xaa\xa49\xc4\xc5\x83\x97\xc8\xc7\xf37kt!\xd8\b\x80\xbc\xd7\x8fR\xccn\x90pz\xaf\xf7\xa0\xe7\xde3#\xd4\xbc\x1c\x85\xcc\x9c\x1cf\xd5\xb3\xb9\xee\xe1\x97Y\xa5\xf8\xc7u\xee\xdb\x94\x14\xbd0\xd2U\xe0J!\x94CB\x80)z\xbar\x06\x8c\xfc\xf77=[\x931-\xb5\xf6\xd4\xb0i\xf7\xf9\xf3A\r\x8d\xd0\x02K\x14\x8a\x13\xed\x13Is\xcb\x98\x82\xfaI'}}]}, 0x2, 0x454, &(0x7f00000009c0)="$eJzs289vFFUcAPDvzLZFQGxF/MEPtYrGxh8tLagcvGg08aCJiR7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoKc1szvT3W53S7duu6X7+SRD35t5u+99583bfTOPDaBvjWb/JLV09me4nq0XGK39uXXj0sw/Ny7NJFGpvP13Ui1388almaJo8brdeWYsjUg/T+Jgi3oXLlw8M10uz53P8xOLZz+YWLhw8bnTZ6dPzZ2aOzd1/Pixo5MvvjD1fFfizNp088DH84f2v/7u1TdnTlx975fvkiL+pji6ZHS1g09WKl2urrf2NKSTgR42hI6UIiLrrsGI+COGoxT1zhuO1z7raeOADVWpVCq72x++XAG2sSTWWvJM/nkBbA/FF312/1tsmzT12BKuv1y7AcrivpVvtSMDkeZlBpvub7tpNCJOXP7362yLjXkOAQCwzA/Z/OfZVvO/NB5oKHdPvjY0EhH3RsTeiLgvIvZFxP0R1bIPRsRDnVS+Y+WulfOf9Noq75B2Ul0r2fzvpXxta/n8b+mtR0p5bk81/sHk5Ony3JH8nIzF4I4sP7lKHT+++vuX7Y41zv+yLau/mAvm7bg20HSeZqcXp/9PzI2ufxpxYKBV/MnSSkASEfsj4sA66zj99LeH2h1riL844dX4B9fyxl1YZ6p8E/FUrf8vR1P8hWT19cmJu6I8d2SiuCpW+vW3K2+1q//2/b+xsv7f1fL6X4p/JGlcr13ovI4rf37R9p5mvdf/UPJONT2U7/toenHx/GTEUPJGrdGN+6fqry3yRfks/rHDrcf/3qifiYMRkV3ED0fEIxHxaN72xyLi8Yg4vEr8P7/yxPvrj39jZfHPdtT/9cRQNO9pnSid+en7ZZWOdBJ/1v/HqqmxfM9aPv/W0q71Xc0AAABw50kj4u5I0vGldJqOj9f+v/y+2JWW5xcWnzk5/+G52exY9flnWjzpGm54HjqZ39YX+amm/NH8ufFXpZ3V/PjMfHm218FDn9vdZvxn/io1FEx61UJgQ3WyjubHXbC9GNLQv4x/6F/GP/SvFuN/Zy/aAWy+Vt//n/SgHcDmaxr/pV61A9h87v+hfxn/0L+Mf+hLCzvj9j+SLxI7Yg2/qJfoj0SkW6IZd3CiFBFboBltEr3+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiO/wIAAP//DxDaOQ==")
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0)
read(r6, &(0x7f0000000100), 0x1000)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = io_uring_setup(0x409, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7})
io_uring_register$IORING_REGISTER_FILES2(r8, 0xd, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x6, &(0x7f0000003f00)=[{0x0, 0xf0ff1f00000000}], 0x1)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)})

0s ago: executing program 2 (id=618):
socket(0x9, 0x1, 0xffefffef)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x2)
capset(0x0, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x100000, 0x115)
symlinkat(&(0x7f00000000c0)='./file2\x00', r5, &(0x7f0000000180)='./dev\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ae}, 0x0, &(0x7f0000000040), &(0x7f0000000180))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts.
[   67.446280][ T5592] cgroup: Unknown subsys name 'net'
[   67.595296][ T5592] cgroup: Unknown subsys name 'cpuset'
[   67.604751][ T5592] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.900723][ T5592] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.170631][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.175501][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.177560][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.178647][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.179106][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.179453][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.181960][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.182289][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.182987][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.183614][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.183920][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.184799][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.187408][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.188962][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.190147][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.190943][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.198415][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.199289][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.199791][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.201109][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.204571][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.205273][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.206385][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.209456][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.241187][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.399937][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[   71.399977][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[   72.096699][ T5605] rxe_eth0 speed is unknown, defaulting to 1000
[   72.097699][ T5606] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   72.105726][ T5605] rxe_eth0 speed is unknown, defaulting to 1000
[   72.109507][ T5605] rxe_eth0 speed is unknown, defaulting to 1000
[   72.110343][ T5603] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   72.120532][ T5604] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   72.356980][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   72.428631][ T1232] rxe_eth0 speed is unknown, defaulting to 1000
[   72.430547][ T5605] infiniband rxe0: set active
[   72.430563][ T5605] infiniband rxe0: added rxe_eth0
[   72.466870][ T5605] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   72.466900][ T5605] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   72.466934][ T5605] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   72.476967][ T5613] rxe_eth0 speed is unknown, defaulting to 1000
[   72.540820][ T5605] RDS/IB: rxe0: added
[   72.541094][ T5605] smc: adding ib device rxe0 with port count 1
[   72.541190][ T5605] smc:    ib device rxe0 port 1 has no pnetid
[   72.567048][ T1232] rxe_eth0 speed is unknown, defaulting to 1000
[   72.750794][ T5605] rxe_eth0 speed is unknown, defaulting to 1000
[   73.075804][ T5605] rxe_eth0 speed is unknown, defaulting to 1000
[   73.223127][ T4927] Bluetooth: hci4: command tx timeout
[   73.223348][ T5616] Bluetooth: hci1: command tx timeout
[   73.254159][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.254270][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.254703][ T5604] bridge_slave_0: entered allmulticast mode
[   73.257065][ T5604] bridge_slave_0: entered promiscuous mode
[   73.260463][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.260561][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.260674][ T5603] bridge_slave_0: entered allmulticast mode
[   73.264236][ T5603] bridge_slave_0: entered promiscuous mode
[   73.302459][ T4927] Bluetooth: hci3: command tx timeout
[   73.302661][ T5616] Bluetooth: hci2: command tx timeout
[   73.305455][ T5616] Bluetooth: hci0: command tx timeout
[   73.313781][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.313873][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.313993][ T5604] bridge_slave_1: entered allmulticast mode
[   73.317814][ T5604] bridge_slave_1: entered promiscuous mode
[   73.320940][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.321034][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.321389][ T5603] bridge_slave_1: entered allmulticast mode
[   73.324178][ T5603] bridge_slave_1: entered promiscuous mode
[   73.411546][ T5605] rxe_eth0 speed is unknown, defaulting to 1000
[   73.413525][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.413617][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.413728][ T5606] bridge_slave_0: entered allmulticast mode
[   73.419009][ T5606] bridge_slave_0: entered promiscuous mode
[   73.427272][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.435197][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.439870][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.441851][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.441943][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.442052][ T5606] bridge_slave_1: entered allmulticast mode
[   73.446719][ T5606] bridge_slave_1: entered promiscuous mode
[   73.507481][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.598300][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.612304][ T5604] team0: Port device team_slave_0 added
[   73.616387][ T5603] team0: Port device team_slave_0 added
[   73.619316][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.629296][ T5603] team0: Port device team_slave_1 added
[   73.646222][ T5604] team0: Port device team_slave_1 added
[   73.687485][ T5606] team0: Port device team_slave_0 added
[   73.730566][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.730580][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.730602][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.743638][ T5606] team0: Port device team_slave_1 added
[   73.803059][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.803071][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.803095][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.824407][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.824419][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.824441][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.891123][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.891135][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.891157][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.900718][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.900730][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.900753][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.905783][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.905796][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.905818][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.923480][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.923689][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.923797][ T5613] bridge_slave_0: entered allmulticast mode
[   73.925450][ T5613] bridge_slave_0: entered promiscuous mode
[   73.962731][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.962860][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.962967][ T5613] bridge_slave_1: entered allmulticast mode
[   73.965778][ T5613] bridge_slave_1: entered promiscuous mode
[   74.021900][ T5605] rxe_eth0 speed is unknown, defaulting to 1000
[   74.095405][ T5603] hsr_slave_0: entered promiscuous mode
[   74.096523][ T5603] hsr_slave_1: entered promiscuous mode
[   74.137726][ T5606] hsr_slave_0: entered promiscuous mode
[   74.138699][ T5606] hsr_slave_1: entered promiscuous mode
[   74.139330][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   74.139406][ T5606] Cannot create hsr debugfs directory
[   74.144187][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.153280][ T5604] hsr_slave_0: entered promiscuous mode
[   74.154198][ T5604] hsr_slave_1: entered promiscuous mode
[   74.154867][ T5604] debugfs: 'hsr0' already exists in 'hsr'
[   74.154883][ T5604] Cannot create hsr debugfs directory
[   74.160847][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.284377][ T5613] team0: Port device team_slave_0 added
[   74.338260][ T5613] team0: Port device team_slave_1 added
[   74.424503][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.424515][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.424537][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.464089][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.464101][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.464123][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.665633][ T5613] hsr_slave_0: entered promiscuous mode
[   74.666197][ T5613] hsr_slave_1: entered promiscuous mode
[   74.666816][ T5613] debugfs: 'hsr0' already exists in 'hsr'
[   74.666834][ T5613] Cannot create hsr debugfs directory
[   74.862140][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.873576][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   74.874287][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.879428][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.926938][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.929640][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.960383][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.969743][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.044445][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.044549][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.044620][ T5605] bridge_slave_0: entered allmulticast mode
[   75.045635][ T5605] bridge_slave_0: entered promiscuous mode
[   75.064122][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.064216][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.064328][ T5605] bridge_slave_1: entered allmulticast mode
[   75.067925][ T5605] bridge_slave_1: entered promiscuous mode
[   75.084016][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.095781][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.097109][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.110125][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.114305][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.123893][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.144719][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.149744][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.158909][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.187000][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.235982][ T5605] team0: Port device team_slave_0 added
[   75.241001][ T5605] team0: Port device team_slave_1 added
[   75.284023][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.284036][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.284059][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.287288][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.287300][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.287322][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.306267][ T4927] Bluetooth: hci4: command tx timeout
[   75.306344][ T5616] Bluetooth: hci1: command tx timeout
[   75.322001][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.329333][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.355987][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.379153][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.379924][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.382576][ T4927] Bluetooth: hci2: command tx timeout
