last executing test programs:

5m8.703040611s ago: executing program 2 (id=238):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2}]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

5m6.363920545s ago: executing program 2 (id=241):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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")
r0 = getpgrp(0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
rt_sigprocmask(0x2, 0x0, 0x0, 0x0)
r1 = getpid()
symlink(0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0)

5m1.840051862s ago: executing program 2 (id=244):
r0 = socket$xdp(0x2c, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x20020, 0x4)

4m58.964836423s ago: executing program 2 (id=253):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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")
r0 = getpgrp(0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
rt_sigprocmask(0x2, 0x0, 0x0, 0x0)
r1 = getpid()
symlink(0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0)

4m56.509432788s ago: executing program 2 (id=257):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
lseek(r1, 0x7fffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x6, 0x9dc8, 0x0, 0x0, 0xf})
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4048000}, 0x880)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x8000, @mcast1, 0x7ff}, {0xa, 0x4e23, 0x8, @empty, 0x401}, 0x1, {[0x9, 0x7ff, 0x5, 0x200, 0x6, 0x6, 0xa0b70e0, 0x80000001]}}, 0x5c)

4m51.495927587s ago: executing program 2 (id=269):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x51}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x10}, 0x18)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

4m50.218274779s ago: executing program 32 (id=269):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x51}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x10}, 0x18)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

4m46.867835804s ago: executing program 0 (id=275):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8008, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0})

4m46.387712986s ago: executing program 0 (id=278):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a882}}, 0x20}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00')
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

4m46.155923636s ago: executing program 0 (id=281):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0xa}, {0x0}, &(0x7f0000000980)=[{&(0x7f0000000840)=""/45, 0x2d}], 0x1, 0x8}}], 0x48}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x5c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, <r7=>0x0], &(0x7f0000000040), 0x3, r6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r6], 0x0, &(0x7f0000000640)=[r7, r7, r7], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
r8 = io_uring_setup(0x497c, &(0x7f0000000280)={0x0, 0x1})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101883, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

4m44.087859248s ago: executing program 0 (id=283):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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")
r0 = getpgrp(0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
rt_sigprocmask(0x2, 0x0, 0x0, 0x0)
r1 = getpid()
symlink(0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0)

4m42.00441308s ago: executing program 0 (id=285):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setsig(0x4203, r0, 0x81, &(0x7f0000000000)={0x9, 0x2, 0x6})

4m35.396524221s ago: executing program 0 (id=295):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x400, 0x80040100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_readv(r2, 0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000340)=""/9, 0x9}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000001a00010027bd700003dcd72502202001000000000020000008001100ac1414bb080002"], 0x2c}}, 0x4048000)
syz_emit_ethernet(0x69, &(0x7f0000000500)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x33, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x2, '\x00', {0x2, 0x6, "e493ad", 0x94f, 0x2f, 0xff, @rand_addr=' \x01\x00', @loopback, [], "bd002f"}}}}}}}, 0x0)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000640)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r4, 0x100, 0x4)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d0b939d60a53067d50000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x2000)

4m34.791723384s ago: executing program 33 (id=295):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x400, 0x80040100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_readv(r2, 0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000340)=""/9, 0x9}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000001a00010027bd700003dcd72502202001000000000020000008001100ac1414bb080002"], 0x2c}}, 0x4048000)
syz_emit_ethernet(0x69, &(0x7f0000000500)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x33, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x2, '\x00', {0x2, 0x6, "e493ad", 0x94f, 0x2f, 0xff, @rand_addr=' \x01\x00', @loopback, [], "bd002f"}}}}}}}, 0x0)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000640)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r4, 0x100, 0x4)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d0b939d60a53067d50000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x2000)

3m22.975876662s ago: executing program 5 (id=419):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x10, 0x40, 0x2, 0x5, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1}}}})
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = socket$caif_stream(0x25, 0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0)
connect$caif(r3, &(0x7f0000005b00)=@dgm={0x25, 0xc, 0xd}, 0x18)
connect$inet6(r2, &(0x7f0000001840)={0xa, 0x4e23, 0x3, @private0, 0x2}, 0x1c)
shutdown(r2, 0x1)
getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

3m21.123920604s ago: executing program 5 (id=421):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$eJzs3c9Ka1cUB+Bf1JjoJEI7Kh0cKJSORH2DUCyUBgqWQO3IUJUWI0IEoR1UZ32XPk4foy9QC4Vcridq4s31D3o93vh9EM6Cvdc5aychOwl7JzufHx7sHh3vb3/yT5rNIgvJWf5LkrnMZ+QqSGpZzLizAAAfm62tXrvqGviwBoN2r56k8U5Lt15JQQAAAAAAAAAAADza1PX/58nK2Pr/2ug4Z/0/AMwE6/9n32DQ7i2P3r9N6v5VSUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASc6Hw9bwllvV9QEAT+8x8/+/w9LzVQsAPIXJ+b92lvj8DwCz7nxirq/F9/8AMPt+2P7pu3ans7lVFM3k8M+T7km3PJbt7f38mn72spZW/k+GV8r4m287m2vFhZXsHJ6O8k9PGqMLXOavp5WV6fnrZX4xkd+tZ3n8+htp5dPp+RtT8xfz1Rdj+atp5e+fc5R+dvM29zr/j/Wi+Pr7zo38xkU/AAAAAAAAAAAAAAAAAAAAeA6rxZXJ/fvd+bJ99X3tSeqjk9zv9wFu7K9fyGcLlQ4dAAAAAAAAAAAAAAAAAAAAXozj334/6PX7ewPB7cGXjXt0Xnrae/XyQap67A8Lmrmrz9JLKfVVBMNW+Sx6YHpFL0gAAAAAAAAAAAAAAAAAAPCKXW/6TRarLgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKnL9//8PDn78pTzFnZ2rHiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOrwJAAD//ypU4JE=")
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
rt_sigprocmask(0x2, 0x0, 0x0, 0x0)
r1 = getpid()
symlink(0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0)

3m19.113913411s ago: executing program 5 (id=422):
r0 = socket(0x1e, 0x4, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)

3m15.927913771s ago: executing program 5 (id=430):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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")
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
rt_sigprocmask(0x2, 0x0, 0x0, 0x0)
r1 = getpid()
symlink(0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0)

3m12.720406272s ago: executing program 5 (id=440):
mount$overlay(0x0, 0x0, 0x0, 0x220000c, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]})
r0 = msgget$private(0x0, 0x722)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
msgsnd(r0, &(0x7f00000001c0)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000)

3m5.037436417s ago: executing program 5 (id=450):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

3m4.061179073s ago: executing program 34 (id=450):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

14.069025364s ago: executing program 1 (id=821):
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13.803851257s ago: executing program 1 (id=822):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT")
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000000d0000000057"], 0x28}], 0x1}, 0x14008010)
recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x120)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, 0x0, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0)
mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r4, 0xdffaa000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0xa, 0x0, 0x3, 0x100, 'syz1\x00', &(0x7f00000006c0)=['-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10 \x9a\xf7\\\x81[r\xa66\xec\xcf\xcb\xce\xe2{8\x113S\xe0\xf4\x89A\x83\xf6\x0f\xc3\x92Z\x16\xdb\xa2\xcf\xa3\x0e\xd8\xf4j\x81\xcdk?\x13\x03\x90\xddXS\x8ee\xb3t\x1a\xa0\xb2~\xc2\xfate\xb9M\xc4\x943\xd0\x1f\x8b\xa5\xb5\xd4\"\xd2\xf4x\xf6m\xd4\xd7\x18\xff\xb9\xefj\xde3\xe8\x87\x19R\xa3\xb9\x85\"\xd34x\xff;N\xd1\xe6\xff\xf8\xcd\xa8F\xca\xe5>\xd6\x0e\xdc\x9fw\xbd<\x8b\x97\xb2A\x1f\xa8\x97\xec!i\xb4\x9d\x96\r\x86\x8f\x9d\x90\x1cD_\xdaCt<\x9a\xfbv\xcd\xe6\x13s\xe4k\x1d&A\x9c.\x03\x14e\xa8\xff\x15\x00Y`\x04\xeb\xb4R\xb8\x18\\ \x81\xe0L\xca\x89\x90\xc5d$\xa1\x06\xa4\x179J\xc6\x96\xa5<~\xeb\x00[', '\x00[\x10)\xda\x19`W\x80\xe6\xe2\xfb]|t\xe5)R\xd2&\xf8\xe8f\x94h\xa4\xeaIDuY]\x80\xd0\xd1\xa1\x1b\x13\xab\xea?\x00'/52], 0x10c})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
fallocate(r5, 0x0, 0x11, 0x9)

12.469894795s ago: executing program 1 (id=825):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80d03, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x53)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x15)

8.797199567s ago: executing program 6 (id=838):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x20000095, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
socket$alg(0x26, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x24000000)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
r0 = add_key(&(0x7f00000013c0)='big_key\x00', 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, 0x0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)
getpid()
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0)

8.051774832s ago: executing program 4 (id=840):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x428}}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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")
open(0x0, 0x4c27e, 0x2)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000004380)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200025, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d61736b3d4d41595f524541442c6f626a05000000653d726582a2f9ac2c64b7b3745f6d6561737572652c000000000000000000"], 0xff, 0xc48, &(0x7f0000002380)="$eJzs3UFsHNd9B+D/G5JaSm4qJk4Uu42LdVukMmO5sqSYilW4q5pmG0CWiVDMLQBXJKUuTJEESTWykbZMLj30EKAoesiJQGsUSNHAqIugR7Z1geTiQ5FTT0QLG0HRA1sE8MlgMbNvpRVFWjRFSpT1fQb52515b+a9meEMLfDtCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4vdeOX/y+fSgWwEA3E8Xx75x8pTnPwA8Ui75/38AAAAAAAAAAAAAADjoUhTxeKSYv7ieJqr3bf0XWrPXb4wPj2xd7XCqavZU5cuv/udPnT7z1ReGznby4+vvtSfjtbFL5+svz12bX5heXJyeqo/Ptibnpoq8/nt33cLW9ad33aLB8gDUIuL61JUri/VTz52+bfWNgQ9qjx0bODf0zImn2mVv1MeHR0bGusr09u1673fYboTHoSjiRKR49kc/T82IqA7YPR6Lu1w7++1w1YnBqhPjwyNVR2ZazdmlcuVo50AUEfWuSo3OMdruXPTc1z5srxGxXDa/bPBg2b2x+eZC8/LMdH20ubDUWmrNzY6m9pVT9qceRZxNESsRsVa7c3N9UURvpPjB0fV0OSJ6OsfhK9XA4O3bUexjH3egbGe9L2Kl+Jhztoc/P59WtSji1Ujxi3ePx2R5zPJXfDni1TJ/HPFWmS9FpPLCOBPx/hbXEQ+n3ijiz8vzf249TVX3g8595cI361+fvTLXVbZzX+l6PpQ/hp/w+bCRr577/nw4vCnvjwN+b+qPIprVHX897f6XHQAAAAAAAAAAAAAAAAD22uEo4slI8cq//1E1rjiqcelHzw39/sBnuof4PnGX7aSIeC4iloudjck9lIcQj6bRlB7wWOJHWX8U8cd5/N93H3RjAAAAAAAAAAAAAAAAAAAAHmlF/CxSvPje8bQS3XOKt2av1i81L8+0Z4XtzP3bmTN9Y2Njo57a2cg5kXM550rO1ZxrOaPI9XM2ck7kXM65knM151rO6Mn1czZyTuRczrmSczXnWk/0R3f7e3P9nBM5l3Ou5FzNuZYzDsjcvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnyZFFPFRpPj+t9dTpIhoRExEO1drD7p1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECplop4J1LU/6Bxc1lvRKSIovP+ePntTDQOlfm5aAyV+VI0zudsVtnb+O4DaD/3pi8V8dNIUet/uzznlc+0z39f+126Wfat79x69yu97ezprBz4oPbYsaPnhkZ+7YntXqetGjB4oTV7/UZ9fHhkZKxrcW/e++e6lg3k/RZ703UiYvGNN19vzsxML+z+RXkJ3EN1L3b84pDjvLsXG/lq/6TVo/cANH7fX3Tuy5v6ziOgfP6/Hyl++73/6DzwO7///VL73c0nfHz4J7ee/y9u3tA+Pf8f71r2Yv5tpK83on/p2nzfsYj+xTfePNG61rw6fXV69szJk18bGvra6ZN9hyL6r7Rmprte3fOhAgAAAAAAAAAAAAAAALi/UhG/GymaP11P9Yi4UY3XGjg39MyJp3qipxpvddu4rdfGLp2vvzx3bX5henFxeqo+PtuanJua3unu+qvhXuPDI/vSmbs6vM/tP9z/8tz8Gwutq3+4tOX6I/3nLy8uLTQnt14dh6OIaHQvGawaPD48UjV6ptWcraqObjmY7pPrS0X8Z6SYPFNPT+dlefzf5hH+t43/X968oX0a//fZrmXlPlMq4sNI8Vt/8UQ8XbXzSNxxzHK5v4kUg2e/lMvFobJcpw3tzxVojwwsy/5vpPiHj24v2xkP+fitss/v+MA+JMrzfzRSvPNnP4xfz8t6b/v8h63P/5HNG9rh+d/400317nL+P9+17Mhtn1ewN/1/1JXn/0SkeOnxt+M38rLej/n8j85nbxzPhW9+Psc+/fx/oWvZQN7vb+5N1wEAAAAAAAAAAB5qfamIv40UT430phfysp38/d/U5g3t7u+/UsSF1myx/d9/fbFr2dTezFd01xd7cFgBAAAA4EDoS0X8LFJcXXr75hjq28d/d43//J1b4z+H06a11b/z/XL1uQF7Of6z20De78S9dxsAAAAAAAAAAAAAAAAAAAAOlJSKeCHPpz5xl/nUVyPFK//9bC6XjpXlOvPAD1Tf+y/OzZ44PzMzN9lcal6ema6PzTcnp8u6n48U63/9pVy3qOZXf3rTPjpzsS9EipG/65Rtz8XemZu8PR94ey72suxnI8V//f3tZTvzWH/hVtlTZdm/ihTf+qetyx67VfZ0WfaHkeIn36p3yh4py3Y+H/WLt8o+NzlX7On5AAAAAAAAAAAAAAAAAAAA4NHUl4r4XqT4n2srN8fy5/n/+7reVt76Ttd8/5vcqOb5H6jm/9/u9W7m/x+4s8ZHG20RG0d32WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjYUhTxZqSYv7ieVmvl+7b+C63Z6zfGh0e2rnY4VTV7qvLlV//zp06f+eoLQ2c7+fH199qT8drYpfP1l+euzS9MLy5OT9XHZ1uTc1PTO97CvdbfbLA6APVrr1+funJl8Y7VNwY+qD12bODc0DMnnuqUHR8eGRnrKtPbt+u93yFts/xQFPGXkeLZH/08/XMtooh7PxZ3uXb22+GqE4NVJ8aHR6qOzLSas0vlytHOgSgi6l2VGp1jdB/OxT1pRCyXzS8bPFh2b2y+udC8PDNdH20uLLWWWnOzo6nd2rI/9SjibIpYiYi12p2b64siXo8UPzi6nv6lFtHTOQ5fuTj2jZOntm9HsY993IGynfW+iJXiIThnB1gtivjHSPGLd4/Hv9YieqP9FV+OeLXMH0e8Fe3zncoL40zE+1tcRzyceqOI/yvP/7n19G6tvB907isXvln/+tI73WU795WH/vlwPx3we1N/FPGT6o6/nv7NzzUAAAAAAAAAAAAAAADAAVLEr0aKF987nqrxwZ1B0Qut2av1jVpEe1hfZ+xfZ/XGxsZGPbWzkXMi53LOlZyrOddyRpHr52yU2b+xMZHfL+dcybmacy1n9OT6ORs5J3Iu51zJuZpzLWf05vo5Gzknci7nXMm5mnMtZxyQsXsAAAAAAAAAAAAAAAAAAMCnS1H9l+L7315PG7X2/NIT0c5V84F+6v1/AAAA///TTPGM")
keyctl$reject(0x13, 0x0, 0x6, 0x204, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x49d, &(0x7f0000000a40)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
getdents(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x2, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x3}}}, 0x88)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