[   75.382600][ T4927] Bluetooth: hci3: command tx timeout
[   75.382802][ T5616] Bluetooth: hci0: command tx timeout
[   75.389599][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.391923][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.404507][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.478021][ T5605] hsr_slave_0: entered promiscuous mode
[   75.478601][ T5605] hsr_slave_1: entered promiscuous mode
[   75.478998][ T5605] debugfs: 'hsr0' already exists in 'hsr'
[   75.479015][ T5605] Cannot create hsr debugfs directory
[   75.501285][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.567760][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[   75.609486][  T242] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.609561][  T242] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.610740][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   75.624675][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.648962][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   75.651275][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.686351][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   75.689030][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.690557][  T242] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.690648][  T242] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.725286][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   75.727653][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.827162][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.889298][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   75.906997][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.917004][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.919225][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.950250][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.977527][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.991081][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.996322][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.996669][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.011968][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   76.030719][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.033698][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.033791][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.070005][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.150999][ T5604] 8021q: adding VLAN 0 to HW filter on device team0
[   76.169998][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.170052][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.204339][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.204435][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.220542][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.295737][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   76.331074][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.331172][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.380771][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.380864][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.417487][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.473878][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   76.532916][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.533034][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.548807][ T5613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.568279][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.568671][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.757827][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.977930][ T5603] veth0_vlan: entered promiscuous mode
[   77.031598][ T5603] veth1_vlan: entered promiscuous mode
[   77.171436][ T5603] veth0_macvtap: entered promiscuous mode
[   77.193942][ T5603] veth1_macvtap: entered promiscuous mode
[   77.264275][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.295445][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.329942][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.363612][   T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.364585][   T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.364623][   T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.383272][ T5608] Bluetooth: hci1: command tx timeout
[   77.383299][ T5608] Bluetooth: hci4: command tx timeout
[   77.456738][   T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.463602][ T5616] Bluetooth: hci0: command tx timeout
[   77.463629][ T5616] Bluetooth: hci3: command tx timeout
[   77.463649][ T5616] Bluetooth: hci2: command tx timeout
[   77.641890][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.641920][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.660873][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.691187][ T5606] veth0_vlan: entered promiscuous mode
[   77.748322][ T5606] veth1_vlan: entered promiscuous mode
[   77.758709][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.758725][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.810516][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.930243][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.930506][ T5604] veth0_vlan: entered promiscuous mode
[   77.949755][ T5606] veth0_macvtap: entered promiscuous mode
[   77.980350][ T5606] veth1_macvtap: entered promiscuous mode
[   77.990863][ T5603] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   77.994135][ T5604] veth1_vlan: entered promiscuous mode
[   78.075607][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.115689][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.194850][ T5604] veth0_macvtap: entered promiscuous mode
[   78.262285][ T5810] mmap: syz.3.4 (5810) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   78.337025][ T5810] loop3: detected capacity change from 0 to 256
[   78.349318][ T5810] =======================================================
[   78.349318][ T5810] WARNING: The mand mount option has been deprecated and
[   78.349318][ T5810]          and is ignored by this kernel. Remove the mand
[   78.349318][ T5810]          option from the mount to silence this warning.
[   78.349318][ T5810] =======================================================
[   78.527242][ T1004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.527782][ T1004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.527910][ T1004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.528086][ T1004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.281233][ T5605] veth0_vlan: entered promiscuous mode
[   79.291047][ T5604] veth1_macvtap: entered promiscuous mode
[   79.320307][ T5605] veth1_vlan: entered promiscuous mode
[   79.385414][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.713224][ T5608] Bluetooth: hci4: command tx timeout
[   80.713259][ T5608] Bluetooth: hci1: command tx timeout
[   80.713279][ T5608] Bluetooth: hci2: command tx timeout
[   80.713298][ T5608] Bluetooth: hci3: command tx timeout
[   80.713317][ T5608] Bluetooth: hci0: command tx timeout
[   80.768999][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.799365][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.799384][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.908693][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.908714][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.910507][ T5605] veth0_macvtap: entered promiscuous mode
[   80.980595][ T5605] veth1_macvtap: entered promiscuous mode
[   81.001612][ T5613] veth0_vlan: entered promiscuous mode
[   81.036270][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.036287][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.054628][ T1004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.058340][ T1004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.058631][ T1004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.098160][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.102734][   T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.115495][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.129880][ T5613] veth1_vlan: entered promiscuous mode
[   81.212470][ T1004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.212514][ T1004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.212547][ T1004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.212578][ T1004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.222458][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.222477][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.387898][ T5613] veth0_macvtap: entered promiscuous mode
[   81.525151][  T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.525172][  T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.598584][ T5613] veth1_macvtap: entered promiscuous mode
[   81.856429][ T5826] process 'syz.2.3' launched './file2' with NULL argv: empty string added
[   82.132188][  T193] cfg80211: failed to load regulatory.db
[   82.229471][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.242174][  T242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.242191][  T242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.248059][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.322954][   T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.323142][   T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.323297][   T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.501984][ T5830] Zero length message leads to an empty skb
[   82.555306][  T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.555324][  T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.627438][   T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.627455][   T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.652666][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.694635][ T5832] loop1: detected capacity change from 0 to 1024
[   82.748979][ T5832] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   82.783680][ T5832] JBD2: no valid journal superblock found
[   82.810330][ T5832] EXT4-fs (loop1): Could not load journal inode
[   83.820965][   T32] audit: type=1800 audit(1792084227.539:2): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name=08 dev="sda1" ino=2047 res=0 errno=-22
[   84.485366][ T5735] rxe_eth0 speed is unknown, defaulting to 1000
[   85.394759][ T5867] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   86.016033][ T5873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'.
[   88.419080][ T5896] capability: warning: `syz.0.15' uses deprecated v2 capabilities in a way that may be insecure
[   88.936108][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'.
[   89.028366][ T5897] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   89.623348][ T5904] zram0: detected capacity change from 0 to 656
[   91.465927][ T5925] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   94.546267][ T5929] loop5: detected capacity change from 0 to 4095
[   94.624020][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   94.942417][ T5940] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.25'.
[   94.982572][ T5914] ima: policy update failed
[   94.983163][   T32] audit: type=1802 audit(1792084239.599:3): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.19" res=0 errno=-22
[   96.142237][ T5955] /dev/nullb0: Can't open blockdev
[   96.303258][ T5619] Buffer I/O error on dev loop5, logical block 511, async page read
[   96.583299][ T4101] rpcbind: server 127.0.0.1 not responding, timed out
[   98.872954][ T5973] futex_wake_op: syz.1.31 tries to shift op by 144; fix this program
[  100.517946][ T5984] syz_tun: mtu less than device minimum
[  102.842931][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.554418][ T5999] usb usb8: usbfs: process 5999 (syz.0.39) did not claim interface 7 before use
[  104.777578][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  105.936671][ T6009] loop3: detected capacity change from 0 to 512
[  105.941337][ T6009] vfat: Unknown parameter 'ÿÿÿÿÿ'
[  106.000862][ T6010] Bluetooth: MGMT ver 1.23
[  106.135629][ T6010] loop1: detected capacity change from 0 to 8
[  108.544793][ T6040] loop3: detected capacity change from 0 to 512
[  108.568611][ T6039] loop4: detected capacity change from 0 to 512
[  108.588650][ T6039] EXT4-fs (loop4): Test dummy encryption mode enabled
[  108.588669][ T6039] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  108.588679][ T6039] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  108.588690][ T6039] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  108.716486][ T6038] loop2: detected capacity change from 0 to 1024
[  108.732295][ T6040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.768280][ T6039] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.46: bad orphan inode 131083
[  108.768372][ T6039] loop4: lost filesystem error report for type 5 error -117
[  108.773650][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  108.773668][    C0] EXT4-fs (loop4): initial error at time 1792084253: ext4_orphan_get:1430
[  108.773698][    C0] EXT4-fs (loop4): last error at time 1792084253: ext4_orphan_get:1430
[  108.817092][ T6039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.995283][ T6039] fscrypt: AES-256-XTS using blk-crypto-fallback
[  109.085986][ T6028] syz.1.45 (6028) used greatest stack depth: 18056 bytes left
[  109.268587][ T6048] ip_tables: iptables: counters copy to user failed while replacing table
[  109.436231][ T6044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.519730][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.860942][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  112.053443][ T6071] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  112.058920][ T6071] ALSA: mixer_oss: invalid OSS volume ''
[  114.961602][ T6079] hugetlbfs: syz.3.56 (6079): Using mlock ulimits for SHM_HUGETLB is obsolete
[  115.688711][ T6083] loop1: detected capacity change from 0 to 2048
[  115.777342][ T6083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.863764][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.260328][ T6099] netlink: 'syz.1.59': attribute type 12 has an invalid length.