8.050179712s ago: executing program 1 (id=848):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80d03, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x53)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x15)

8.028842495s ago: executing program 3 (id=841):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101200, 0x199)
r2 = open(0x0, 0x10000, 0x0)
getdents(r2, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000880)={0x0, 0x6, 0x0, [0xbf9, 0x80000001, 0x7, 0x0, 0x6], [0x5, 0xc, 0x0, 0xffffffffffff0000, 0x8, 0x3, 0x1, 0x5, 0xf3, 0x7, 0x190, 0x2, 0xa71, 0x8, 0x8, 0xfffffffffffffff8, 0x3, 0x6, 0x7, 0x6, 0x4, 0x3, 0x200, 0x6, 0x2, 0x7ff, 0x7, 0x1, 0xf24, 0x1, 0x6, 0x84c7, 0x7, 0x8, 0x700, 0x7, 0x9, 0x5, 0xc, 0x0, 0x4, 0x10, 0x7, 0x8, 0x4, 0x4, 0x7ff, 0x4b, 0x804, 0x9, 0x75c, 0x735, 0x8, 0x7, 0x2, 0x80000000, 0x10, 0x7fffffffffffffff, 0x401, 0x4, 0x10001, 0x10000000006, 0x3, 0x3, 0x0, 0x7, 0xb, 0x1, 0x1, 0x1f6a, 0xb5c, 0x1, 0x10000, 0x86ca, 0x6, 0x50c, 0x6, 0x101, 0x8, 0x6, 0x2, 0x7, 0x5, 0x10, 0x401, 0x8000, 0xd, 0x8, 0xe6, 0x5, 0x1, 0x77, 0x2, 0x5, 0xfffffffffffffa2c, 0x6c3, 0xffffffff974f1f34, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffa, 0x80000000, 0x6, 0x0, 0x82b5bc3, 0x8, 0x40, 0x5, 0xdffe, 0x1, 0x5, 0x80000001, 0x100000000, 0x100000000000, 0x1e, 0x5, 0x9, 0x4a6, 0xc60, 0x6, 0x0, 0x6]})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000500)={0x4, 0x0, [{0xa3a, 0x0, 0x4}, {0x222, 0x0, 0x3}, {0x8ec, 0x0, 0x6}, {0x9d1, 0x0, 0x1}]})
mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000d80)='ocfs2_dlmfs\x00', 0x425, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
shutdown(0xffffffffffffffff, 0x1)
msgget$private(0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @loopback}, 0x1c)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000380), &(0x7f0000000580)=r7}, 0x20)

7.912578634s ago: executing program 3 (id=842):
r0 = gettid()
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380))
unshare(0x4020400)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffb)

7.780001766s ago: executing program 3 (id=843):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2}]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

7.562322505s ago: executing program 3 (id=844):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594e70fa55360", 0x14}], 0x1}, 0x0)

6.93489345s ago: executing program 4 (id=845):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x11, 0x63, 0x0, &(0x7f0000000100))
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000002c0)={0x1, @pix={0x6, 0xf09a, 0x34325241, 0x7, 0x3, 0xc8, 0x5, 0xf, 0x0, 0x1, 0x2, 0x1}})
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040804)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x5565, &(0x7f000000c100)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000))
r8 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r8, &(0x7f0000002c00)={0x2020}, 0x2020)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa21, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000005,namecase=1,namecase=1,fmask=00000000000000000000010,discard,keep_last_dots,iocharset=euc-jp,errors=continue,errors=continue,\x00'], 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==")
sendmsg(r0, 0x0, 0x0)

6.907317323s ago: executing program 6 (id=846):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x2, 0x0)
shutdown(r4, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x203f00, 0x0, 0x1cac43})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3ca})

5.444822041s ago: executing program 6 (id=847):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40000005, 0x30}, 0xc)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8)
sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="1d42c70de6cf", 0x6}, {0x0}, {0x0}], 0x3}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'freezer'}]}, 0x9)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x34000)

5.443865291s ago: executing program 3 (id=849):
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kcmp(0x0, 0x0, 0x2, r1, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x50, 0x0, &(0x7f0000001840)=0x1c)

3.983820799s ago: executing program 4 (id=850):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)

2.990024697s ago: executing program 4 (id=851):
syz_open_dev$video(0x0, 0x7f, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x28002)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4080)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)

2.798268934s ago: executing program 6 (id=852):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x74, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101200, 0x199)
r2 = open(0x0, 0x10000, 0x0)
getdents(r2, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000880)={0x0, 0x6, 0x0, [0xbf9, 0x80000001, 0x7, 0x0, 0x6], [0x5, 0xc, 0x0, 0xffffffffffff0000, 0x8, 0x3, 0x1, 0x5, 0xf3, 0x7, 0x190, 0x2, 0xa71, 0x8, 0x8, 0xfffffffffffffff8, 0x3, 0x6, 0x7, 0x6, 0x4, 0x3, 0x200, 0x6, 0x2, 0x7ff, 0x7, 0x1, 0xf24, 0x1, 0x6, 0x84c7, 0x7, 0x8, 0x700, 0x7, 0x9, 0x5, 0xc, 0x0, 0x4, 0x10, 0x7, 0x8, 0x4, 0x4, 0x7ff, 0x4b, 0x804, 0x9, 0x75c, 0x735, 0x8, 0x7, 0x2, 0x80000000, 0x10, 0x7fffffffffffffff, 0x401, 0x4, 0x10001, 0x10000000006, 0x3, 0x3, 0x0, 0x7, 0xb, 0x1, 0x1, 0x1f6a, 0xb5c, 0x1, 0x10000, 0x86ca, 0x6, 0x50c, 0x6, 0x101, 0x8, 0x6, 0x2, 0x7, 0x5, 0x10, 0x401, 0x8000, 0xd, 0x8, 0xe6, 0x5, 0x1, 0x77, 0x2, 0x5, 0xfffffffffffffa2c, 0x6c3, 0xffffffff974f1f34, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffa, 0x80000000, 0x6, 0x0, 0x82b5bc3, 0x8, 0x40, 0x5, 0xdffe, 0x1, 0x5, 0x80000001, 0x100000000, 0x100000000000, 0x1e, 0x5, 0x9, 0x4a6, 0xc60, 0x6, 0x0, 0x6]})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000500)={0x4, 0x0, [{0xa3a, 0x0, 0x4}, {0x222, 0x0, 0x3}, {0x8ec, 0x0, 0x6}, {0x9d1, 0x0, 0x1}]})
mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000d80)='ocfs2_dlmfs\x00', 0x425, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
shutdown(0xffffffffffffffff, 0x1)
msgget$private(0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @loopback}, 0x1c)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000380), &(0x7f0000000580)=r7}, 0x20)

2.635860148s ago: executing program 4 (id=853):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

2.635642168s ago: executing program 1 (id=854):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x9880)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc010)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f00000003c0)={0x20080522}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121c02, 0x20)
socket$inet_mptcp(0x2, 0x1, 0x106)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="05300308bf002c00d1f8a78e9171e10a729655aa8555348e4c9daa8264edb9f7b10ee1451fac9782c39fb8b44bc5fd5792e0ef99a8068c"], 0x6)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x7, 0x4}, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}}, 0x24}}, 0x8c0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00')
read$FUSE(r4, &(0x7f0000006100)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94)

1.36381281s ago: executing program 3 (id=855):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x428}}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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")
open(0x0, 0x4c27e, 0x2)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000004380)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200025, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d61736b3d4d41595f524541442c6f626a05000000653d726582a2f9ac2c64b7b3745f6d6561737572652c000000000000000000"], 0xff, 0xc48, &(0x7f0000002380)="$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")
keyctl$reject(0x13, 0x0, 0x6, 0x204, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x49d, &(0x7f0000000a40)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
getdents(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x2, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x3}}}, 0x88)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.351314421s ago: executing program 4 (id=863):
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kcmp(0x0, 0x0, 0x2, r1, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x50, 0x0, &(0x7f0000001840)=0x1c)

1.346714571s ago: executing program 6 (id=856):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x2, 0x0)
shutdown(r4, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x203f00, 0x0, 0x1cac43})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3ca})

1.299823706s ago: executing program 1 (id=857):
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