[  119.678251][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  121.270913][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'.
[  122.309504][ T6125] kAFS: unparsable volume name
[  122.853752][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  123.730296][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  124.713851][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  125.418341][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'.
[  127.450618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  127.889473][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  128.114889][ T6159] capability: warning: `syz.3.72' uses 32-bit capabilities (legacy support in use)
[  128.820279][ T6162] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  128.822270][ T6162] CIFS: Attempting to mount //127.0.0.1/share
[  128.989641][ T6166] netlink: 'syz.1.71': attribute type 1 has an invalid length.
[  128.989673][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'.
[  129.971989][ T6162] CIFS: VFS: cifs_mount failed w/return code = -512
[  131.973618][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'.
[  132.608787][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  132.868995][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  133.994884][ T6202] all: renamed from bridge_slave_0 (while UP)
[  134.079140][ T6196] fido_id[6196]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  134.974756][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  134.974824][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  135.618439][ T6212] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  135.804443][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.73'.
[  136.949172][ T6222] usb usb8: usbfs: process 6222 (syz.3.83) did not claim interface 7 before use
[  137.607041][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  147.918908][ T6277] xt_HMARK: spi-set and port-set can't be combined
[  149.628488][ T6280] loop1: detected capacity change from 0 to 32768
[  149.629171][ T6280] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  149.679524][ T6280] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.107 (6280)
[  149.715772][ T6280] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  149.715798][ T6280] BTRFS info (device loop1): using crc32c checksum algorithm
[  149.989575][ T6301] syz.3.93 uses obsolete (PF_INET,SOCK_PACKET)
[  150.267185][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'.
[  150.518648][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  150.522054][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  150.525290][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  150.529118][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  150.546715][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  150.564352][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  150.569364][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  150.570780][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  150.584894][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  150.591466][ T6305] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  151.186097][ T6280] BTRFS info (device loop1): rebuilding free space tree
[  151.498061][ T6280] BTRFS info (device loop1): disabling free space tree
[  151.498115][ T6280] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  151.498127][ T6280] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.604904][ T6280] BTRFS info (device loop1): enabling ssd optimizations
[  151.604923][ T6280] BTRFS info (device loop1): turning on async discard
[  151.604931][ T6280] BTRFS info (device loop1): force clearing of disk cache
[  151.604947][ T6280] BTRFS info (device loop1): use zstd compression, level 3
[  152.955243][ T5604] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  154.818655][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  155.369724][ T6337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  155.369959][ T6337] block device autoloading is deprecated and will be removed.
[  156.078334][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.101'.
[  157.524820][ T4130] IPVS: starting estimator thread 0...
[  157.619165][ T6353] IPVS: using max 35 ests per chain, 84000 per kthread
[  160.120072][ T6366] loop1: detected capacity change from 0 to 2048
[  160.641843][ T6366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.909276][ T6388] loop2: detected capacity change from 0 to 2048
[  164.210512][ T6388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.997652][ T6397] loop2: detected capacity change from 0 to 8
[  172.349868][ T6440] loop1: detected capacity change from 0 to 512
[  172.385790][ T6440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002]
[  172.386379][ T6440] System zones: 1-12
[  172.395754][ T6440] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.129: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[  172.395820][ T6440] loop1: lost filesystem error report for type 5 error -117
[  172.408124][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  172.408143][    C1] EXT4-fs (loop1): initial error at time 1792084311: ext4_xattr_inode_iget:473
[  172.408164][    C1] EXT4-fs (loop1): last error at time 1792084311: ext4_xattr_inode_iget:473
[  172.411593][ T6440] EXT4-fs (loop1): 1 orphan inode deleted
[  172.423731][ T6440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.023803][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.094177][ T6463] loop1: detected capacity change from 0 to 512
[  175.502180][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.655904][ T6472] gfs2: error -5 reading superblock
[  177.981297][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.449766][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  180.093106][   T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  183.011192][   T10] usb 4-1: device descriptor read/all, error -71
[  183.743026][   T32] audit: type=1326 audit(1792084322.147:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ec39e559 code=0x7ffc0000
[  183.743234][   T32] audit: type=1326 audit(1792084322.147:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ec39e559 code=0x7ffc0000
[  183.746351][   T32] audit: type=1326 audit(1792084322.147:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f52ec35ed8e code=0x7ffc0000
[  183.746526][   T32] audit: type=1326 audit(1792084322.147:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ec39e559 code=0x7ffc0000
[  183.746583][   T32] audit: type=1326 audit(1792084322.147:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ec39e559 code=0x7ffc0000
[  184.378163][   T32] audit: type=1326 audit(1792084322.746:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f52ec39e559 code=0x7ffc0000
[  184.378330][   T32] audit: type=1326 audit(1792084322.755:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ec39e559 code=0x7ffc0000
[  184.378515][   T32] audit: type=1326 audit(1792084322.755:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ec39e559 code=0x7ffc0000
[  184.424615][   T32] audit: type=1326 audit(1792084322.764:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f52ec39e559 code=0x7ffc0000
[  184.424660][   T32] audit: type=1326 audit(1792084322.764:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ec39e559 code=0x7ffc0000
[  184.609678][ T6528] ip_tables: iptables: counters copy to user failed while replacing table
[  190.058592][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'.
[  190.679047][ T6577] loop1: detected capacity change from 0 to 1024
[  190.685619][ T6577] EXT4-fs: Ignoring removed oldalloc option
[  190.685670][ T6577] EXT4-fs: Ignoring removed oldalloc option
[  190.769822][ T6577] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  190.836400][ T6577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.913156][ T6566] loop2: detected capacity change from 0 to 8192
[  192.250486][ T6566]  loop2: p1 < > p2 < > p3 p4 < p5 >
[  192.250511][ T6566] loop2: partition table partially beyond EOD, truncated
[  192.250695][ T6566] loop2: p1 start 83886080 is beyond EOD, truncated
[  192.250714][ T6566] loop2: p2 start 16776960 is beyond EOD, truncated
[  192.407444][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.489879][ T6592] loop3: detected capacity change from 0 to 2048
[  193.557274][ T6592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.935356][   T51] rpcbind: server 127.0.0.1 not responding, timed out
[  196.195293][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  196.583767][ T6609] udevd[6609]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  196.619960][ T6616] udevd[6616]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  199.888729][ T6644] 9pnet_virtio: no channels available for device 127.0.0.1
[  199.906839][ T6636] sctp_transport_update_pmtu: 48 callbacks suppressed
[  199.906962][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  199.910753][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  199.929447][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  199.932545][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  199.993024][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  199.995909][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  200.008729][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  200.010703][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  200.013218][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  200.016336][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  200.578458][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  200.578557][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  202.780329][ T5622] Bluetooth: hci2: command 0x0406 tx timeout
[  202.862038][ T5623] Bluetooth: hci3: command 0x0406 tx timeout
[  202.862072][ T5623] Bluetooth: hci4: command 0x0406 tx timeout
[  202.862095][ T5623] Bluetooth: hci0: command 0x0406 tx timeout
[  202.862142][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  203.760917][ T6675] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  203.798529][ T6669] loop2: detected capacity change from 0 to 4096
[  204.865137][ T6669] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  204.939192][ T6681] nvmet: adding nsid 1 to subsystem testsubsys
[  205.186393][ T6683] ntfs3: Cannot use different iocharset when remounting!
[  206.031981][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  207.429863][ T6704] loop3: detected capacity change from 0 to 512
[  207.434426][ T6704] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777'
[  211.124897][ T6739] loop2: detected capacity change from 0 to 2048
[  211.197466][ T6739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.554733][ T6744] loop2: detected capacity change from 0 to 40427
[  212.576961][ T6744] F2FS-fs (loop2): invalid crc value
[  212.629806][ T6744] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  212.632160][ T6744] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  212.632191][ T6744] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  212.632357][ T6744] F2FS-fs (loop2): Start checkpoint disabled!