0s ago: executing program 6 (id=858):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts.
[   80.396520][ T5757] cgroup: Unknown subsys name 'net'
[   80.533982][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.168626][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.800597][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.812557][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.822823][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.866105][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.866453][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.880803][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.888846][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.897360][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.898583][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.912775][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.912809][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.927905][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.929468][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.942325][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   83.944218][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.951304][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.964114][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   83.964637][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   83.978956][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.978960][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.979996][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.004515][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.020408][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.031952][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.383683][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   84.583535][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   84.663960][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.676149][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.683741][ T5773] bridge_slave_0: entered allmulticast mode
[   84.691481][ T5773] bridge_slave_0: entered promiscuous mode
[   84.705959][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   84.732294][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.741328][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.749449][ T5773] bridge_slave_1: entered allmulticast mode
[   84.756985][ T5773] bridge_slave_1: entered promiscuous mode
[   84.808617][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   84.851138][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.886759][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.915991][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.924248][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.932874][ T5774] bridge_slave_0: entered allmulticast mode
[   84.940085][ T5774] bridge_slave_0: entered promiscuous mode
[   84.950177][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.957396][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.964828][ T5774] bridge_slave_1: entered allmulticast mode
[   84.972309][ T5774] bridge_slave_1: entered promiscuous mode
[   85.034889][ T5773] team0: Port device team_slave_0 added
[   85.058244][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.065486][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.072888][ T5769] bridge_slave_0: entered allmulticast mode
[   85.080329][ T5769] bridge_slave_0: entered promiscuous mode
[   85.089835][ T5773] team0: Port device team_slave_1 added
[   85.105327][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.118078][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.127489][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.134677][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.144621][ T5769] bridge_slave_1: entered allmulticast mode
[   85.151763][ T5769] bridge_slave_1: entered promiscuous mode
[   85.221990][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.253600][ T5774] team0: Port device team_slave_0 added
[   85.262907][ T5774] team0: Port device team_slave_1 added
[   85.271207][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.291534][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.298879][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.325545][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.350523][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.357860][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.365035][ T5772] bridge_slave_0: entered allmulticast mode
[   85.373468][ T5772] bridge_slave_0: entered promiscuous mode
[   85.413375][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.420601][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.447598][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.474303][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.481626][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.489100][ T5772] bridge_slave_1: entered allmulticast mode
[   85.496449][ T5772] bridge_slave_1: entered promiscuous mode
[   85.503917][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.512719][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.538938][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.553509][ T5769] team0: Port device team_slave_0 added
[   85.562633][ T5769] team0: Port device team_slave_1 added
[   85.580545][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.594983][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.621455][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.701471][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.708617][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.735075][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.749118][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.761563][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.787722][ T5773] hsr_slave_0: entered promiscuous mode
[   85.794220][ T5773] hsr_slave_1: entered promiscuous mode
[   85.803959][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.811062][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.837066][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.873608][ T5772] team0: Port device team_slave_0 added
[   85.926468][ T5772] team0: Port device team_slave_1 added
[   85.936862][ T5769] hsr_slave_0: entered promiscuous mode
[   85.943601][ T5769] hsr_slave_1: entered promiscuous mode
[   85.950251][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.958780][ T5769] Cannot create hsr debugfs directory
[   85.986570][ T5774] hsr_slave_0: entered promiscuous mode
[   85.993157][ T5774] hsr_slave_1: entered promiscuous mode
[   85.999932][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.007698][ T5774] Cannot create hsr debugfs directory
[   86.057233][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.064245][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.090877][ T5781] Bluetooth: hci1: command tx timeout
[   86.091209][ T5781] Bluetooth: hci0: command tx timeout
[   86.091435][ T5781] Bluetooth: hci2: command tx timeout
[   86.108471][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.146454][ T5775] Bluetooth: hci3: command tx timeout
[   86.162550][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.172609][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.198984][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.311611][ T5772] hsr_slave_0: entered promiscuous mode
[   86.318132][ T5772] hsr_slave_1: entered promiscuous mode
[   86.324663][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.332542][ T5772] Cannot create hsr debugfs directory
[   86.658979][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.689020][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.698974][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.725175][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.771757][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.793743][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.804110][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.825622][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.932048][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.950655][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.962434][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.003145][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.057116][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.073401][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.086398][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.097938][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.195641][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.214101][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.251543][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   87.295646][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.303166][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.334322][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   87.371990][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.379216][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.411021][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.418259][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.508273][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.515449][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.698451][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.711114][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.782334][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   87.823819][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   87.865684][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.872947][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.933003][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.940295][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.960549][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.967795][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.983336][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.990592][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.147366][ T5775] Bluetooth: hci2: command tx timeout
[   88.156727][ T5775] Bluetooth: hci0: command tx timeout
[   88.162499][ T5775] Bluetooth: hci1: command tx timeout
[   88.194415][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.226149][ T5775] Bluetooth: hci3: command tx timeout
[   88.355269][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.415536][ T5769] veth0_vlan: entered promiscuous mode
[   88.444208][ T5769] veth1_vlan: entered promiscuous mode
[   88.512202][ T5773] veth0_vlan: entered promiscuous mode
[   88.542243][ T5769] veth0_macvtap: entered promiscuous mode
[   88.568090][ T5769] veth1_macvtap: entered promiscuous mode
[   88.601240][ T5773] veth1_vlan: entered promiscuous mode
[   88.678343][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.692064][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.702077][ T5773] veth0_macvtap: entered promiscuous mode
[   88.734202][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.747620][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.758976][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.769177][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.779262][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.796317][ T5773] veth1_macvtap: entered promiscuous mode
[   88.853611][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.873317][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.888749][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.902299][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.913293][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.924235][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.938000][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.952154][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.961118][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.971138][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.980290][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.066561][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.074718][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.151786][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.160328][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.174700][ T5774] veth0_vlan: entered promiscuous mode
[   89.205392][ T5772] veth0_vlan: entered promiscuous mode
[   89.231200][ T5774] veth1_vlan: entered promiscuous mode
[   89.243170][ T5772] veth1_vlan: entered promiscuous mode
[   89.306816][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.317809][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.394191][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.416853][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.450601][ T5772] veth0_macvtap: entered promiscuous mode
[   89.474003][ T5774] veth0_macvtap: entered promiscuous mode
[   89.516150][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.526324][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.694809][ T5774] veth1_macvtap: entered promiscuous mode
[   89.758132][ T5772] veth1_macvtap: entered promiscuous mode
[   89.969057][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   89.978431][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   90.070875][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   90.079547][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   90.277948][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[   90.287028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   90.295590][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   90.378279][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.475779][    C0] sched: RT throttling activated
[   91.475938][ T5775] Bluetooth: hci1: command tx timeout
[   91.486456][ T5086] Bluetooth: hci0: command tx timeout
[   91.491882][ T5086] Bluetooth: hci2: command tx timeout
[   91.497353][ T5781] Bluetooth: hci3: command tx timeout
[   92.096742][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.256335][    T8] cfg80211: failed to load regulatory.db
[   92.266185][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.306168][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.335926][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.371043][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.388792][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.405944][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.416219][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.435927][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.446361][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.457223][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.487599][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.504840][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.526346][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.542662][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.554974][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.577796][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.610345][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.631442][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.650605][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.675943][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.728045][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.765910][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.795952][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.815894][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.856313][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.885977][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.051066][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.067944][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.076935][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.085679][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.094591][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.719617][ T5775] Bluetooth: hci0: command tx timeout
[   93.725197][ T5775] Bluetooth: hci1: command tx timeout
[   93.731404][ T5775] Bluetooth: hci2: command tx timeout
[   93.737580][ T5086] Bluetooth: hci3: command tx timeout
[   94.969481][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.023016][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.084754][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.144616][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.289054][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.303295][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.339727][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.347922][ T5850] syz.1.5[5850]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   95.359568][ T5850] loop1: detected capacity change from 0 to 128
[   95.371000][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.373521][ T5850] =======================================================
[   95.373521][ T5850] WARNING: The mand mount option has been deprecated and
[   95.373521][ T5850]          and is ignored by this kernel. Remove the mand
[   95.373521][ T5850]          option from the mount to silence this warning.
[   95.373521][ T5850] =======================================================
[   95.534235][ T5850] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   95.562393][ T5850] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   95.721849][ T5854] 9pnet_fd: Insufficient options for proto=fd
[   95.932313][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   95.961107][ T5857] loop2: detected capacity change from 0 to 2048
[   96.016121][ T5857] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   96.217271][ T5860] loop3: detected capacity change from 0 to 2048
[   96.283007][ T5860] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.371154][ T5857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.595146][ T5864] loop0: detected capacity change from 0 to 32768
[   98.633153][ T5864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.9 (5864)
[   98.691586][ T5864] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.702075][ T5864] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   98.711763][ T5864] BTRFS info (device loop0): setting nodatacow, compression disabled
[   98.719991][ T5864] BTRFS info (device loop0): enabling auto defrag
[   98.726520][ T5864] BTRFS info (device loop0): max_inline at 0
[   98.732541][ T5864] BTRFS info (device loop0): using free space tree
[   99.090681][ T5867] loop1: detected capacity change from 0 to 32768
[   99.281902][ T5867] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   99.291110][ T5867] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   99.413416][ T5867] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[   99.428728][  T789] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   99.604212][  T789] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  100.100037][ T5864] BTRFS info (device loop0): auto enabling async discard
[  100.656735][  T789] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1052ms
[  100.665101][  T789] gfs2: fsid=syz:syz.0: jid=0: Done
[  100.702029][ T5867] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  102.386334][ T5867] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  102.547632][ T5897] netlink: 'syz.1.13': attribute type 1 has an invalid length.
[  102.667520][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  102.731132][ T5897] bridge0: port 3(gretap1) entered blocking state
[  102.778203][ T5897] bridge0: port 3(gretap1) entered disabled state
[  102.823931][ T5897] gretap1: entered allmulticast mode
[  102.878263][ T5897] gretap1: entered promiscuous mode
[  102.888915][ T5769] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.915947][ T5817] usb 3-1: Using ep0 maxpacket: 32
[  102.936347][ T5817] usb 3-1: config 5 has an invalid interface number: 242 but max is 0
[  102.952484][ T5898] macvlan2: entered promiscuous mode
[  102.955302][ T5817] usb 3-1: config 5 has no interface number 0
[  102.990305][ T5898] macvlan2: entered allmulticast mode
[  102.996289][ T5817] usb 3-1: config 5 interface 242 has no altsetting 0
[  103.021423][ T5898] bridge0: port 4(macvlan2) entered blocking state
[  103.033066][ T5817] usb 3-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d
[  103.052586][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.060881][ T5898] bridge0: port 4(macvlan2) entered disabled state
[  103.076261][ T5817] usb 3-1: Product: syz
[  103.098039][ T5817] usb 3-1: Manufacturer: syz
[  103.102740][ T5817] usb 3-1: SerialNumber: syz
[  103.766073][ T5904] loop1: detected capacity change from 0 to 128
[  104.078986][ T5904] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.103974][ T5904] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  104.830318][ T5817] usb-storage 3-1:5.242: USB Mass Storage device detected
[  104.909208][ T5817] usb-storage 3-1:5.242: Quirks match for vid 05ac pid 120a: 10
[  105.059849][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.216509][ T5916] loop0: detected capacity change from 0 to 256
[  105.251608][ T5916] exfat: Deprecated parameter 'namecase'
[  105.294716][ T5916] exfat: Deprecated parameter 'namecase'
[  105.308550][ T5916] exfat: Unknown parameter 'zero_size_dir'
[  107.100189][ T5817] apple-mfi-fastcharge 3-1: USB disconnect, device number 2
[  110.577298][ T5932] befs: (nullb0): invalid magic header
[  110.662289][ T5926] loop3: detected capacity change from 0 to 32768
[  110.817439][ T5926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.21 (5926)
[  111.047186][ T5926] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.081061][ T5926] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  111.123817][ T5926] BTRFS info (device loop3): turning on sync discard
[  111.140757][ T5928] loop0: detected capacity change from 0 to 32768
[  111.157207][ T5926] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  111.190581][ T5926] BTRFS info (device loop3): use zstd compression, level 3
[  111.209699][ T5928] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.23 (5928)
[  111.234655][ T5926] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  111.290003][ T5926] BTRFS info (device loop3): trying to use backup root at mount time
[  111.299449][ T5926] BTRFS info (device loop3): enabling auto defrag
[  111.326911][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  111.344281][ T5926] BTRFS info (device loop3): using free space tree
[  111.550455][ T3530] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  111.573858][ T5762] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5762)
[  111.640222][ T5926] BTRFS error (device loop3): failed to load root extent
[  111.656134][ T5926] BTRFS warning (device loop3): try to load backup roots slot 1
[  111.698412][ T3530] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  111.766040][ T5926] BTRFS warning (device loop3): couldn't read tree root
[  111.773120][ T5926] BTRFS warning (device loop3): try to load backup roots slot 2
[  111.838089][ T1135] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  111.883628][ T5926] BTRFS warning (device loop3): couldn't read tree root
[  111.936539][ T5926] BTRFS warning (device loop3): try to load backup roots slot 3
[  111.979290][ T5956] loop1: detected capacity change from 0 to 128
[  112.206117][ T5956] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.232813][ T5956] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  112.365337][ T5926] BTRFS error (device loop3): open_ctree failed: -4
[  112.562535][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.072721][ T5763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5763)
[  115.891642][ T5976] 9pnet_fd: Insufficient options for proto=fd
[  116.245867][   T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  116.446364][   T23] usb 1-1: Using ep0 maxpacket: 32
[  116.476297][   T23] usb 1-1: config 0 interface 0 has no altsetting 0
[  116.483085][   T23] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  116.548357][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.570299][   T23] usb 1-1: config 0 descriptor??
[  117.013942][   T23] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[  117.045880][   T23] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[  117.053507][   T23] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[  117.075925][   T23] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[  117.083595][   T23] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[  117.168612][   T23] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0
[  117.509504][ T5987] loop1: detected capacity change from 0 to 32768
[  117.559577][   T23] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -71
[  117.578919][ T5987] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.589159][ T5987] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  117.598021][ T5987] BTRFS info (device loop1): setting nodatacow, compression disabled
[  117.606140][ T5987] BTRFS info (device loop1): enabling auto defrag
[  117.612615][ T5987] BTRFS info (device loop1): max_inline at 0
[  117.619078][ T5987] BTRFS info (device loop1): using free space tree
[  117.678944][ T5998] befs: (nullb0): invalid magic header
[  117.698356][   T23] usb 1-1: USB disconnect, device number 2
[  117.767183][ T6006] loop3: detected capacity change from 0 to 256
[  117.774234][ T6006] exfat: Deprecated parameter 'namecase'
[  117.805625][ T5987] BTRFS info (device loop1): auto enabling async discard
[  118.056693][ T6006] exfat: Deprecated parameter 'utf8'
[  118.290789][ T5989] fido_id[5989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  118.353689][ T6006] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  118.456705][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  118.763756][ T5988] loop2: detected capacity change from 0 to 32768
[  118.859563][ T5988] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.026730][ T5988] XFS (loop2): Ending clean mount
[  119.118592][ T5988] XFS (loop2): Quotacheck needed: Please wait.
[  121.938230][ T5988] XFS (loop2): Quotacheck: Done.
[  122.090540][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  122.466442][ T6045] loop1: detected capacity change from 0 to 256
[  122.538387][ T6045] exFAT-fs (loop1): failed to load alloc-bitmap
[  122.558779][ T6045] exFAT-fs (loop1): failed to recognize exfat type
[  122.888380][ T6049] loop2: detected capacity change from 0 to 2048
[  122.922142][ T6049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.208547][ T6051] loop1: detected capacity change from 0 to 32768
[  123.229715][ T6051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.51 (6051)
[  123.264291][ T6051] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.274952][ T6051] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  123.283699][ T6051] BTRFS info (device loop1): setting nodatacow, compression disabled
[  123.291860][ T6051] BTRFS info (device loop1): enabling auto defrag
[  123.298379][ T6051] BTRFS info (device loop1): max_inline at 0
[  123.304363][ T6051] BTRFS info (device loop1): using free space tree
[  123.412569][ T6051] BTRFS info (device loop1): auto enabling async discard
[  124.140792][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.514613][ T6097] loop2: detected capacity change from 0 to 512
[  129.348768][ T6101] loop0: detected capacity change from 0 to 2048
[  129.448980][ T6101] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.288322][ T6104] loop0: detected capacity change from 0 to 32768
[  130.332350][ T6104] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.63 (6104)
[  130.358301][ T6104] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.368532][ T6104] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  130.377392][ T6104] BTRFS info (device loop0): setting nodatacow, compression disabled
[  130.385484][ T6104] BTRFS info (device loop0): enabling auto defrag
[  130.392110][ T6104] BTRFS info (device loop0): max_inline at 0
[  130.398198][ T6104] BTRFS info (device loop0): using free space tree
[  130.410851][ T6107] befs: (nullb0): invalid magic header
[  130.491634][ T6104] BTRFS info (device loop0): auto enabling async discard
[  131.112930][ T5769] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.367724][ T6134] syz.3.65 uses obsolete (PF_INET,SOCK_PACKET)
[  133.194030][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.201153][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.998211][ T6151] loop0: detected capacity change from 0 to 512
[  134.015449][  T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  134.201132][  T788] usb 4-1: Using ep0 maxpacket: 32
[  134.234711][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  134.267761][  T788] usb 4-1: device descriptor read/all, error -71
[  135.413756][ T6159] loop1: detected capacity change from 0 to 2048
[  135.449435][ T6159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.928304][ T6174] loop1: detected capacity change from 0 to 128
[  138.085147][ T6174] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  138.254349][ T6174] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  140.138843][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.334877][ T6186] befs: (nullb0): invalid magic header
[  140.444877][ T6188] 9pnet_fd: Insufficient options for proto=fd
[  140.806573][  T789] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  140.967646][ T6193] 8021q: VLANs not supported on lo
[  141.026015][  T789] usb 1-1: Using ep0 maxpacket: 8
[  141.047146][  T789] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  141.073411][  T789] usb 1-1: config 0 has no interface number 0
[  141.090458][  T789] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  141.114980][  T789] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  141.134197][  T789] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  141.154749][  T789] usb 1-1: Product: syz
[  141.186692][  T789] usb 1-1: config 0 descriptor??
[  141.225662][  T789] iowarrior 1-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  141.353868][ T6192] loop1: detected capacity change from 0 to 32768
[  141.460986][ T6192] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.692929][ T6192] XFS (loop1): Ending clean mount
[  141.954066][   T23] usb 1-1: USB disconnect, device number 3
[  142.001985][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  142.064831][ T6209] loop2: detected capacity change from 0 to 512
[  143.565913][ T5778] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  143.995857][ T5778] usb 4-1: Using ep0 maxpacket: 32
[  144.011543][ T5778] usb 4-1: no configurations
[  144.016743][ T5778] usb 4-1: can't read configurations, error -22
[  145.525896][ T5778] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  146.314075][ T6220] loop3: detected capacity change from 0 to 32768
[  146.398210][ T6220] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.91 (6220)
[  146.813347][ T6220] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.824025][ T6220] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  146.832903][ T6220] BTRFS info (device loop3): setting nodatacow, compression disabled
[  146.841059][ T6220] BTRFS info (device loop3): enabling auto defrag
[  146.847596][ T6220] BTRFS info (device loop3): max_inline at 0
[  146.853630][ T6220] BTRFS info (device loop3): using free space tree
[  147.050899][ T6237] 9pnet_fd: Insufficient options for proto=fd
[  147.058569][ T6220] BTRFS info (device loop3): auto enabling async discard
[  147.687472][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.551666][ T6245] 8021q: VLANs not supported on lo
[  149.931276][ T6260] loop0: detected capacity change from 0 to 2048
[  150.050955][ T6260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.385863][  T789] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  154.585803][  T789] usb 4-1: Using ep0 maxpacket: 8
[  154.664022][  T789] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  154.679194][  T789] usb 4-1: config 0 has no interface number 0
[  154.693104][  T789] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  154.761180][  T789] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  154.775958][  T789] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  155.886337][  T789] usb 4-1: Product: syz
[  155.908152][  T789] usb 4-1: config 0 descriptor??
[  155.923995][  T789] usb 4-1: can't set config #0, error -71
[  155.964308][  T789] usb 4-1: USB disconnect, device number 6
[  155.995944][ T5834] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  156.199626][ T5834] usb 1-1: Using ep0 maxpacket: 32
[  156.209700][ T5834] usb 1-1: no configurations
[  156.214447][ T5834] usb 1-1: can't read configurations, error -22
[  156.430554][ T5834] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  156.631110][ T6279] befs: (nullb0): invalid magic header
[  156.645828][ T5834] usb 1-1: Using ep0 maxpacket: 32
[  156.654719][ T5834] usb 1-1: no configurations
[  156.660164][ T5834] usb 1-1: can't read configurations, error -22
[  156.668899][ T5834] usb usb1-port1: attempt power cycle
[  157.116301][ T5834] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  157.285910][ T5834] usb 1-1: Using ep0 maxpacket: 32
[  157.296243][ T5834] usb 1-1: no configurations
[  157.302416][ T5834] usb 1-1: can't read configurations, error -22
[  157.476547][ T5834] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  157.639880][ T5834] usb 1-1: Using ep0 maxpacket: 32
[  157.771050][ T5834] usb 1-1: no configurations
[  157.835375][ T5834] usb 1-1: can't read configurations, error -22
[  158.032832][ T5834] usb usb1-port1: unable to enumerate USB device
[  158.451855][ T6290] loop2: detected capacity change from 0 to 512
[  161.861489][ T6300] 9pnet_fd: Insufficient options for proto=fd
[  163.535878][  T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  163.737969][  T788] usb 2-1: Using ep0 maxpacket: 8
[  163.759180][  T788] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  163.785840][  T788] usb 2-1: config 0 has no interface number 0
[  163.802273][  T788] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.869840][  T788] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  163.885867][  T788] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  163.896601][  T788] usb 2-1: Product: syz
[  163.936325][  T788] usb 2-1: config 0 descriptor??
[  163.953948][  T788] iowarrior 2-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  164.537237][ T6311] loop2: detected capacity change from 0 to 64
[  164.753796][ T5817] usb 2-1: USB disconnect, device number 2
[  164.852776][ T6310] 8021q: VLANs not supported on lo
[  165.895392][ T5817] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  166.185784][ T5817] usb 2-1: Using ep0 maxpacket: 32
[  166.204218][ T5817] usb 2-1: no configurations