[  213.487045][ T6744] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  213.491212][ T6744] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  213.983638][ T6752] syz.2.193: attempt to access beyond end of device
[  213.983638][ T6752] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  214.014016][ T6752] syz.2.193: attempt to access beyond end of device
[  214.014016][ T6752] loop2: rw=2049, sector=45104, nr_sectors = 48 limit=40427
[  214.483852][   T51] kworker/u8:3: attempt to access beyond end of device
[  214.483852][   T51] loop2: rw=2049, sector=45152, nr_sectors = 16 limit=40427
[  214.495740][   T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  214.495767][   T51] Tainted: [L]=SOFTLOCKUP
[  214.495773][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  214.495784][   T51] Workqueue: writeback wb_workfn (flush-7:2)
[  214.495823][   T51] Call Trace:
[  214.495835][   T51]  <TASK>
[  214.495842][   T51]  dump_stack_lvl+0xe8/0x150
[  214.495874][   T51]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  214.495906][   T51]  f2fs_write_end_bio+0x118e/0x15d0
[  214.495944][   T51]  __submit_merged_bio+0x258/0x6a0
[  214.495969][   T51]  ? rcu_is_watching+0x16/0xb0
[  214.495997][   T51]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  214.496026][   T51]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  214.496075][   T51]  f2fs_write_data_pages+0x2a13/0x36e0
[  214.496129][   T51]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  214.496190][   T51]  ? hrtimer_start_range_ns_common+0x7f6/0xb60
[  214.496244][   T51]  ? __schedule+0x17f3/0x5820
[  214.496275][   T51]  ? __lock_acquire+0x747/0x2de0
[  214.496295][   T51]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  214.496315][   T51]  do_writepages+0x338/0x560
[  214.496347][   T51]  ? reacquire_held_locks+0x117/0x1a0
[  214.496368][   T51]  ? writeback_sb_inodes+0x450/0x1af0
[  214.496404][   T51]  __writeback_single_inode+0x136/0x1220
[  214.496433][   T51]  ? do_raw_spin_unlock+0xf5/0x200
[  214.496462][   T51]  writeback_sb_inodes+0x9de/0x1af0
[  214.496486][   T51]  ? __lock_acquire+0x747/0x2de0
[  214.496528][   T51]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  214.496594][   T51]  ? rcu_is_watching+0x16/0xb0
[  214.496617][   T51]  ? queue_io+0x2d3/0x470
[  214.496645][   T51]  wb_writeback+0x41c/0xad0
[  214.496672][   T51]  ? queue_io+0x1f1/0x470
[  214.496702][   T51]  ? __pfx_wb_writeback+0x10/0x10
[  214.496724][   T51]  ? do_raw_spin_lock+0x12b/0x2f0
[  214.496765][   T51]  wb_workfn+0x431/0x10f0
[  214.496804][   T51]  ? __pfx_wb_workfn+0x10/0x10
[  214.496838][   T51]  ? do_raw_spin_lock+0x12b/0x2f0
[  214.496871][   T51]  ? lock_acquire+0x115/0x350
[  214.496898][   T51]  ? rcu_is_watching+0x16/0xb0
[  214.496923][   T51]  ? process_scheduled_works+0x97a/0x1630
[  214.496946][   T51]  process_scheduled_works+0xc3d/0x1630
[  214.496999][   T51]  ? __pfx_process_scheduled_works+0x10/0x10
[  214.497028][   T51]  ? assign_work+0x3cf/0x5d0
[  214.497056][   T51]  worker_thread+0xa47/0xfb0
[  214.497107][   T51]  kthread+0x38b/0x480
[  214.497124][   T51]  ? __pfx_worker_thread+0x10/0x10
[  214.497146][   T51]  ? __pfx_kthread+0x10/0x10
[  214.497164][   T51]  ret_from_fork+0x514/0xb70
[  214.497185][   T51]  ? __pfx_ret_from_fork+0x10/0x10
[  214.497203][   T51]  ? __switch_to+0xc78/0x1410
[  214.497230][   T51]  ? __pfx_kthread+0x10/0x10
[  214.497249][   T51]  ret_from_fork_asm+0x1a/0x30
[  214.497282][   T51]  </TASK>
[  215.322321][   T51] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  215.322416][   T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  215.322441][   T51] Tainted: [L]=SOFTLOCKUP
[  215.322447][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  215.322460][   T51] Workqueue: writeback wb_workfn (flush-7:2)
[  215.322490][   T51] Call Trace:
[  215.322497][   T51]  <TASK>
[  215.322505][   T51]  dump_stack_lvl+0xe8/0x150
[  215.322534][   T51]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  215.322567][   T51]  f2fs_write_end_bio+0x118e/0x15d0
[  215.322607][   T51]  __submit_merged_bio+0x258/0x6a0
[  215.322632][   T51]  ? rcu_is_watching+0x16/0xb0
[  215.322662][   T51]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  215.322690][   T51]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  215.322741][   T51]  f2fs_write_data_pages+0x2a13/0x36e0
[  215.322798][   T51]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  215.322862][   T51]  ? hrtimer_start_range_ns_common+0x7f6/0xb60
[  215.322920][   T51]  ? __schedule+0x17f3/0x5820
[  215.322953][   T51]  ? __lock_acquire+0x747/0x2de0
[  215.322975][   T51]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  215.322996][   T51]  do_writepages+0x338/0x560
[  215.323028][   T51]  ? reacquire_held_locks+0x117/0x1a0
[  215.323050][   T51]  ? writeback_sb_inodes+0x450/0x1af0
[  215.323081][   T51]  __writeback_single_inode+0x136/0x1220
[  215.323110][   T51]  ? do_raw_spin_unlock+0xf5/0x200
[  215.323139][   T51]  writeback_sb_inodes+0x9de/0x1af0
[  215.323164][   T51]  ? __lock_acquire+0x747/0x2de0
[  215.323210][   T51]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  215.323286][   T51]  ? rcu_is_watching+0x16/0xb0
[  215.323310][   T51]  ? queue_io+0x2d3/0x470
[  215.323338][   T51]  wb_writeback+0x41c/0xad0
[  215.323366][   T51]  ? queue_io+0x1f1/0x470
[  215.323398][   T51]  ? __pfx_wb_writeback+0x10/0x10
[  215.323420][   T51]  ? do_raw_spin_lock+0x12b/0x2f0
[  215.323461][   T51]  wb_workfn+0x431/0x10f0
[  215.323503][   T51]  ? __pfx_wb_workfn+0x10/0x10
[  215.323539][   T51]  ? do_raw_spin_lock+0x12b/0x2f0
[  215.323573][   T51]  ? lock_acquire+0x115/0x350
[  215.323602][   T51]  ? rcu_is_watching+0x16/0xb0
[  215.323627][   T51]  ? process_scheduled_works+0x97a/0x1630
[  215.323651][   T51]  process_scheduled_works+0xc3d/0x1630
[  215.323709][   T51]  ? __pfx_process_scheduled_works+0x10/0x10
[  215.323736][   T51]  ? assign_work+0x3cf/0x5d0
[  215.323764][   T51]  worker_thread+0xa47/0xfb0
[  215.323817][   T51]  kthread+0x38b/0x480
[  215.323836][   T51]  ? __pfx_worker_thread+0x10/0x10
[  215.323857][   T51]  ? __pfx_kthread+0x10/0x10
[  215.323877][   T51]  ret_from_fork+0x514/0xb70
[  215.323898][   T51]  ? __pfx_ret_from_fork+0x10/0x10
[  215.323917][   T51]  ? __switch_to+0xc78/0x1410
[  215.323945][   T51]  ? __pfx_kthread+0x10/0x10
[  215.323965][   T51]  ret_from_fork_asm+0x1a/0x30
[  215.324000][   T51]  </TASK>
[  215.363471][   T51] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  217.419156][ T6757] ima: policy update failed
[  217.560414][   T32] kauditd_printk_skb: 8 callbacks suppressed
[  217.560431][   T32] audit: type=1807 audit(1792084353.324:22): UNKNOWN=? res=0
[  217.560464][   T32] audit: type=1802 audit(1792084353.324:23): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.199" res=0 errno=-22
[  217.560498][   T32] audit: type=1802 audit(1792084353.651:24): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.199" res=0 errno=-22
[  218.697406][ T4101] IPVS: starting estimator thread 0...
[  218.869281][ T6768] IPVS: using max 58 ests per chain, 139200 per kthread
[  220.384540][ T6771] loop3: detected capacity change from 0 to 4096
[  220.737655][ T6771] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  221.289476][ T4101] IPVS: starting estimator thread 0...
[  221.442196][ T6786] IPVS: using max 58 ests per chain, 139200 per kthread
[  221.597530][ T6789] ntfs3: Cannot use different iocharset when remounting!