[  166.215881][ T5817] usb 2-1: can't read configurations, error -22
[  166.395838][ T5817] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  166.398409][ T6322] loop2: detected capacity change from 0 to 512
[  166.586144][ T5817] usb 2-1: Using ep0 maxpacket: 32
[  166.592419][ T5817] usb 2-1: no configurations
[  166.605045][ T5817] usb 2-1: can't read configurations, error -22
[  166.613231][ T5817] usb usb2-port1: attempt power cycle
[  167.035831][ T5817] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  170.541826][ T5817] usb 2-1: device descriptor read/8, error -71
[  170.663723][ T6339] 9pnet_fd: Insufficient options for proto=fd
[  170.754409][ T6341] loop1: detected capacity change from 0 to 64
[  171.300355][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  171.515952][ T5834] usb 4-1: Using ep0 maxpacket: 8
[  171.532758][ T5834] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  171.541279][ T5834] usb 4-1: config 0 has no interface number 0
[  171.555040][ T5834] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  171.650927][ T5834] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  171.744172][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  171.847644][ T5834] usb 4-1: Product: syz
[  172.088103][ T5834] usb 4-1: config 0 descriptor??
[  172.131280][ T5834] iowarrior 4-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  172.845655][ T6348] usb 4-1: USB disconnect, device number 7
[  173.280077][ T6355] loop2: detected capacity change from 0 to 32768
[  173.300900][ T6355] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.117 (6355)
[  173.356252][ T6355] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.366494][ T6355] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  173.375194][ T6355] BTRFS info (device loop2): setting nodatacow, compression disabled
[  173.383372][ T6355] BTRFS info (device loop2): enabling auto defrag
[  173.389869][ T6355] BTRFS info (device loop2): max_inline at 0
[  173.395978][ T6355] BTRFS info (device loop2): using free space tree
[  173.535429][ T6355] BTRFS info (device loop2): auto enabling async discard
[  175.168370][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.776746][  T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  178.066160][  T788] usb 3-1: Using ep0 maxpacket: 32
[  178.077848][  T788] usb 3-1: unable to read config index 0 descriptor/start: -61
[  178.085496][  T788] usb 3-1: can't read configurations, error -61
[  178.256171][  T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  178.485927][  T788] usb 3-1: Using ep0 maxpacket: 32
[  178.551238][  T788] usb 3-1: device descriptor read/all, error -71
[  178.586282][  T788] usb usb3-port1: attempt power cycle
[  181.106527][  T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  181.156815][  T788] usb 3-1: Using ep0 maxpacket: 8
[  181.164120][  T788] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  181.190843][  T788] usb 3-1: config 0 has no interface number 0
[  181.215930][  T788] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  182.181417][  T788] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  182.190635][  T788] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  182.205789][  T788] usb 3-1: Product: syz
[  182.216894][  T788] usb 3-1: config 0 descriptor??
[  182.234353][  T788] iowarrior 3-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  183.388001][   T23] usb 3-1: USB disconnect, device number 5
[  183.500135][ T6417] loop0: detected capacity change from 0 to 64
[  190.578763][ T6446] loop0: detected capacity change from 0 to 32768
[  190.613381][ T6446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.145 (6446)
[  190.642524][ T6446] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  190.652848][ T6446] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  190.661632][ T6446] BTRFS info (device loop0): setting nodatacow, compression disabled
[  190.669770][ T6446] BTRFS info (device loop0): enabling auto defrag
[  190.676831][ T6446] BTRFS info (device loop0): max_inline at 0
[  190.682821][ T6446] BTRFS info (device loop0): using free space tree
[  190.752685][ T6446] BTRFS info (device loop0): auto enabling async discard
[  191.420260][ T5769] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.806349][ T1768] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  191.826215][ T5815] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  193.015902][ T1768] usb 1-1: Using ep0 maxpacket: 8
[  193.019595][ T5815] usb 3-1: Using ep0 maxpacket: 32
[  193.026400][ T1768] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  193.054970][ T1768] usb 1-1: config 0 has no interface number 0
[  193.065530][ T5815] usb 3-1: unable to read config index 0 descriptor/start: -61
[  193.073616][ T5815] usb 3-1: can't read configurations, error -61
[  193.087295][ T1768] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  193.126207][ T1768] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  193.146038][ T1768] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  193.179892][ T1768] usb 1-1: Product: syz
[  193.226925][ T1768] usb 1-1: config 0 descriptor??
[  193.248766][ T1768] iowarrior 1-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  193.252345][ T5815] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  194.355773][ T5815] usb 3-1: Using ep0 maxpacket: 32
[  194.398114][ T5815] usb 3-1: unable to read config index 0 descriptor/start: -61
[  194.412409][ T5815] usb 3-1: can't read configurations, error -61
[  194.436079][ T5815] usb usb3-port1: attempt power cycle
[  194.632173][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.643433][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.867468][   T27] usb 1-1: USB disconnect, device number 8
[  197.078106][ T6495] loop1: detected capacity change from 0 to 64
[  199.218560][ T6503] loop1: detected capacity change from 0 to 32768
[  199.231714][ T6503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.155 (6503)
[  199.246668][ T6503] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.256887][ T6503] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  199.265620][ T6503] BTRFS info (device loop1): setting nodatacow, compression disabled
[  199.273844][ T6503] BTRFS info (device loop1): enabling auto defrag
[  199.280443][ T6503] BTRFS info (device loop1): max_inline at 0
[  199.286527][ T6503] BTRFS info (device loop1): using free space tree
[  199.329759][ T6497] loop0: detected capacity change from 0 to 4096
[  199.352895][ T6503] BTRFS info (device loop1): auto enabling async discard
[  199.364793][ T6497] ntfs3: Unknown parameter '�*Aq�Z��]�Hn�U��՞�!�e�I�:����$�(
���|W"��Zu5T�'
[  200.319096][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.095412][ T6532] befs: (nullb0): invalid magic header
[  202.245815][ T5815] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  202.454914][ T5815] usb 2-1: Using ep0 maxpacket: 8
[  202.505647][ T5815] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  202.514471][ T5815] usb 2-1: config 0 has no interface number 0
[  202.565780][ T5815] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  202.587360][ T5815] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  202.615839][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  202.624102][ T5815] usb 2-1: Product: syz
[  202.656883][ T5815] usb 2-1: config 0 descriptor??
[  202.669731][ T5815] iowarrior 2-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  202.969592][ T6537] loop0: detected capacity change from 0 to 64
[  203.752815][ T5834] usb 2-1: USB disconnect, device number 7
[  203.886260][ T6540] 8021q: VLANs not supported on lo
[  206.163229][ T6548] loop2: detected capacity change from 0 to 512
[  208.258948][ T5771] Bluetooth: hci2: command 0x0406 tx timeout
[  208.265027][ T5771] Bluetooth: hci0: command 0x0406 tx timeout
[  208.271795][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  208.271942][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  208.521637][ T6561] loop0: detected capacity change from 0 to 2048
[  210.467186][ T6561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.648115][ T6566] loop2: detected capacity change from 0 to 64
[  212.396383][   T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  213.095993][   T27] usb 1-1: Using ep0 maxpacket: 8
[  213.167479][   T27] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  213.175561][   T27] usb 1-1: config 0 has no interface number 0
[  213.225915][   T27] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  213.247340][   T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  213.256824][   T27] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  213.266897][   T27] usb 1-1: Product: syz
[  213.284096][   T27] usb 1-1: config 0 descriptor??
[  213.301546][   T27] iowarrior 1-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  215.118486][ T6581] 8021q: VLANs not supported on lo
[  215.138809][ T5834] usb 1-1: USB disconnect, device number 9
[  215.658680][ T6590] loop1: detected capacity change from 0 to 512
[  217.376787][ T6598] befs: (nullb0): invalid magic header
[  217.778237][ T6600] loop0: detected capacity change from 0 to 64
[  218.273502][ T6605] loop0: detected capacity change from 0 to 2048
[  220.116481][ T6605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  220.349813][ T6607] Zero length message leads to an empty skb
[  221.070920][ T6611] loop1: detected capacity change from 0 to 32768
[  221.097114][ T6611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.180 (6611)
[  221.116241][ T6611] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  221.126478][ T6611] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  221.135175][ T6611] BTRFS info (device loop1): setting nodatacow, compression disabled
[  221.144165][ T6611] BTRFS info (device loop1): enabling auto defrag
[  221.150679][ T6611] BTRFS info (device loop1): max_inline at 0
[  221.156759][ T6611] BTRFS info (device loop1): using free space tree
[  222.030413][ T6611] BTRFS info (device loop1): auto enabling async discard
[  222.492660][ T6637] loop0: detected capacity change from 0 to 512
[  224.226405][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.569640][ T6651] nbd0: detected capacity change from 0 to 422212465065984
[  227.666707][ T5781] block nbd0: Receive control failed (result -104)
[  227.736987][ T6654] 8021q: VLANs not supported on lo
[  228.073999][ T6658] befs: (nullb0): invalid magic header
[  230.044340][ T6664] loop1: detected capacity change from 0 to 32768
[  230.072560][ T6664] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.199 (6664)
[  230.139780][ T6664] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  230.150015][ T6664] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  230.159595][ T6664] BTRFS info (device loop1): setting nodatacow, compression disabled
[  230.167746][ T6664] BTRFS info (device loop1): enabling auto defrag
[  230.174214][ T6664] BTRFS info (device loop1): max_inline at 0
[  230.180261][ T6664] BTRFS info (device loop1): using free space tree
[  230.272214][ T6672] loop0: detected capacity change from 0 to 512
[  230.408967][ T6664] BTRFS info (device loop1): auto enabling async discard
[  232.171076][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  234.310795][ T6689] loop2: detected capacity change from 0 to 512
[  234.476973][ T6689] EXT4-fs: Ignoring removed i_version option
[  234.515880][ T6689] EXT4-fs: Ignoring removed bh option
[  234.799142][ T6689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.958973][ T6689] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  235.314674][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.404126][ T6696] loop0: detected capacity change from 0 to 512
[  237.762640][ T6703] loop1: detected capacity change from 0 to 64
[  241.236116][ T6714] 8021q: VLANs not supported on lo
[  243.195409][ T6728] loop0: detected capacity change from 0 to 2048
[  243.405322][ T6728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.626956][ T6733] loop2: detected capacity change from 0 to 512
[  247.628944][ T6741] befs: (nullb0): invalid magic header
[  249.416098][ T6746] 8021q: VLANs not supported on lo
[  251.809579][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'.
[  253.725680][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'.
[  254.630627][ T6780] loop2: detected capacity change from 0 to 32768
[  254.646579][ T6780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.222 (6780)
[  254.666636][ T6780] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  254.676864][ T6780] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  254.685561][ T6780] BTRFS info (device loop2): setting nodatacow, compression disabled
[  254.693763][ T6780] BTRFS info (device loop2): enabling auto defrag
[  254.700274][ T6780] BTRFS info (device loop2): max_inline at 0
[  254.706307][ T6780] BTRFS info (device loop2): using free space tree
[  254.751844][ T6780] BTRFS info (device loop2): auto enabling async discard
[  254.902280][ T6798] loop1: detected capacity change from 0 to 2048
[  255.283440][ T6798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  256.213473][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  256.233697][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.432191][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.415027][ T5887] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 30 seconds
[  259.606009][ T6807] 8021q: VLANs not supported on lo
[  262.589546][ T6822] loop2: detected capacity change from 0 to 64
[  262.730996][ T6824] loop0: detected capacity change from 0 to 512
[  265.718489][ T6832] loop2: detected capacity change from 0 to 32768
[  265.754171][ T6832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.232 (6832)
[  265.780768][ T6832] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  265.791773][ T6832] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  265.800516][ T6832] BTRFS info (device loop2): setting nodatacow, compression disabled
[  265.808682][ T6832] BTRFS info (device loop2): enabling auto defrag
[  265.815142][ T6832] BTRFS info (device loop2): max_inline at 0
[  265.821155][ T6832] BTRFS info (device loop2): using free space tree
[  265.939713][ T6832] BTRFS info (device loop2): auto enabling async discard
[  266.536310][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.751909][ T6830] loop1: detected capacity change from 0 to 32768
[  266.805247][ T6830] (syz.1.230,6830,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  266.841041][ T6830] (syz.1.230,6830,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  267.061488][ T6830] JBD2: Ignoring recovery information on journal
[  267.793386][ T6830] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  267.998402][ T6858] befs: (nullb0): invalid magic header
[  268.212633][ T6860] 9pnet_fd: Insufficient options for proto=fd
[  268.304545][ T6830] syz.1.230 (6830) used greatest stack depth: 19312 bytes left
[  268.394142][ T6862] loop0: detected capacity change from 0 to 2048
[  268.439118][ T6862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  268.487980][   T28] audit: type=1800 audit(1771782930.773:2): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.231" name="file1" dev="loop0" ino=1415 res=0 errno=0
[  268.519680][ T5773] ocfs2: Unmounting device (7,1) on (node local)
[  268.792253][ T6868] loop0: detected capacity change from 0 to 512
[  270.576963][ T6873] loop1: detected capacity change from 0 to 2048
[  270.687744][ T6873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  272.414443][ T6876] loop2: detected capacity change from 0 to 512
[  276.076973][ T6889] befs: (nullb0): invalid magic header
[  276.241184][ T6892] 9pnet_fd: Insufficient options for proto=fd
[  277.822691][ T6591] IPVS: starting estimator thread 0...
[  277.927776][ T6899] IPVS: using max 20 ests per chain, 48000 per kthread
[  278.141200][ T6909] loop2: detected capacity change from 0 to 512
[  278.265946][   T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  278.495860][   T23] usb 1-1: Using ep0 maxpacket: 32
[  278.504156][   T23] usb 1-1: config 0 has no interfaces?
[  278.513099][   T23] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  278.532424][   T23] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  278.545784][   T23] usb 1-1: Product: syz
[  278.550024][   T23] usb 1-1: Manufacturer: syz
[  278.565451][   T23] usb 1-1: SerialNumber: syz
[  278.586861][   T23] usb 1-1: config 0 descriptor??
[  278.802864][   T23] usb 1-1: USB disconnect, device number 10
[  278.952852][ T6907] loop1: detected capacity change from 0 to 32768
[  279.086265][ T6907] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.480961][ T6907] XFS (loop1): Ending clean mount
[  280.506418][ T6907] XFS (loop1): Quotacheck needed: Please wait.
[  280.697227][ T6930] 9pnet_fd: Insufficient options for proto=fd
[  281.095016][ T6907] XFS (loop1): Quotacheck: Done.
[  281.397112][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.918773][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.971368][ T6958] loop1: detected capacity change from 0 to 512
[  285.223420][ T6960] 9pnet_fd: Insufficient options for proto=fd
[  285.453589][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.518402][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.657782][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.232562][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 60 seconds
[  288.625914][ T6591] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  288.785761][ T6591] usb 1-1: device descriptor read/64, error -71
[  289.695818][ T6591] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  289.762815][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  289.773413][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  289.781712][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  289.791978][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  289.809766][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  289.817523][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  289.875967][ T6591] usb 1-1: device descriptor read/64, error -71
[  289.996211][ T6591] usb usb1-port1: attempt power cycle
[  290.353289][ T6998] loop0: detected capacity change from 0 to 4096
[  290.394773][ T6998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.543508][ T7005] 9pnet_fd: Insufficient options for proto=fd
[  290.606664][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.749174][ T7009] Bluetooth: MGMT ver 1.22
[  290.756844][ T7009] Bluetooth: hci0: unsupported parameter 13943
[  290.763346][ T7009] Bluetooth: hci0: unsupported parameter 28861
[  290.770010][ T7009] Bluetooth: hci0: unsupported parameter 13943
[  290.792626][ T7009] Bluetooth: hci0: unsupported parameter 28861
[  291.983401][ T5783] Bluetooth: hci1: command tx timeout
[  293.049960][ T7023] loop0: detected capacity change from 0 to 512
[  293.322274][ T7017] loop1: detected capacity change from 0 to 131072
[  293.358119][ T7017] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  293.365252][ T7017] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  293.377865][ T7017] F2FS-fs (loop1): invalid crc value
[  293.394860][ T7017] F2FS-fs (loop1): Found nat_bits in checkpoint
[  293.463086][ T7017] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  293.471044][ T7017] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  293.719596][ T6986] chnl_net:caif_netlink_parms(): no params data found
[  294.067193][ T5783] Bluetooth: hci1: command tx timeout
[  294.967468][ T6986] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.008793][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.032593][ T6986] bridge_slave_0: entered allmulticast mode
[  295.057838][ T6986] bridge_slave_0: entered promiscuous mode
[  295.095094][ T6986] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.113232][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.136836][ T6986] bridge_slave_1: entered allmulticast mode
[  295.165785][ T6986] bridge_slave_1: entered promiscuous mode
[  295.251435][   T59] hsr_slave_0: left promiscuous mode
[  295.299535][   T59] hsr_slave_1: left promiscuous mode
[  295.323346][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.331429][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.343276][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.359716][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.371275][   T59] bridge_slave_1: left allmulticast mode
[  295.391951][   T59] bridge_slave_1: left promiscuous mode
[  295.399853][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.424712][   T59] bridge_slave_0: left allmulticast mode
[  295.432972][   T59] bridge_slave_0: left promiscuous mode
[  295.440453][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.491439][   T59] veth1_macvtap: left promiscuous mode
[  295.502736][   T59] veth0_macvtap: left promiscuous mode
[  295.508412][   T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  295.514156][ T7053] 9pnet_fd: Insufficient options for proto=fd
[  295.526122][   T59] veth1_vlan: left promiscuous mode
[  295.531752][   T59] veth0_vlan: left promiscuous mode
[  295.721300][   T23] usb 2-1: Using ep0 maxpacket: 32
[  295.752617][   T23] usb 2-1: config 0 has no interfaces?
[  295.762501][   T23] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  295.786298][   T23] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  295.795605][   T23] usb 2-1: Product: syz
[  295.803977][   T23] usb 2-1: Manufacturer: syz
[  295.812249][   T23] usb 2-1: SerialNumber: syz
[  295.846933][   T23] usb 2-1: config 0 descriptor??
[  296.060492][  T788] usb 2-1: USB disconnect, device number 8
[  296.145753][ T5783] Bluetooth: hci1: command tx timeout
[  296.312778][   T59] team0 (unregistering): Port device team_slave_1 removed
[  296.362230][   T59] team0 (unregistering): Port device team_slave_0 removed
[  296.412646][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.460869][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.930602][   T59] bond0 (unregistering): Released all slaves
[  298.235754][ T5783] Bluetooth: hci1: command tx timeout
[  298.324238][ T7063] loop1: detected capacity change from 0 to 262144
[  298.346647][ T7063] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.289 (7063)
[  298.371978][ T7063] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  298.382340][ T7063] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  298.392108][ T7063] BTRFS info (device loop1): using free space tree
[  298.478957][ T7063] BTRFS info (device loop1): enabling ssd optimizations
[  298.515250][ T6986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.533842][ T6986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.580337][ T6986] team0: Port device team_slave_0 added
[  298.594978][ T6986] team0: Port device team_slave_1 added
[  298.675832][ T6986] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.721574][   T28] audit: type=1800 audit(1771782961.003:3): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.289" name="bus" dev="loop1" ino=263 res=0 errno=0
[  298.765993][ T6986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.773149][ T7063] Invalid ELF header magic: != ELF
[  298.888076][ T6986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.921957][ T6986] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.941611][ T6986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.037768][ T6986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.656762][ T5773] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  300.001403][ T6986] hsr_slave_0: entered promiscuous mode
[  301.096228][ T6986] hsr_slave_1: entered promiscuous mode
[  301.109242][ T6986] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.119023][ T6986] Cannot create hsr debugfs directory
[  301.270512][ T5783] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  301.282005][ T5783] CPU: 0 PID: 5783 Comm: kworker/u5:7 Not tainted syzkaller #0
[  301.289618][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  301.299735][ T5783] Workqueue: hci2 hci_rx_work
[  301.304484][ T5783] Call Trace:
[  301.307802][ T5783]  <TASK>
[  301.310775][ T5783]  dump_stack_lvl+0x18c/0x250
[  301.315503][ T5783]  ? show_regs_print_info+0x20/0x20
[  301.320773][ T5783]  ? load_image+0x400/0x400
[  301.325349][ T5783]  sysfs_create_dir_ns+0x26e/0x2a0
[  301.330515][ T5783]  ? sysfs_warn_dup+0xa0/0xa0
[  301.335229][ T5783]  ? do_raw_spin_unlock+0x121/0x230
[  301.340500][ T5783]  kobject_add_internal+0x61c/0xcc0
[  301.345759][ T5783]  kobject_add+0x164/0x240
[  301.350224][ T5783]  ? __rwlock_init+0x150/0x150
[  301.355021][ T5783]  ? kobject_init+0x1e0/0x1e0
[  301.359728][ T5783]  ? _raw_spin_unlock+0x28/0x40
[  301.364623][ T5783]  ? get_device_parent+0x366/0x390
[  301.369787][ T5783]  device_add+0x408/0xc20
[  301.374185][ T5783]  hci_conn_add_sysfs+0xd5/0x1e0
[  301.379153][ T5783]  le_conn_complete_evt+0xf5d/0x1540
[  301.384472][ T5783]  ? hci_event_packet+0x4cb/0x1270
[  301.389642][ T5783]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  301.396012][ T5783]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  301.401682][ T5783]  ? skb_pull_data+0xfb/0x200
[  301.406384][ T5783]  hci_le_conn_complete_evt+0x187/0x440
[  301.411977][ T5783]  ? hci_remote_host_features_evt+0x150/0x150
[  301.418085][ T5783]  hci_event_packet+0x7ba/0x1270
[  301.423062][ T5783]  ? bis_list+0x290/0x290
[  301.427509][ T5783]  ? lockdep_hardirqs_on+0x98/0x150
[  301.432733][ T5783]  ? hci_send_to_monitor+0xd7/0x4f0
[  301.438058][ T5783]  hci_rx_work+0x43a/0xd60
[  301.442520][ T5783]  ? process_scheduled_works+0x96f/0x15d0
[  301.448269][ T5783]  process_scheduled_works+0xa5d/0x15d0
[  301.453864][ T5783]  ? assign_work+0x430/0x430
[  301.458484][ T5783]  ? assign_work+0x3d0/0x430
[  301.463101][ T5783]  worker_thread+0xa55/0xfc0
[  301.467731][ T5783]  kthread+0x2fa/0x390
[  301.471815][ T5783]  ? pr_cont_work+0x560/0x560
[  301.476523][ T5783]  ? kthread_blkcg+0xd0/0xd0
[  301.481130][ T5783]  ret_from_fork+0x48/0x80
[  301.485564][ T5783]  ? kthread_blkcg+0xd0/0xd0
[  301.490173][ T5783]  ret_from_fork_asm+0x11/0x20
[  301.494968][ T5783]  </TASK>
[  301.505014][ T5783] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  301.520573][ T5783] Bluetooth: hci2: failed to register connection device
[  301.794559][ T7100] 9pnet_fd: Insufficient options for proto=fd
[  302.333478][   T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.982846][ T6986] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  304.029574][ T6986] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  304.158271][   T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.242002][ T6986] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  304.269638][ T6986] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  304.361445][   T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.612512][   T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.832842][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  304.875614][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  304.895988][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  304.921733][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  304.929947][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  304.937859][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  304.994319][ T6986] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.165191][ T7120] befs: (nullb0): invalid magic header
[  305.197663][ T6986] 8021q: adding VLAN 0 to HW filter on device team0
[  305.223229][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.230542][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.331239][ T7123] loop1: detected capacity change from 0 to 512
[  305.359021][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.366291][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.065832][ T5783] Bluetooth: hci0: command tx timeout
[  307.665782][ T5783] Bluetooth: hci2: command 0x0406 tx timeout
[  308.809404][ T7136] Invalid ELF header magic: != ELF
[  308.919388][ T6986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  309.110219][ T5783] Bluetooth: hci0: command tx timeout
[  311.072470][ T6986] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.185896][ T5783] Bluetooth: hci0: command tx timeout
[  311.214930][ T7113] chnl_net:caif_netlink_parms(): no params data found
[  311.854490][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.891595][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.920776][ T7113] bridge_slave_0: entered allmulticast mode
[  311.938365][ T7113] bridge_slave_0: entered promiscuous mode
[  311.979377][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.998638][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.032138][ T7113] bridge_slave_1: entered allmulticast mode
[  312.064851][ T7113] bridge_slave_1: entered promiscuous mode
[  312.203737][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.218572][   T59] hsr_slave_0: left promiscuous mode
[  312.229193][   T59] hsr_slave_1: left promiscuous mode
[  312.240716][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.252698][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  312.263159][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.273995][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.284736][   T59] bridge_slave_1: left allmulticast mode
[  312.293922][   T59] bridge_slave_1: left promiscuous mode
[  312.304147][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.323276][   T59] bridge_slave_0: left allmulticast mode
[  312.330211][   T59] bridge_slave_0: left promiscuous mode
[  312.336496][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.374858][   T59] veth1_macvtap: left promiscuous mode
[  312.380657][   T59] veth0_macvtap: left promiscuous mode
[  312.388627][   T59] veth1_vlan: left promiscuous mode
[  312.394034][   T59] veth0_vlan: left promiscuous mode
[  313.326936][ T5783] Bluetooth: hci0: command tx timeout
[  314.902541][   T59] team0 (unregistering): Port device team_slave_1 removed
[  314.983214][   T59] team0 (unregistering): Port device team_slave_0 removed
[  315.098165][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.191562][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.789331][   T59] bond0 (unregistering): Released all slaves
[  316.098800][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.204260][ T7113] team0: Port device team_slave_0 added
[  316.229357][ T7113] team0: Port device team_slave_1 added
[  316.238438][ T6986] veth0_vlan: entered promiscuous mode
[  316.313181][ T6986] veth1_vlan: entered promiscuous mode
[  316.323978][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.334833][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.362563][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.388788][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.396147][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.422930][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.505390][ T7113] hsr_slave_0: entered promiscuous mode
[  316.521229][ T7113] hsr_slave_1: entered promiscuous mode
[  316.528241][ T7113] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  316.536035][ T7113] Cannot create hsr debugfs directory
[  316.544268][ T6986] veth0_macvtap: entered promiscuous mode
[  316.592713][ T6986] veth1_macvtap: entered promiscuous mode
[  316.667568][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.679436][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.689750][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.700710][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.712377][ T6986] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.752845][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.763834][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.775224][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.791945][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.803746][ T6986] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.834996][ T6986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.844378][ T6986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.857790][ T6986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.869301][ T6986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.108664][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.127870][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.158790][ T7113] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  317.178837][ T7113] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  317.189910][ T7113] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  317.199859][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.208265][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.233996][ T7113] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  317.413160][ T7218] loop1: detected capacity change from 0 to 1024
[  317.470223][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.526527][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.533028][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.582974][ T7113] 8021q: adding VLAN 0 to HW filter on device team0
[  317.680507][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.688793][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.519352][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.526602][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.772048][ T7218] hfsplus: b-tree write err: -5, ino 3
[  319.504470][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 90 seconds
[  320.452117][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.535888][   T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  320.653751][ T7226] loop4: detected capacity change from 0 to 262144
[  321.707310][ T7226] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.310 (7226)
[  321.716238][   T27] usb 2-1: Using ep0 maxpacket: 8
[  321.769433][   T27] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  321.820032][   T27] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  321.845126][   T27] usb 2-1: Product: syz
[  321.875570][   T27] usb 2-1: Manufacturer: syz
[  321.885449][   T27] usb 2-1: SerialNumber: syz
[  322.003363][   T27] usb 2-1: config 0 descriptor??
[  322.052840][   T27] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  322.815875][   T27] gspca_zc3xx: reg_w_i err -71
[  322.820808][   T27] gspca_zc3xx: probe of 2-1:0.0 failed with error -71
[  322.911638][   T27] usb 2-1: USB disconnect, device number 9
[  323.228388][ T7113] veth0_vlan: entered promiscuous mode
[  323.288840][ T7113] veth1_vlan: entered promiscuous mode
[  323.412172][ T7113] veth0_macvtap: entered promiscuous mode
[  323.459424][ T7113] veth1_macvtap: entered promiscuous mode