[  230.707136][ T6849] kernel profiling enabled (shift: 23)
[  230.768583][ T6849] loop1: detected capacity change from 0 to 128
[  230.829342][ T6849] omfs: sysblock size (-58445445) is out of range
[  230.888573][ T6849] warning: `syz.1.214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  233.961683][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  236.314189][ T6877] xt_CONNSECMARK: invalid mode: 66
[  238.711564][   T51] rpcbind: server 127.0.0.1 not responding, timed out
[  238.987366][ T6894] ip_tables: iptables: counters copy to user failed while replacing table
[  239.392196][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  240.324002][ T6897] could not allocate digest TFM handle hmac(streebog512)
[  240.493060][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  241.614584][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  245.038550][ T6912] loop1: detected capacity change from 0 to 512
[  245.099050][ T6912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.099115][ T6912] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.519528][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'.
[  245.996980][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.767198][ T6932] sctp_transport_update_pmtu: 44 callbacks suppressed
[  246.767251][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  246.770968][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  246.774686][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  246.778986][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  246.801069][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  246.803033][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  246.813687][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  246.815274][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  246.837857][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  246.839599][ T6932] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  251.082159][ T6952] nvme nvme0: failed to connect socket: -512
[  252.778328][ T6984] Cannot find add_set index 0 as target
[  253.349937][ T6985] loop1: detected capacity change from 0 to 128
[  253.367115][   T32] audit: type=1800 audit(1792084387.241:25): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="file0" dev="tmpfs" ino=317 res=0 errno=-22
[  253.404331][ T6985] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  253.422523][ T6985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.522847][ T6975] can: request_module (can-proto-0) failed.
[  254.354054][ T6993] loop3: detected capacity change from 0 to 40427
[  254.370668][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.246'.
[  254.373956][ T6993] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  254.373971][ T6993] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  254.446676][ T6993] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  254.470212][ T6993] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  254.470235][ T6993] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  254.911778][ T7013] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0)
[  255.455510][   T32] audit: type=1800 audit(1792084389.206:26): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.247" name="file1" dev="loop3" ino=11 res=0 errno=-22
[  257.684600][   T32] audit: type=1400 audit(1792084390.852:27): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7017 comm="syz.1.252" name="unknown" offset=16
[  258.421520][ T7024] tap0: tun_chr_ioctl cmd 1074025676
[  258.421534][ T7024] tap0: owner set to 0
[  262.174164][ T7039] all: renamed from bridge_slave_0 (while UP)
[  262.825674][ T7044] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  264.208590][ T7053] loop2: detected capacity change from 0 to 128
[  264.319804][ T7053] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  265.119475][ T7053] qnx6: wrong signature (magic) in superblock #1.
[  265.119538][ T7053] qnx6: unable to read the first superblock
[  266.236901][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  266.236958][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  266.756492][ T7067] netlink: 52 bytes leftover after parsing attributes in process `syz.2.264'.
[  269.746279][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[  270.205578][ T7092] loop3: detected capacity change from 0 to 512
[  270.423384][ T7092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002]
[  270.423509][ T7092] System zones: 1-12
[  270.447261][ T7092] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.272: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[  270.447287][ T7092] loop3: lost filesystem error report for type 5 error -117
[  270.448082][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  270.448099][    C1] EXT4-fs (loop3): initial error at time 1792084403: ext4_xattr_inode_iget:473
[  270.448120][    C1] EXT4-fs (loop3): last error at time 1792084403: ext4_xattr_inode_iget:473
[  270.463453][ T7092] EXT4-fs (loop3): 1 orphan inode deleted
[  270.465599][ T7092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.549056][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.842821][   T32] audit: type=1400 audit(1792084408.297:28): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A2701 pid=7123 comm="syz.1.275"
[  276.640764][ T7137] loop3: detected capacity change from 0 to 512
[  276.671906][ T7137] EXT4-fs: test_dummy_encryption requires encrypt feature
[  277.788460][ T7136] ima: policy update failed
[  277.789000][   T32] audit: type=1804 audit(1792084409.747:29): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.3.283" name="ima_policy_written" res=0 errno=-17
[  277.789038][   T32] audit: type=1807 audit(1792084409.747:30): UNKNOWN=? res=0
[  277.789065][   T32] audit: type=1802 audit(1792084409.747:31): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.283" res=0 errno=-22
[  277.789097][   T32] audit: type=1802 audit(1792084410.121:32): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.283" res=0 errno=-22
[  278.397634][ T7150] veth1_to_bond: entered promiscuous mode
[  278.406056][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'.
[  278.832998][ T7150] veth1_to_bond (unregistering): left promiscuous mode
[  278.841366][ T7150] bond0: (slave bond_slave_1): Releasing backup interface
[  279.292874][ T7153] loop2: detected capacity change from 0 to 2048
[  279.852047][   T32] audit: type=1326 audit(1792084411.599:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.1.286" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  279.852081][   T32] audit: type=1326 audit(1792084411.609:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.1.286" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  279.852102][   T32] audit: type=1326 audit(1792084411.609:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.1.286" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  279.852122][   T32] audit: type=1326 audit(1792084411.609:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.1.286" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  279.852141][   T32] audit: type=1326 audit(1792084411.609:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.1.286" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  279.922777][ T7153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  282.540364][ T7164] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[  282.695710][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'.
[  282.695905][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'.
[  287.940599][ T7188] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer.
[  288.057014][ T7194] overlayfs: missing 'lowerdir'
[  291.294048][ T7221] loop1: detected capacity change from 0 to 512
[  293.375149][ T7232] loop1: detected capacity change from 0 to 1024
[  294.596143][ T1004] IPVS: starting estimator thread 0...
[  294.683486][ T7243] IPVS: using max 36 ests per chain, 86400 per kthread
[  305.216375][ T7295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  309.025203][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.327'.
[  309.027468][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.327'.
[  310.500509][ T7336] Line length is too long: Should be less than 4094
[  313.712096][ T7354] loop2: detected capacity change from 0 to 2048
[  315.790604][ T7354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  317.322432][ T7371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  319.562540][ T7399] tipc: Started in network mode
[  319.562615][ T7399] tipc: Node identity 4, cluster identity 4711
[  319.562650][ T7399] tipc: Node number set to 4
[  319.789093][   T32] kauditd_printk_skb: 24 callbacks suppressed
[  319.789118][   T32] audit: type=1800 audit(1792084449.408:62): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.342" name=08 dev="sda1" ino=2047 res=0 errno=-22
[  323.236526][ T7432] Process accounting resumed
[  326.881515][ T7453] loop2: detected capacity change from 0 to 512
[  326.925940][ T7453] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  326.926055][ T7453] System zones: 1-12
[  326.944881][ T7453] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.356: missing EA_INODE flag
[  326.945082][ T7453] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  326.948308][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  326.948327][    C0] EXT4-fs (loop2): initial error at time 1792084456: ext4_xattr_inode_iget:437: inode 12
[  326.948353][    C0] EXT4-fs (loop2): last error at time 1792084456: ext4_xattr_inode_iget:437: inode 12
[  327.001928][ T7453] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.356: error while reading EA inode 12 err=-117
[  327.001956][ T7453] loop2: lost filesystem error report for type 5 error -117
[  327.004053][ T7453] EXT4-fs (loop2): 1 orphan inode deleted
[  327.005724][ T7453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.089931][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.697338][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'.
[  331.924405][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  331.924459][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  332.074249][ T7487] loop3: detected capacity change from 0 to 512
[  332.095305][ T7487] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  332.095321][ T7487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  332.149354][ T7487] EXT4-fs (loop3): 1 truncate cleaned up
[  332.174918][ T7487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.675279][ T7493] EXT4-fs error (device loop3): __ext4_expand_extra_isize:7449: inode #12: comm syz.3.366: bad extra_isize 62 (inode size 256)
[  332.736160][ T7493] EXT4-fs (loop3): Remounting filesystem read-only
[  333.076176][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.532074][ T7512] usb usb7: check_ctrlrecip: process 7512 (syz.0.365) requesting ep 01 but needs 81
[  338.433490][ T7531] loop1: detected capacity change from 0 to 512
[  338.444546][ T7531] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  338.444560][ T7531] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  338.500061][ T7531] EXT4-fs (loop1): 1 truncate cleaned up
[  338.523947][ T7531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.963060][ T7542] EXT4-fs error (device loop1): __ext4_expand_extra_isize:7449: inode #12: comm syz.1.378: bad extra_isize 62 (inode size 256)
[  339.256590][ T7542] EXT4-fs (loop1): Remounting filesystem read-only
[  339.430143][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.414264][ T7570] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  345.424349][ T7585] libceph: resolve '0.' (ret=-3): failed
[  346.701850][   T51] IPVS: starting estimator thread 0...
[  347.817428][ T7603] IPVS: using max 31 ests per chain, 74400 per kthread
[  348.111897][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'.
[  348.112070][ T7616] netlink: 43 bytes leftover after parsing attributes in process `syz.3.391'.
[  348.343081][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  350.458033][ T7641] ip_tables: iptables: counters copy to user failed while replacing table
[  356.425725][ T7678] 9pnet_virtio: no channels available for device syz
[  357.025603][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7973 instead
[  357.025718][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0003 instead
[  357.025753][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x0003 instead
[  357.025787][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x001e instead
[  357.025821][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000005c: 0x387a instead
[  357.025855][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000060: 0x0400 instead
[  357.025889][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000064: 0xf9dc instead
[  357.025923][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000068: 0x000d instead
[  357.025938][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000006c: 0x8b48 instead
[  357.025951][ T7679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x0002 instead
[  357.026006][ T7679] jffs2: Further such events for this erase block will not be printed
[  357.026260][ T7679] jffs2: Empty flash at 0x00000200 ends at 0x00000204
[  357.026526][ T7679] jffs2: Empty flash at 0x00000420 ends at 0x00000424
[  357.026853][ T7679] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  357.026881][ T7679] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  364.195734][ T7726] netlink: 'syz.3.418': attribute type 1 has an invalid length.