[  323.526277][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.564833][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.597828][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.641771][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.690598][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.721350][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.751586][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.794851][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.838578][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.865765][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.885732][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.912180][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.935773][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.948727][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.967480][ T7113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.980608][ T7113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.991952][ T7113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.000960][ T7113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.303750][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.347643][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.454177][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.482760][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.985855][ T5778] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  326.175802][ T5778] usb 6-1: Using ep0 maxpacket: 32
[  326.188037][ T5778] usb 6-1: config 0 has no interfaces?
[  326.210745][ T5778] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  326.259924][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  326.286309][ T5778] usb 6-1: Product: syz
[  326.295950][ T5817] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  326.300904][ T5778] usb 6-1: Manufacturer: syz
[  326.322779][ T5778] usb 6-1: SerialNumber: syz
[  326.357836][ T5778] usb 6-1: config 0 descriptor??
[  326.526984][ T5817] usb 2-1: config 4 has an invalid interface number: 28 but max is 0
[  326.535158][ T5817] usb 2-1: config 4 has no interface number 0
[  326.588905][ T5817] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a
[  326.612950][ T5778] usb 6-1: USB disconnect, device number 2
[  326.615959][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.662727][ T5817] usb 2-1: Product: syz
[  326.672839][ T5817] usb 2-1: Manufacturer: syz
[  326.695698][ T5817] usb 2-1: SerialNumber: syz
[  326.720868][ T5817] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.28/input/input5
[  328.501481][ T5126] bcm5974 2-1:4.28: could not read from device
[  328.547569][ T5126] bcm5974 2-1:4.28: could not read from device
[  328.584003][ T5817] bcm5974 2-1:4.28: could not read from device
[  328.631356][ T5126] bcm5974 2-1:4.28: could not read from device
[  328.732084][ T5817] input: failed to attach handler mousedev to device input5, error: -5
[  328.781373][ T5126] bcm5974 2-1:4.28: could not read from device
[  328.806105][ T5817] usb 2-1: USB disconnect, device number 10
[  330.396222][ T5817] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  331.653413][ T5817] usb 6-1: Using ep0 maxpacket: 16
[  331.677821][ T5817] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  331.722959][ T5817] usb 6-1: config 0 has no interface number 0
[  331.754893][ T5817] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.810381][ T5817] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.859427][ T5817] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  331.910114][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.963832][ T5817] usb 6-1: config 0 descriptor??
[  332.452120][ T5817] usbhid 6-1:0.1: can't add hid device: -71
[  332.506181][ T5817] usbhid: probe of 6-1:0.1 failed with error -71
[  332.543012][ T5817] usb 6-1: USB disconnect, device number 3
[  332.968125][ T7345] loop1: detected capacity change from 0 to 32768
[  333.027529][ T7345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.332 (7345)
[  333.068427][ T7345] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  333.078710][ T7345] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  333.087471][ T7345] BTRFS info (device loop1): setting nodatacow, compression disabled
[  333.095570][ T7345] BTRFS info (device loop1): enabling auto defrag
[  333.102114][ T7345] BTRFS info (device loop1): max_inline at 0
[  333.108148][ T7345] BTRFS info (device loop1): using free space tree
[  333.235944][ T7345] BTRFS info (device loop1): auto enabling async discard
[  333.946425][ T7368] loop5: detected capacity change from 0 to 1024
[  334.061912][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  334.358220][ T7368] hfsplus: b-tree write err: -5, ino 3
[  334.476286][ T7376] syzkaller0: entered promiscuous mode
[  334.481845][ T7376] syzkaller0: entered allmulticast mode
[  334.615732][ T5817] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  334.836091][ T5817] usb 5-1: Using ep0 maxpacket: 32
[  334.885733][ T5817] usb 5-1: config 0 has no interfaces?
[  334.894703][ T5817] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  334.915777][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  334.924032][ T5817] usb 5-1: Product: syz
[  334.958810][ T5817] usb 5-1: Manufacturer: syz
[  334.978902][ T5817] usb 5-1: SerialNumber: syz
[  335.030649][ T5817] usb 5-1: config 0 descriptor??
[  335.720151][ T7373] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  335.772272][ T5817] usb 5-1: USB disconnect, device number 2
[  337.040234][ T7400] loop1: detected capacity change from 0 to 32768
[  337.060258][ T7400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.342 (7400)
[  337.106102][ T7400] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  337.116406][ T7400] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  337.125106][ T7400] BTRFS info (device loop1): setting nodatacow, compression disabled
[  337.133346][ T7400] BTRFS info (device loop1): enabling auto defrag
[  337.139834][ T7400] BTRFS info (device loop1): max_inline at 0
[  337.145908][ T7400] BTRFS info (device loop1): using free space tree
[  337.266741][ T7405] befs: (nullb0): invalid magic header
[  337.332975][ T7400] BTRFS info (device loop1): auto enabling async discard
[  338.059810][ T7439] loop5: detected capacity change from 0 to 512
[  338.111401][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  338.260341][ T7439] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.347: inode has both inline data and extents flags
[  338.342722][ T7439] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.347: couldn't read orphan inode 15 (err -117)
[  338.443564][ T7439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.797151][ T7113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.106612][ T7464] capability: warning: `syz.1.352' uses deprecated v2 capabilities in a way that may be insecure
[  340.124089][   T28] audit: type=1326 audit(1771783002.383:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.106099][   T28] audit: type=1326 audit(1771783002.393:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.129749][   T28] audit: type=1326 audit(1771783002.403:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.151986][   T28] audit: type=1326 audit(1771783002.403:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.176126][   T28] audit: type=1326 audit(1771783002.403:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.198999][   T28] audit: type=1326 audit(1771783002.403:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.221157][   T28] audit: type=1326 audit(1771783002.403:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.249296][   T28] audit: type=1326 audit(1771783002.403:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.328273][   T28] audit: type=1326 audit(1771783002.403:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.399765][   T28] audit: type=1326 audit(1771783002.403:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d839c629 code=0x7ffc0000
[  341.539107][ T7478] input: syz0 as /devices/virtual/input/input6
[  341.673360][ T7483] befs: (nullb0): invalid magic header
[  342.910662][ T7511] autofs4:pid:7511:autofs_fill_super: called with bogus options
[  349.014324][ T7559] autofs4:pid:7559:autofs_fill_super: called with bogus options
[  350.293014][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 120 seconds
[  354.036791][ T5141] udevd[5141]: worker [6335] /devices/virtual/block/nbd0 is taking a long time
[  357.290812][ T7600] autofs4:pid:7600:autofs_fill_super: called with bogus options
[  357.337090][ T7596] befs: (nullb0): invalid magic header
[  357.669907][ T7607] syzkaller0: entered promiscuous mode
[  357.679876][ T7607] syzkaller0: entered allmulticast mode
[  358.169529][ T7622] loop1: detected capacity change from 0 to 256
[  358.223645][ T7625] loop4: detected capacity change from 0 to 512
[  361.090843][ T7641] netlink: 'syz.1.397': attribute type 1 has an invalid length.
[  362.048674][ T7647] befs: (nullb0): invalid magic header
[  363.830700][ T7660] loop1: detected capacity change from 0 to 512
[  366.969440][ T7685] loop4: detected capacity change from 0 to 512
[  367.271289][ T7689] libceph: resolve '0..' (ret=-3): failed
[  373.965780][ T5817] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  374.176085][ T5817] usb 5-1: Using ep0 maxpacket: 32
[  374.650065][ T5817] usb 5-1: config 0 has no interfaces?
[  374.750804][ T5817] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  374.784673][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  374.823326][ T5817] usb 5-1: Product: syz
[  374.868484][ T5817] usb 5-1: Manufacturer: syz
[  374.873167][ T5817] usb 5-1: SerialNumber: syz
[  374.906638][ T5817] usb 5-1: config 0 descriptor??
[  375.285890][ T7752] loop1: detected capacity change from 0 to 32768
[  375.647772][ T7752] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.420 (7752)
[  375.836350][ T7752] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  375.846599][ T7752] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  375.855321][ T7752] BTRFS info (device loop1): setting nodatacow, compression disabled
[  375.863490][ T7752] BTRFS info (device loop1): enabling auto defrag
[  375.871008][ T7752] BTRFS info (device loop1): max_inline at 0
[  375.877111][ T7752] BTRFS info (device loop1): using free space tree
[  375.884054][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'.
[  375.922183][    T8] usb 5-1: USB disconnect, device number 3
[  376.173027][ T7768] loop5: detected capacity change from 0 to 512
[  376.247747][ T7752] BTRFS info (device loop1): auto enabling async discard
[  378.571223][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  378.950658][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.957279][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  380.870042][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 150 seconds
[  381.233784][ T7826] loop5: detected capacity change from 0 to 512
[  387.552327][ T7885] loop1: detected capacity change from 0 to 256
[  387.559842][ T7885] exfat: Deprecated parameter 'namecase'
[  387.565718][ T7885] exfat: Deprecated parameter 'namecase'
[  389.123138][ T7885] exFAT-fs (loop1): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d)
[  389.725870][ T6591] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  390.410257][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[  391.545883][ T6591] usb 5-1: Using ep0 maxpacket: 32
[  391.689214][ T6591] usb 5-1: config 0 has no interfaces?
[  391.799497][ T6591] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  391.838348][ T3530] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.860174][ T6591] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  391.908857][ T6591] usb 5-1: Product: syz
[  391.918910][ T6591] usb 5-1: Manufacturer: syz
[  391.948199][ T6591] usb 5-1: SerialNumber: syz
[  391.997216][ T6591] usb 5-1: config 0 descriptor??
[  392.239920][ T3530] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.306284][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'.
[  392.406322][  T789] usb 5-1: USB disconnect, device number 4
[  392.608898][ T3530] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.987173][ T3530] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.380758][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  395.391012][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  395.409526][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  395.440380][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  395.465939][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  395.481822][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  397.346880][ T7933] chnl_net:caif_netlink_parms(): no params data found
[  397.585982][ T5781] Bluetooth: hci0: command tx timeout
[  400.215678][ T5781] Bluetooth: hci0: command tx timeout
[  401.997183][ T3530] hsr_slave_0: left promiscuous mode
[  402.053669][ T3530] hsr_slave_1: left promiscuous mode
[  402.136048][ T3530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  402.143586][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.177160][ T3530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  402.184664][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.226575][ T3530] bridge_slave_1: left allmulticast mode
[  402.232288][ T3530] bridge_slave_1: left promiscuous mode
[  402.238172][ T5781] Bluetooth: hci0: command tx timeout
[  402.266206][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.296249][ T3530] bridge_slave_0: left allmulticast mode
[  402.301968][ T3530] bridge_slave_0: left promiscuous mode
[  402.371527][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.581154][ T3530] veth1_macvtap: left promiscuous mode
[  402.586924][ T3530] veth0_macvtap: left promiscuous mode
[  402.592508][ T3530] veth1_vlan: left promiscuous mode
[  402.648186][ T3530] veth0_vlan: left promiscuous mode
[  403.376154][  T788] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  403.487554][ T7997] autofs4:pid:7997:autofs_fill_super: called with bogus options
[  403.555703][  T788] usb 2-1: Using ep0 maxpacket: 32
[  403.586835][  T788] usb 2-1: config 0 has no interfaces?
[  403.598540][  T788] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  403.618530][  T788] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  403.645742][  T788] usb 2-1: Product: syz
[  403.655744][  T788] usb 2-1: Manufacturer: syz
[  403.680862][  T788] usb 2-1: SerialNumber: syz
[  403.736369][  T788] usb 2-1: config 0 descriptor??
[  404.313191][ T5781] Bluetooth: hci0: command tx timeout
[  404.383772][ T8006] fuse: Unknown parameter '0x0000000000000008'
[  404.394102][ T8006] fuse: Unknown parameter '�18446744073709551615��'
[  404.537136][ T3530] team0 (unregistering): Port device team_slave_1 removed
[  404.623154][ T3530] team0 (unregistering): Port device team_slave_0 removed
[  404.698766][ T3530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.756196][ T3530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.150868][ T3530] bond0 (unregistering): Released all slaves
[  405.251642][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.263008][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.270374][ T7933] bridge_slave_0: entered allmulticast mode
[  405.287659][ T7933] bridge_slave_0: entered promiscuous mode
[  405.313609][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'.
[  405.330024][ T7993] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  405.352891][ T6591] usb 2-1: USB disconnect, device number 11
[  405.373002][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.394402][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.401798][ T7933] bridge_slave_1: entered allmulticast mode
[  405.417078][ T7933] bridge_slave_1: entered promiscuous mode
[  405.557732][ T7933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.626687][ T7933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.756868][ T7933] team0: Port device team_slave_0 added
[  405.777186][ T7933] team0: Port device team_slave_1 added
[  405.937417][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.989134][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.024763][ T7933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.693093][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.705912][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.831838][ T8028] loop1: detected capacity change from 0 to 512
[  406.847440][ T7933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.718344][ T7933] hsr_slave_0: entered promiscuous mode
[  409.729709][ T7933] hsr_slave_1: entered promiscuous mode
[  409.770074][ T7933] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  409.810230][ T7933] Cannot create hsr debugfs directory
[  410.497080][ T8059] befs: (nullb0): invalid magic header
[  410.621899][ T7933] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  410.683861][ T7933] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  410.765541][ T7933] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  410.816609][ T7933] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  410.950203][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 180 seconds
[  411.162071][ T7933] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.230671][ T7933] 8021q: adding VLAN 0 to HW filter on device team0
[  411.253984][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.261204][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.336700][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.343931][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.431946][ T8078] befs: (nullb0): invalid magic header