[  364.938036][ T7735] loop3: detected capacity change from 0 to 512
[  365.460432][ T7735] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  365.460447][ T7735] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002]
[  365.460491][ T7735] System zones: 0-1, 15-15, 18-18, 34-34
[  365.460645][ T7735] EXT4-fs (loop3): orphan cleanup on readonly fs
[  365.460689][ T7735] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  365.460731][ T7735] EXT4-fs warning (device loop3): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  365.460745][ T7735] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  365.461104][ T7735] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.421: bad orphan inode 16
[  365.461127][ T7735] loop3: lost filesystem error report for type 5 error -117
[  365.461691][ T7735] ext4_test_bit(bit=15, block=18) = 1
[  365.461709][ T7735] is_bad_inode(inode)=0
[  365.461716][ T7735] NEXT_ORPHAN(inode)=0
[  365.461723][ T7735] max_ino=32
[  365.461731][ T7735] i_nlink=2
[  365.463645][ T7735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  367.056791][ T7748] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  368.009809][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.490598][ T7764] LUN: removable file: (no medium)
[  371.023107][ T7779] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  372.341035][ T7790] input: syz0 as /devices/virtual/input/input8
[  375.174670][ T7822] loop3: detected capacity change from 0 to 2048
[  375.226017][ T7822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  376.494385][ T7828] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  379.317917][ T7862] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  379.378498][ T7863] sctp: [Deprecated]: syz.0.446 (pid 7863) Use of struct sctp_assoc_value in delayed_ack socket option.
[  379.378498][ T7863] Use struct sctp_sack_info instead
[  379.772202][ T7851] block nbd3: shutting down sockets
[  382.477141][ T7874] loop1: detected capacity change from 0 to 64
[  382.508885][ T7874] hfs: unable to locate alternate MDB
[  382.508914][ T7874] hfs: continuing without an alternate MDB
[  382.585259][   T32] audit: type=1800 audit(1792084508.142:63): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.452" name="file1" dev="loop1" ino=21 res=0 errno=-22
[  382.599358][ T7874] nfs4: Unknown parameter '1'
[  384.571513][ T7884] loop3: detected capacity change from 0 to 2048
[  384.663648][ T7884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  386.789557][ T7906] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  387.649511][   T10] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  388.690886][   T10] usb 2-1: device descriptor read/all, error -71
[  390.564413][ T7924] loop1: detected capacity change from 0 to 1024
[  390.618185][ T7924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  390.618497][ T7924] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  390.619520][ T7924] JBD2: no valid journal superblock found
[  390.643803][ T7924] EXT4-fs (loop1): Could not load journal inode
[  391.718263][ T7935] ip_tables: iptables: counters copy to user failed while replacing table
[  392.839705][ T7942] loop3: detected capacity change from 0 to 2048
[  392.924906][ T7942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  398.643487][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  398.643538][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  398.885364][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  399.070228][ T7982] loop3: detected capacity change from 0 to 4096
[  399.190076][ T7982] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  399.559940][ T7984] ntfs3: Cannot use different iocharset when remounting!
[  400.280383][ T7989] loop3: detected capacity change from 0 to 512
[  400.288677][ T7989] EXT4-fs: Ignoring removed nomblk_io_submit option
[  400.327135][ T7989] EXT4-fs (loop3): unable to read superblock
[  400.380012][ T7991] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  400.872908][ T7997] netlink: 52 bytes leftover after parsing attributes in process `syz.4.478'.
[  410.861876][ T8047] loop3: detected capacity change from 0 to 164
[  410.877526][ T8047] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  410.877569][ T8047] isofs_fill_super: root inode is not a directory. Corrupted media?
[  413.027732][ T5609] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  414.189744][ T5609] usb 1-1: unable to get BOS descriptor or descriptor too short
[  414.246930][ T5609] usb 1-1: not running at top speed; connect to a high speed hub
[  414.265836][ T5609] usb 1-1: New USB device found: idVendor=0421, idProduct=e222, bcdDevice=aa.4d
[  414.291474][ T5609] usb 1-1: config 19 has an invalid interface number: 87 but max is 0
[  414.291612][ T5609] usb 1-1: config 19 has no interface number 0
[  414.327167][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.327243][ T5609] usb 1-1: Product: syz
[  414.327285][ T5609] usb 1-1: Manufacturer: syz
[  414.327351][ T5609] usb 1-1: SerialNumber: syz
[  414.629693][ T8069] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  415.258534][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'.
[  418.794730][ T5609] cdc_phonet 1-1:19.87: probe with driver cdc_phonet failed with error -22
[  419.554365][ T5609] usb 1-1: USB disconnect, device number 2
[  425.284009][ T8108] loop3: detected capacity change from 0 to 512
[  425.733111][ T8108] EXT4-fs (loop3): 1 truncate cleaned up
[  425.734086][ T8108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  425.842000][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.105323][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'.
[  433.787862][ T8147] loop3: detected capacity change from 0 to 16
[  435.043421][ T8147] erofs (device loop3): mounted with root inode @ nid 36.
[  435.410306][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.410564][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.437788][ T8157] bridge0: entered allmulticast mode
[  435.587698][ T8157] ip_tables: iptables: counters copy to user failed while replacing table
[  440.109684][   T32] audit: type=1326 audit(1792084561.965:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.109899][   T32] audit: type=1326 audit(1792084561.965:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.110347][   T32] audit: type=1326 audit(1792084561.965:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.110560][   T32] audit: type=1326 audit(1792084561.965:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.110754][   T32] audit: type=1326 audit(1792084561.965:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.111178][   T32] audit: type=1326 audit(1792084561.965:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.114120][   T32] audit: type=1326 audit(1792084561.965:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.114337][   T32] audit: type=1326 audit(1792084561.965:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.114825][   T32] audit: type=1326 audit(1792084561.965:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.115241][   T32] audit: type=1326 audit(1792084561.965:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.1.521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  440.401253][ T8181] loop3: detected capacity change from 0 to 512
[  440.402816][ T8181] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  440.402830][ T8181] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  440.438367][ T8181] EXT4-fs (loop3): 1 truncate cleaned up
[  440.445820][ T8181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.808655][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.931497][ T8204] configfs-gadget.g1 gadget.0: HOST MAC 82:11:67:9c:89:4b
[  444.931522][ T8204] configfs-gadget.g1 gadget.0: MAC ce:29:f6:23:7f:11
[  445.220633][ T8213] tmpfs: Bad value for 'mpol'
[  445.225676][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'.
[  445.699573][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  445.873322][   T10] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03
[  445.874149][   T10] usb 1-1: Dual-Role OTG device on HNP port
[  445.878832][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.166604][   T10] cdc_ncm 1-1:1.0: MAC-Address: 82:11:67:9c:89:4b
[  448.165650][   T10] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 82:11:67:9c:89:4b
[  454.937322][ T8278] loop3: detected capacity change from 0 to 40427
[  454.942759][ T8278] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  454.942781][ T8278] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  455.086964][ T8278] F2FS-fs (loop3): invalid crc value
[  455.736317][ T8278] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  455.750381][ T8278] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  455.750403][ T8278] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  464.142490][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  464.142546][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  465.340880][   T32] kauditd_printk_skb: 29 callbacks suppressed
[  465.340898][   T32] audit: type=1107 audit(1792084585.565:103): pid=8347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÌçG'3š•lÕ¨‹K>uwIh$ô0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y'
[  467.665313][ T8357] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  474.748374][   T32] audit: type=1326 audit(1792084594.358:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.564" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85a399e559 code=0x0
[  474.894512][ T8421] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  479.225798][ T8458] sctp: [Deprecated]: syz.4.578 (pid 8458) Use of int in max_burst socket option.
[  479.225798][ T8458] Use struct sctp_assoc_value instead
[  490.065936][ T8527] 8021q: VLANs not supported on xfrm0
[  494.677024][ T8558] netlink: 'syz.4.601': attribute type 4 has an invalid length.
[  494.677040][ T8558] netlink: 17 bytes leftover after parsing attributes in process `syz.4.601'.
[  496.327512][ T8582] tipc: Started in network mode
[  496.327712][ T8582] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  496.330873][ T8582] tipc: Enabled bearer <eth:syz_tun>, priority 1
[  499.085120][ T5735] tipc: Node number set to 43690
[  499.129279][   T32] audit: type=1326 audit(1792084617.163:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  499.129562][   T32] audit: type=1326 audit(1792084617.163:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  499.130163][   T32] audit: type=1326 audit(1792084617.163:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  499.130488][   T32] audit: type=1326 audit(1792084617.163:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  499.360810][   T32] audit: type=1326 audit(1792084617.163:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  499.388086][   T32] audit: type=1326 audit(1792084617.415:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  499.389027][   T32] audit: type=1326 audit(1792084617.415:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  499.389425][   T32] audit: type=1326 audit(1792084617.415:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  499.389621][   T32] audit: type=1326 audit(1792084617.415:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  499.390120][   T32] audit: type=1326 audit(1792084617.415:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.1.598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a399e559 code=0x7ffc0000
[  502.811220][ T8590] ima: policy update completed
[  502.929680][ T8611] FAULT_INJECTION: forcing a failure.