[  411.640178][ T8084] loop1: detected capacity change from 0 to 512
[  411.670096][ T8084] EXT4-fs: Ignoring removed orlov option
[  411.685647][ T8084] EXT4-fs: Ignoring removed mblk_io_submit option
[  411.712397][ T8084] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.479: corrupted in-inode xattr: e_value size too large
[  411.731350][ T8084] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.479: couldn't read orphan inode 15 (err -117)
[  411.791600][ T8084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.199302][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.247684][ T7933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.553678][ T8111] loop1: detected capacity change from 0 to 512
[  416.368004][ T7933] veth0_vlan: entered promiscuous mode
[  416.422206][ T7933] veth1_vlan: entered promiscuous mode
[  416.523949][ T7933] veth0_macvtap: entered promiscuous mode
[  416.562712][ T7933] veth1_macvtap: entered promiscuous mode
[  416.620127][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.663568][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.700106][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.715995][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.739035][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.780927][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.814226][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.872942][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[  416.903169][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.939171][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.950311][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.961147][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.971389][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.982063][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.997401][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.040960][ T7933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.053423][ T7933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.079482][ T7933] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.129946][ T7933] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.212317][ T8141] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  417.488090][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.497852][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.868270][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.895347][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.714130][ T8180] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  422.270062][ T8186] fuse: Unknown parameter '0x0000000000000008'
[  422.278130][ T8186] fuse: Unknown parameter '�18446744073709551615��'
[  423.830315][ T8176] loop6: detected capacity change from 0 to 32768
[  423.989726][ T8176] JBD2: Ignoring recovery information on journal
[  424.088765][ T8176] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  425.425937][ T8216] (syz.6.495,8216,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  425.680662][ T7933] ocfs2: Unmounting device (7,6) on (node local)
[  427.444169][ T8243] fuse: Unknown parameter '0x0000000000000008'
[  427.464694][ T8243] fuse: Unknown parameter '�18446744073709551615��'
[  429.167932][ T5141] udevd[5141]: worker [6335] /devices/virtual/block/nbd0 timeout; kill it
[  429.230088][ T5141] udevd[5141]: seq 10922 '/devices/virtual/block/nbd0' killed
[  430.997641][ T8290] hub 2-0:1.0: USB hub found
[  431.006142][ T8290] hub 2-0:1.0: 1 port detected
[  434.778933][ T8320] 9pnet_fd: Insufficient options for proto=fd
[  436.001055][ T5781] Bluetooth: hci1: ISO packet for unknown connection handle 816
[  440.591371][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.597815][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  441.186847][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 210 seconds
[  471.778383][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 240 seconds
[  474.968075][ T8691] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  475.264849][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'.
[  482.278099][ T8763] netlink: 52 bytes leftover after parsing attributes in process `syz.3.622'.
[  486.402416][ T8818] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  486.508117][ T8821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.636'.
[  489.067270][ T8864] netlink: 52 bytes leftover after parsing attributes in process `syz.4.649'.
[  494.798729][ T8915] netlink: 52 bytes leftover after parsing attributes in process `syz.6.658'.
[  497.069082][ T8943] ������: renamed from vlan0 (while UP)
[  499.436044][ T8967] netlink: 52 bytes leftover after parsing attributes in process `syz.3.669'.
[  502.292560][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  502.299384][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.311863][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 270 seconds
[  510.196303][ T5781] Bluetooth: hci1: Invalid connection link type handle 0x00c9
[  519.668548][ T9227] Bluetooth: hci0: command 0x0406 tx timeout
[  532.830867][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 300 seconds
[  537.760031][ T9412] netlink: 'syz.1.766': attribute type 2 has an invalid length.
[  542.991541][ T9449] trusted_key: syz.4.778 sent an empty control message without MSG_MORE.
[  552.719821][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'.
[  560.153103][ T9564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'.
[  563.268120][   T97] block nbd0: Possible stuck request ffff888021fa8000: control (read@0,4096B). Runtime 330 seconds
[  563.283084][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.289699][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  571.628775][ T9665] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  574.903544][ T5781] Bluetooth: hci2: ISO packet for unknown connection handle 816
[  576.943548][   T29] INFO: task udevd:6335 blocked for more than 144 seconds.
[  576.975659][   T29]       Not tainted syzkaller #0
[  576.980687][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  577.022032][   T29] task:udevd           state:D stack:25128 pid:6335  ppid:5141   flags:0x00004006
[  577.042874][   T29] Call Trace:
[  577.050090][   T29]  <TASK>
[  577.054150][   T29]  __schedule+0x1553/0x45a0
[  577.066723][   T29]  ? asan.module_dtor+0x20/0x20
[  577.133497][   T29]  ? asan.module_dtor+0x20/0x20
[  577.142079][   T29]  ? mark_lock+0x94/0x320
[  577.148131][   T29]  ? lock_chain_count+0x20/0x20
[  577.153231][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[  577.162078][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[  577.169491][   T29]  schedule+0xbd/0x170
[  577.173743][   T29]  io_schedule+0x80/0xd0
[  577.181727][   T29]  folio_wait_bit_common+0x714/0xfa0
[  577.191363][   T29]  ? folio_wait_bit+0x30/0x30
[  577.205638][   T29]  ? _compound_head+0x120/0x120
[  577.225550][   T29]  ? __filemap_get_folio+0x704/0xbb0
[  577.252441][   T29]  do_read_cache_folio+0x1c0/0x7d0
[  577.274481][   T29]  ? blkdev_writepage+0x30/0x30
[  577.301192][   T29]  read_part_sector+0xd2/0x340
[  577.318467][   T29]  adfspart_check_POWERTEC+0x93/0xed0
[  577.354632][   T29]  ? put_partition+0x370/0x370
[  577.364693][   T29]  bdev_disk_changed+0x740/0x1420
[  577.379129][   T29]  ? bdev_resize_partition+0xf0/0xf0
[  577.384533][   T29]  ? iput+0x343/0x920
[  577.388708][   T29]  blkdev_get_whole+0x30d/0x390
[  577.394283][   T29]  blkdev_get_by_dev+0x279/0x600
[  577.402278][   T29]  blkdev_open+0x152/0x360
[  577.411508][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[  577.416522][   T29]  do_dentry_open+0x8c6/0x1500
[  577.421566][   T29]  path_openat+0x27f1/0x3230
[  577.428203][   T29]  ? do_sys_openat2+0xda/0x1d0
[  577.442731][   T29]  ? verify_lock_unused+0x140/0x140
[  577.450657][   T29]  ? do_filp_open+0x430/0x430
[  577.455460][   T29]  ? __virt_addr_valid+0x18c/0x540
[  577.477139][   T29]  do_filp_open+0x1f5/0x430
[  577.803917][   T29]  ? vfs_tmpfile+0x490/0x490
[  577.820682][   T29]  ? _raw_spin_unlock+0x28/0x40
[  577.841138][   T29]  ? alloc_fd+0x58f/0x630
[  577.869785][   T29]  do_sys_openat2+0x134/0x1d0
[  577.881000][   T29]  ? do_sys_open+0xe0/0xe0
[  577.892236][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  577.922603][   T29]  ? lock_chain_count+0x20/0x20
[  577.941077][   T29]  __x64_sys_openat+0x139/0x160
[  577.963090][   T29]  do_syscall_64+0x55/0xa0
[  577.980515][   T29]  ? clear_bhb_loop+0x40/0x90
[  578.003174][   T29]  ? clear_bhb_loop+0x40/0x90
[  578.035579][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  578.059807][   T29] RIP: 0033:0x7f3167fd1407
[  578.105018][   T29] RSP: 002b:00007ffc429297d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  578.129739][   T29] RAX: ffffffffffffffda RBX: 00007f3167f45880 RCX: 00007f3167fd1407
[  578.140227][   T29] RDX: 00000000000a0800 RSI: 00005587a8a612e0 RDI: ffffffffffffff9c
[  578.149753][   T29] RBP: 00005587a8a4e910 R08: 0000000000000000 R09: 0000000000000000
[  578.161395][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005587a8a61e20
[  578.170876][   T29] R13: 00005587a8a66410 R14: 0000000000000000 R15: 00005587a8a61e20
[  578.182456][   T29]  </TASK>
[  578.187062][   T29] 
[  578.187062][   T29] Showing all locks held in the system:
[  578.194954][   T29] 1 lock held by khungtaskd/29:
[  578.203698][   T29]  #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  578.218949][   T29] 2 locks held by getty/5532:
[  578.223785][   T29]  #0: ffff88802d7120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  578.252066][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  578.266132][   T29] 1 lock held by udevd/6335:
[  578.270851][   T29]  #0: ffff888021ee14c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  578.286112][   T29] 2 locks held by syz-executor/7933:
[  578.291598][   T29] 
[  578.294079][   T29] =============================================
[  578.294079][   T29] 
[  578.307263][   T29] NMI backtrace for cpu 1
[  578.311631][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  578.318866][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  578.328958][   T29] Call Trace:
[  578.332281][   T29]  <TASK>
[  578.335244][   T29]  dump_stack_lvl+0x18c/0x250
[  578.339989][   T29]  ? show_regs_print_info+0x20/0x20
[  578.345228][   T29]  ? load_image+0x400/0x400
[  578.349773][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  578.354771][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  578.360971][   T29]  ? _printk+0xde/0x130
[  578.365174][   T29]  ? load_image+0x400/0x400
[  578.369716][   T29]  ? load_image+0x400/0x400
[  578.374263][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  578.380372][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  578.386400][   T29]  watchdog+0xf3d/0xf80
[  578.390607][   T29]  ? watchdog+0x1e1/0xf80
[  578.394998][   T29]  kthread+0x2fa/0x390
[  578.399110][   T29]  ? hungtask_pm_notify+0x90/0x90
[  578.404173][   T29]  ? kthread_blkcg+0xd0/0xd0
[  578.408803][   T29]  ret_from_fork+0x48/0x80
[  578.413254][   T29]  ? kthread_blkcg+0xd0/0xd0
[  578.417877][   T29]  ret_from_fork_asm+0x11/0x20
[  578.422695][   T29]  </TASK>
[  578.427093][   T29] Sending NMI from CPU 1 to CPUs 0:
[  578.432355][    C0] NMI backtrace for cpu 0
[  578.432365][    C0] CPU: 0 PID: 7933 Comm: syz-executor Not tainted syzkaller #0
[  578.432380][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  578.432389][    C0] RIP: 0010:kasan_check_range+0x2d/0x290
[  578.432415][    C0] Code: 00 b0 01 48 85 f6 0f 84 b4 01 00 00 55 41 57 41 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 13 02 00 00 49 89 f9 49 c1 e9 2f <41> 81 f9 ff ff 01 00 0f 82 ff 01 00 00 49 89 ff 49 c1 ef 03 49 ba
[  578.432427][    C0] RSP: 0018:ffffc900052672e8 EFLAGS: 00000807
[  578.432441][    C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81682f1f
[  578.432452][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911bf510
[  578.432462][    C0] RBP: ffffc90005267568 R08: ffffffff911bf518 R09: 000000000001ffff
[  578.432473][    C0] R10: dffffc0000000000 R11: fffffbfff2237eb6 R12: 0000000000000000
[  578.432483][    C0] R13: ffff88802b5f8b28 R14: 0000000000000084 R15: ffff88802b5f8b28
[  578.432494][    C0] FS:  0000555562433500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  578.432508][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  578.432518][    C0] CR2: 00007fc09189aff8 CR3: 000000006420e000 CR4: 00000000003506f0
[  578.432532][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  578.432541][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  578.432550][    C0] Call Trace:
[  578.432555][    C0]  <TASK>
[  578.432562][    C0]  __lock_acquire+0x95f/0x7d40
[  578.432592][    C0]  ? mark_lock+0x94/0x320
[  578.432611][    C0]  ? verify_lock_unused+0x140/0x140
[  578.432628][    C0]  ? __lock_acquire+0x1347/0x7d40
[  578.432656][    C0]  lock_acquire+0x19e/0x420
[  578.432673][    C0]  ? __mod_lruvec_page_state+0xa5/0x410
[  578.432694][    C0]  ? read_lock_is_recursive+0x20/0x20
[  578.432713][    C0]  ? __mod_lruvec_page_state+0xa5/0x410
[  578.432729][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  578.432748][    C0]  ? __mod_lruvec_page_state+0xa5/0x410
[  578.432764][    C0]  __mod_lruvec_page_state+0xc2/0x410
[  578.432791][    C0]  ? __mod_lruvec_page_state+0xa5/0x410
[  578.432806][    C0]  ? __mod_lruvec_page_state+0xa5/0x410
[  578.432822][    C0]  filemap_unaccount_folio+0x322/0xc50
[  578.432849][    C0]  __filemap_remove_folio+0xc5/0x8d0
[  578.432873][    C0]  ? __rwlock_init+0x150/0x150
[  578.432894][    C0]  ? __bpf_trace_file_check_and_advance_wb_err+0x170/0x170
[  578.432922][    C0]  ? _raw_spin_lock_irq+0xbb/0xf0
[  578.432938][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  578.432954][    C0]  ? __folio_cancel_dirty+0xc4/0x580
[  578.432980][    C0]  filemap_remove_folio+0xf1/0x2c0
[  578.433006][    C0]  truncate_inode_folio+0x5d/0x70
[  578.433024][    C0]  shmem_undo_range+0x418/0x1b20
[  578.433047][    C0]  ? shmem_truncate_range+0xa0/0xa0
[  578.433074][    C0]  ? inode_wait_for_writeback+0x1e3/0x230
[  578.433097][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  578.433113][    C0]  ? do_raw_spin_lock+0x11f/0x2c0
[  578.433136][    C0]  shmem_evict_inode+0x245/0x9e0
[  578.433158][    C0]  ? inode_wait_for_writeback+0x1e3/0x230
[  578.433179][    C0]  ? shmem_free_in_core_inode+0xb0/0xb0
[  578.433198][    C0]  ? sb_clear_inode_writeback+0x360/0x360
[  578.433219][    C0]  ? do_raw_spin_lock+0x11f/0x2c0
[  578.433239][    C0]  ? bit_waitqueue+0x30/0x30
[  578.433263][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  578.433285][    C0]  ? shmem_free_in_core_inode+0xb0/0xb0
[  578.433303][    C0]  evict+0x4ca/0x8d0
[  578.433325][    C0]  ? proc_nr_inodes+0x230/0x230
[  578.433342][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  578.433363][    C0]  ? _raw_spin_unlock+0x28/0x40
[  578.433378][    C0]  ? iput+0x706/0x920
[  578.433396][    C0]  do_unlinkat+0x38c/0x590
[  578.433413][    C0]  ? fsnotify_link_count+0xf0/0xf0
[  578.433431][    C0]  ? getname_flags+0x20a/0x500
[  578.433455][    C0]  __x64_sys_unlink+0x49/0x50
[  578.433470][    C0]  do_syscall_64+0x55/0xa0
[  578.433492][    C0]  ? clear_bhb_loop+0x40/0x90
[  578.433508][    C0]  ? clear_bhb_loop+0x40/0x90
[  578.433525][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  578.433541][    C0] RIP: 0033:0x7f633659b717
[  578.433554][    C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  578.433565][    C0] RSP: 002b:00007ffc85d164a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  578.433579][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f633659b717
[  578.433590][    C0] RDX: 00007ffc85d164d0 RSI: 00007ffc85d16560 RDI: 00007ffc85d16560
[  578.433600][    C0] RBP: 00007ffc85d16560 R08: 00007ffc85d17560 R09: 00000000ffffffff
[  578.433610][    C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc85d175f0
[  578.433619][    C0] R13: 00007f6336631ef0 R14: 000000000008c8f0 R15: 00007ffc85d17630
[  578.433636][    C0]  </TASK>
[  578.924271][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  578.931184][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  578.938404][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  578.948489][   T29] Call Trace:
[  578.951808][   T29]  <TASK>
[  578.954765][   T29]  dump_stack_lvl+0x18c/0x250
[  578.959482][   T29]  ? show_regs_print_info+0x20/0x20
[  578.964709][   T29]  ? load_image+0x400/0x400
[  578.969289][   T29]  panic+0x2dc/0x730
[  578.973220][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  578.978901][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  578.983434][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  578.989017][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  578.995231][   T29]  watchdog+0xf7c/0xf80
[  578.999473][   T29]  ? watchdog+0x1e1/0xf80
[  579.003840][   T29]  kthread+0x2fa/0x390
[  579.007946][   T29]  ? hungtask_pm_notify+0x90/0x90
[  579.013011][   T29]  ? kthread_blkcg+0xd0/0xd0
[  579.017638][   T29]  ret_from_fork+0x48/0x80
[  579.022094][   T29]  ? kthread_blkcg+0xd0/0xd0
[  579.026729][   T29]  ret_from_fork_asm+0x11/0x20
[  579.031550][   T29]  </TASK>
[  579.035176][   T29] Kernel Offset: disabled
[  579.039509][   T29] Rebooting in 86400 seconds..