[  502.929680][ T8611] name failslab, interval 1, probability 0, space 0, times 1
[  502.929726][ T8611] CPU: 1 UID: 0 PID: 8611 Comm: syz.1.611 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  502.929755][ T8611] Tainted: [L]=SOFTLOCKUP
[  502.929762][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  502.929777][ T8611] Call Trace:
[  502.929787][ T8611]  <TASK>
[  502.929796][ T8611]  dump_stack_lvl+0xe8/0x150
[  502.929828][ T8611]  should_fail_ex+0x3eb/0x540
[  502.929853][ T8611]  should_failslab+0xa8/0x100
[  502.929878][ T8611]  __kmalloc_cache_noprof+0x9e/0x600
[  502.929907][ T8611]  ? device_add+0xb6/0xb80
[  502.929940][ T8611]  ? device_add+0xb6/0xb80
[  502.929972][ T8611]  device_add+0xb6/0xb80
[  502.930002][ T8611]  netdev_register_kobject+0x197/0x350
[  502.930037][ T8611]  register_netdevice+0x17be/0x2280
[  502.930077][ T8611]  ? __pfx_register_netdevice+0x10/0x10
[  502.930109][ T8611]  ? net_generic+0x1e/0x240
[  502.930137][ T8611]  vti6_tnl_create2+0x79/0x370
[  502.930164][ T8611]  vti6_locate+0x684/0x780
[  502.930194][ T8611]  ? __pfx_vti6_locate+0x10/0x10
[  502.930216][ T8611]  ? __might_fault+0xaf/0x130
[  502.930240][ T8611]  ? vti6_siocdevprivate+0x560/0x820
[  502.930267][ T8611]  vti6_siocdevprivate+0x6ac/0x820
[  502.930293][ T8611]  ? __pfx_vti6_siocdevprivate+0x10/0x10
[  502.930338][ T8611]  ? __pfx___mutex_lock+0x10/0x10
[  502.930358][ T8611]  ? full_name_hash+0xb0/0xe0
[  502.930393][ T8611]  dev_ifsioc+0xb56/0x1360
[  502.930419][ T8611]  dev_ioctl+0x84c/0x1150
[  502.930443][ T8611]  sock_ioctl+0x753/0x7e0
[  502.930470][ T8611]  ? __pfx_sock_ioctl+0x10/0x10
[  502.930498][ T8611]  ? __fget_files+0x2a/0x420
[  502.930521][ T8611]  ? bpf_lsm_file_ioctl+0x9/0x20
[  502.930543][ T8611]  ? __pfx_sock_ioctl+0x10/0x10
[  502.930566][ T8611]  __se_sys_ioctl+0xfc/0x170
[  502.930592][ T8611]  do_syscall_64+0x166/0x520
[  502.930611][ T8611]  ? trace_irq_disable+0x3b/0x140
[  502.930633][ T8611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.930653][ T8611]  ? clear_bhb_loop+0x70/0xc0
[  502.930676][ T8611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.930693][ T8611] RIP: 0033:0x7f85a399e559
[  502.930723][ T8611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.930741][ T8611] RSP: 002b:00007f85a493c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  502.930763][ T8611] RAX: ffffffffffffffda RBX: 00007f85a3c25fa0 RCX: 00007f85a399e559
[  502.930777][ T8611] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000007
[  502.930789][ T8611] RBP: 00007f85a3a358b0 R08: 0000000000000000 R09: 0000000000000000
[  502.930801][ T8611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.930813][ T8611] R13: 00007f85a3c26038 R14: 00007f85a3c25fa0 R15: 00007fff221bb118
[  502.930844][ T8611]  </TASK>
[  505.138771][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[  507.509663][ T8649] 
[  507.512030][ T8649] ======================================================
[  507.519042][ T8649] WARNING: possible circular locking dependency detected
[  507.526075][ T8649] syzkaller #0 Tainted: G             L      
[  507.532131][ T8649] ------------------------------------------------------
[  507.539147][ T8649] udevd/8649 is trying to acquire lock:
[  507.544685][ T8649] ffff88802c56b638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[  507.553033][ T8649] 
[  507.553033][ T8649] but task is already holding lock:
[  507.560381][ T8649] ffff8880551c7378 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10
[  507.570986][ T8649] 
[  507.570986][ T8649] which lock already depends on the new lock.
[  507.570986][ T8649] 
[  507.581367][ T8649] 
[  507.581367][ T8649] the existing dependency chain (in reverse order) is:
[  507.590362][ T8649] 
[  507.590362][ T8649] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  507.598954][ T8649]        __mutex_lock+0x197/0x15a0
[  507.604054][ T8649]        process_measurement+0x7d0/0x1c10
[  507.609762][ T8649]        ima_file_check+0xdc/0x130
[  507.614860][ T8649]        security_file_post_open+0xb3/0x260
[  507.620746][ T8649]        path_openat+0x1748/0x20f0
[  507.625848][ T8649]        do_file_open+0x258/0x570
[  507.630857][ T8649]        filp_open+0x16d/0x1d0
[  507.635612][ T8649]        kernel_read_file_from_path_initns+0xde/0x1e0
[  507.642361][ T8649]        _request_firmware+0xa2b/0x1750
[  507.647904][ T8649]        request_firmware+0x36/0x50
[  507.653089][ T8649]        reg_reload_regdb+0x94/0x580
[  507.658369][ T8649]        genl_family_rcv_msg_doit+0x233/0x340
[  507.664431][ T8649]        genl_rcv_msg+0x614/0x7a0
[  507.669442][ T8649]        netlink_rcv_skb+0x226/0x4a0
[  507.674718][ T8649]        genl_rcv+0x28/0x40
[  507.679204][ T8649]        netlink_unicast+0x8ef/0xa80
[  507.684478][ T8649]        netlink_sendmsg+0x7f0/0xb20
[  507.689752][ T8649]        sock_sendmsg_nosec+0x14e/0x190
[  507.695287][ T8649]        ____sys_sendmsg+0x54e/0x850
[  507.700559][ T8649]        ___sys_sendmsg+0x2a5/0x360
[  507.705744][ T8649]        __x64_sys_sendmsg+0x1b1/0x290
[  507.711190][ T8649]        do_syscall_64+0x166/0x520
[  507.716291][ T8649]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.722691][ T8649] 
[  507.722691][ T8649] -> #3 (cb_lock){++++}-{4:4}:
[  507.729620][ T8649]        down_read+0x45/0x320
[  507.734283][ T8649]        genl_release+0x89/0x1e0
[  507.739204][ T8649]        netlink_release+0xe94/0x1a80
[  507.744566][ T8649]        __sock_release+0xa0/0x1f0
[  507.749669][ T8649]        sock_close+0x1c/0x30
[  507.754333][ T8649]        __fput+0x408/0xa40
[  507.758832][ T8649]        fput_close_sync+0x11f/0x240
[  507.764115][ T8649]        __se_sys_close+0xa2/0x160
[  507.769222][ T8649]        do_syscall_64+0x166/0x520
[  507.774323][ T8649]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.780722][ T8649] 
[  507.780722][ T8649] -> #2 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}:
[  507.789395][ T8649]        down_write+0x91/0x200
[  507.794149][ T8649]        __sock_release+0x7a/0x1f0
[  507.799249][ T8649]        sock_close+0x1c/0x30
[  507.803912][ T8649]        __fput+0x408/0xa40
[  507.808405][ T8649]        nvme_tcp_alloc_queue+0x17ba/0x1e30
[  507.814292][ T8649]        nvme_tcp_configure_admin_queue+0x23/0x3f0
[  507.820789][ T8649]        nvme_tcp_setup_ctrl+0xba/0x1880
[  507.826412][ T8649]        nvme_tcp_create_ctrl+0x85f/0xc60
[  507.832122][ T8649]        nvmf_dev_write+0x24ca/0x2d90
[  507.837483][ T8649]        vfs_write+0x296/0xba0
[  507.842232][ T8649]        ksys_write+0x150/0x270
[  507.847065][ T8649]        do_syscall_64+0x166/0x520
[  507.852163][ T8649]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.858561][ T8649] 
[  507.858561][ T8649] -> #1 (nvmf_dev_mutex){+.+.}-{4:4}:
[  507.866104][ T8649]        __mutex_lock+0x197/0x15a0
[  507.871210][ T8649]        nvmf_dev_show+0x2c/0x180
[  507.876225][ T8649]        seq_read_iter+0x463/0xca0
[  507.881328][ T8649]        seq_read+0x367/0x480
[  507.885993][ T8649]        vfs_read+0x213/0xa80
[  507.890656][ T8649]        ksys_read+0x150/0x270
[  507.895407][ T8649]        do_syscall_64+0x166/0x520
[  507.900507][ T8649]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.906906][ T8649] 
[  507.906906][ T8649] -> #0 (&p->lock){+.+.}-{4:4}:
[  507.913929][ T8649]        __lock_acquire+0x164c/0x2de0
[  507.919285][ T8649]        lock_acquire+0x115/0x350
[  507.924297][ T8649]        __mutex_lock+0x197/0x15a0
[  507.929399][ T8649]        seq_read_iter+0xa4/0xca0
[  507.934411][ T8649]        __kernel_read+0x4ca/0x960
[  507.939509][ T8649]        integrity_kernel_read+0x89/0xd0
[  507.945127][ T8649]        ima_calc_file_hash+0x451/0x890
[  507.950658][ T8649]        ima_collect_measurement+0x51b/0xa00
[  507.956626][ T8649]        process_measurement+0x1272/0x1c10
[  507.962416][ T8649]        ima_file_check+0xdc/0x130
[  507.967514][ T8649]        security_file_post_open+0xb3/0x260
[  507.973397][ T8649]        path_openat+0x1748/0x20f0
[  507.978493][ T8649]        do_file_open+0x258/0x570
[  507.983503][ T8649]        do_sys_openat2+0x115/0x200
[  507.988692][ T8649]        __x64_sys_openat+0x138/0x170
[  507.994052][ T8649]        do_syscall_64+0x166/0x520
[  507.999152][ T8649]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.005554][ T8649] 
[  508.005554][ T8649] other info that might help us debug this:
[  508.005554][ T8649] 
[  508.015768][ T8649] Chain exists of:
[  508.015768][ T8649]   &p->lock --> cb_lock --> &ima_iint_mutex_key[depth]
[  508.015768][ T8649] 
[  508.028438][ T8649]  Possible unsafe locking scenario:
[  508.028438][ T8649] 
[  508.035867][ T8649]        CPU0                    CPU1
[  508.041222][ T8649]        ----                    ----
[  508.046568][ T8649]   lock(&ima_iint_mutex_key[depth]);
[  508.051925][ T8649]                                lock(cb_lock);
[  508.058154][ T8649]                                lock(&ima_iint_mutex_key[depth]);
[  508.066028][ T8649]   lock(&p->lock);
[  508.069822][ T8649] 
[  508.069822][ T8649]  *** DEADLOCK ***
[  508.069822][ T8649] 
[  508.077955][ T8649] locks held by udevd/8649: 1, last CPU#0:
[  508.083744][ T8649]  #0: ffff8880551c7378 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10
[  508.094777][ T8649] 
[  508.094777][ T8649] stack backtrace:
[  508.100654][ T8649] CPU: 0 UID: 0 PID: 8649 Comm: udevd Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  508.111136][ T8649] Tainted: [L]=SOFTLOCKUP
[  508.115444][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  508.125479][ T8649] Call Trace:
[  508.128743][ T8649]  <TASK>
[  508.131661][ T8649]  dump_stack_lvl+0xe8/0x150
[  508.136243][ T8649]  print_circular_bug+0x2e2/0x300
[  508.141259][ T8649]  check_noncircular+0x12f/0x150
[  508.146192][ T8649]  __lock_acquire+0x164c/0x2de0
[  508.151037][ T8649]  ? lock_acquire+0x115/0x350
[  508.155703][ T8649]  ? lock_acquire+0x115/0x350
[  508.160373][ T8649]  lock_acquire+0x115/0x350
[  508.164863][ T8649]  ? seq_read_iter+0xa4/0xca0
[  508.169540][ T8649]  __mutex_lock+0x197/0x15a0
[  508.174119][ T8649]  ? seq_read_iter+0xa4/0xca0
[  508.178783][ T8649]  ? __kernel_text_address+0xd/0x30
[  508.183974][ T8649]  ? unwind_get_return_address+0x4d/0x90
[  508.189604][ T8649]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  508.195743][ T8649]  ? arch_stack_walk+0xfb/0x150
[  508.200583][ T8649]  ? seq_read_iter+0xa4/0xca0
[  508.205251][ T8649]  ? __pfx___mutex_lock+0x10/0x10
[  508.210267][ T8649]  ? stack_trace_save+0xa9/0x100
[  508.215201][ T8649]  ? stack_depot_save_flags+0x33/0x7f0
[  508.220645][ T8649]  ? rcu_is_watching+0x16/0xb0
[  508.225402][ T8649]  seq_read_iter+0xa4/0xca0
[  508.229893][ T8649]  ? ima_calc_file_hash+0x40f/0x890
[  508.235084][ T8649]  ? ima_collect_measurement+0x51b/0xa00
[  508.240705][ T8649]  ? process_measurement+0x1272/0x1c10
[  508.246150][ T8649]  ? ima_file_check+0xdc/0x130
[  508.250903][ T8649]  ? __asan_memset+0x22/0x50
[  508.255482][ T8649]  ? kernfs_fop_read_iter+0x144/0x6a0
[  508.260846][ T8649]  __kernel_read+0x4ca/0x960
[  508.265424][ T8649]  ? __pfx___kernel_read+0x10/0x10
[  508.270550][ T8649]  ? rcu_is_watching+0x16/0xb0
[  508.275310][ T8649]  integrity_kernel_read+0x89/0xd0
[  508.280406][ T8649]  ? __pfx_integrity_kernel_read+0x10/0x10
[  508.286202][ T8649]  ? __kmalloc_cache_noprof+0x148/0x600
[  508.291737][ T8649]  ? ima_calc_file_hash+0x40f/0x890
[  508.296933][ T8649]  ? ima_calc_file_hash+0x40f/0x890
[  508.302125][ T8649]  ima_calc_file_hash+0x451/0x890
[  508.307139][ T8649]  ? __pfx_ima_calc_file_hash+0x10/0x10
[  508.312690][ T8649]  ima_collect_measurement+0x51b/0xa00
[  508.318142][ T8649]  ? __pfx_ima_collect_measurement+0x10/0x10
[  508.324115][ T8649]  ? kernfs_root+0x1c/0x230
[  508.328611][ T8649]  ? kernfs_root+0x1c/0x230
[  508.333107][ T8649]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  508.338554][ T8649]  process_measurement+0x1272/0x1c10
[  508.343834][ T8649]  ? __pfx_process_measurement+0x10/0x10
[  508.349453][ T8649]  ? trace_contention_end+0x3d/0x140
[  508.354744][ T8649]  ? kernfs_put_active+0xa0/0x100
[  508.359754][ T8649]  ? kernfs_fop_open+0xb0b/0xd20
[  508.364687][ T8649]  ima_file_check+0xdc/0x130
[  508.369269][ T8649]  ? do_dentry_open+0xcf9/0x1360
[  508.374201][ T8649]  ? __pfx_ima_file_check+0x10/0x10
[  508.379389][ T8649]  security_file_post_open+0xb3/0x260
[  508.384776][ T8649]  path_openat+0x1748/0x20f0
[  508.389552][ T8649]  do_file_open+0x258/0x570
[  508.394048][ T8649]  ? __pfx_do_file_open+0x10/0x10
[  508.399071][ T8649]  ? _raw_spin_unlock+0x28/0x50
[  508.403917][ T8649]  ? alloc_fd+0x6af/0x760
[  508.408246][ T8649]  do_sys_openat2+0x115/0x200
[  508.412921][ T8649]  ? __pfx_do_sys_openat2+0x10/0x10
[  508.418115][ T8649]  ? do_user_addr_fault+0xd3f/0x1480
[  508.423389][ T8649]  __x64_sys_openat+0x138/0x170
[  508.428237][ T8649]  do_syscall_64+0x166/0x520
[  508.432817][ T8649]  ? trace_irq_disable+0x3b/0x140
[  508.437829][ T8649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.443879][ T8649]  ? clear_bhb_loop+0x70/0xc0
[  508.448550][ T8649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.454433][ T8649] RIP: 0033:0x7f5811ea7407
[  508.458837][ T8649] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  508.478433][ T8649] RSP: 002b:00007ffe2ad5b5f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  508.486837][ T8649] RAX: ffffffffffffffda RBX: 00007f5812587880 RCX: 00007f5811ea7407
[  508.494798][ T8649] RDX: 0000000000080000 RSI: 00007ffe2ad5b770 RDI: ffffffffffffff9c
[  508.502756][ T8649] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000
[  508.510712][ T8649] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562b877867f5
[  508.518677][ T8649] R13: 0000562b877867f5 R14: 0000000000000001 R15: 0000562b877a1140
[  508.526642][ T8649]  </TASK>
[  508.646478][   T32] kauditd_printk_skb: 466 callbacks suppressed
[  508.646493][   T32] audit: type=1800 audit(1792084625.965:581): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=138443 res=0 errno=-22
[  508.646523][   T32] audit: type=1800 audit(1792084626.040:582): pid=8649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=138458 res=0 errno=-22
[  508.684817][ T8653] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.648298][ T8654] loop3: detected capacity change from 0 to 32768
[  509.657750][   T32] audit: type=1800 audit(1792084627.013:583): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15356 res=0 errno=-22
[  509.659629][   T32] audit: type=1800 audit(1792084627.013:584): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15356 res=0 errno=-22