last executing test programs:

9m58.127195628s ago: executing program 1 (id=2):
syz_emit_ethernet(0x7c, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x46, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa]}, {0x8, 0x88be, 0x4305000f}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

9m54.559806799s ago: executing program 1 (id=16):
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

9m45.525082159s ago: executing program 1 (id=34):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
close(r0)

9m42.517774809s ago: executing program 1 (id=42):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0', 0x1b)

9m41.49701632s ago: executing program 32 (id=42):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0', 0x1b)

6m46.134264442s ago: executing program 0 (id=465):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x10017, 0x0)

6m45.135008935s ago: executing program 0 (id=469):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xbf, 0xf8, 0xd, 0x40, 0x403, 0xe729, 0x2b38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0xe7, 0x1, 0x0, 0x46, 0xf5, 0x80, 0x8}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)={0x20, 0xc, 0x3, "dcfba7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

6m40.389514608s ago: executing program 0 (id=477):
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001180), 0x400000, 0x0)
r0 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef1761610000010203010902300001010080320904000003020200000524001001042402020705810340001007058202000200070503020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_ep_write(r1, 0x81, 0xfea5, &(0x7f00000001c0)="0e00000000000000")

6m36.103047874s ago: executing program 0 (id=485):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000280)={[{@utf8}, {@errors_continue}, {}, {@discard}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@namecase}, {@namecase}]}, 0x1, 0x1534, &(0x7f0000000cc0)="$eJzs3AucTVX7OPDnWWvtMSSdJtdhrfVsTnJZJEkuSXJJktQrSW4JSZO8kpAYcksakpBchuQyhOQWk8b9fr8kJMk7SZJbbsn6fybmr97q/9568/v/5vl+Pvsza83az9rPPs+cffbe55z5pvOQmo1qVWtARPAfwUs/EgEgFgAGAMB1ABAAQLm4cnEZ49klJv5nG2F/rIdTrnYG7Gri+mdtXP+sjeuftXH9szauf9bG9c/auP5ZG9efsaxs87QC1/OSdRe+/5+V8ev//yLppcZ8ubZUni4AMf9sCNf//3/4H8Ry/f/XCv6Zlbj+WRvXP6uKvdoJsP8B+PmfFWT73RGuf9bG9WcsK/v5veBYuPr3o//sBSL/zfdAfM9Lj/LV38/f3X/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xPcNZfoQAgs32182KMMcYYY4wxxtgfx2e72hkwxhhjjDHGGGPsvw9BgAQFAcRANoiF7JADBEBM5vj1EAc3QG7IA3khH+SHAhAPBaEQaDBggSCEwlAEonAjFIWboBgUhxJQEhyUgtJwM5SBW6As3Arl4DYoD7dDBagIlaAy3AFV4E6oCndBNbgbqkMNqAm14B6oDfdCHbgP6sL9UA8egPrwIDwEf4EG8DA0hEegETwKjeExaAJNoRk0hxb/VvyL0B1egh7QExKhF/SGl6EP9IV+0B8GwCswEF6FQfAaJMFgGAKvw1B4A4bBmzAcRsBIeAtGwdswGsbAWBgHyTAeJsA7MBHehUkwGabAVEiBaTAd3oMZMBNmwfswGz6AOTAX5qmMx/NDWAiLIBU+gsXwMaTBElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ3wCeyCT2E37IG98Bnsg8//xfgzfxffBQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA5zY27Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oJlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78F7sBfWwTpYF+tiPayXeXsKG2ADbIgNsRE2wsbYGJtgE2yGzbAFtsCW2BJbYStsg22wLbbFdtgOEzAB22N77IAdsCN2xE7YCTtjZ+yCXbFr+ovZAF/Cl7AnVhe9sDf2xj6YlK0f9sf++AoOxFfxVXwNk3AwDsHX8XV8A4fhaRx+cQSOxJFYRbyNo3EMkhiHyZiME3ACTsSJOAkn42Sciik4DafjdJyBM3Emvo+z8QP8AOfiXJyPC3ABLsRFmIqpuBjPYBouwaW4DJfjClyOq3A1rsK1uA7X4gbcgJtwE27BLbgNt+EO3IGfoALAT3EP7sEk3If7cD/uxwN4AA/iQUzHdDyEh/AwHsYjeASP4lE8hsfxBB7HU3gKT+MZPItn8Tyexwv4fPxXDT8pviYJRAYllIgRMSJWxIocIofIKXKKXCKXiIiIiBNxIrfILfKKvCK/yC/iRbwoJAoJI4wgEeYBABEVUVFUFBXFRDFRQpQQTjhRWpQWZUQZUVaUFeXEbaK8uF1UEBVFa1dZVBZVRBtXVdwlqolqorqoIWqKWqKWqC1qizqijqgr6op6op6oLx4UD4le2A8fFhmVaSQGY2MxBJuIpkJePkK1FMOwlWgt2ognxQgcju1ES5cgnhHtxWjsIP4qxuBzopMYh53FC6KL6Cq6iRdFd9HK9RA9xSTsJXqLqdhH9BX9RH8xA2uI93F29priNZEkBosh4nUxH98Qw8SbYrgYIUaKt8Qo8bYYLcaIsWKcSBbjxQTxjpgo3hWTxGQxRUwVKWKamC7eEzPETDFLvC9miw/EHDFXzBPzxQLxoVgoFolU8ZFYLD4WaWKJWCqWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKT4Ru8SnYrfYI/aKz8Q+8bnYL74QB8SX4qD4m0gXX4lD4mtxWHwjjohvxVHxnTgmjosT4qQ4Jb4Xp8UZcVacE+fFD+KC+FFcFF6ARCmklEoGMkZmk7Eyu8whr5E5ZZB5/Jdx8gaZW+aReWU+mV8WkPGyoCwktTTSSpKhLCyLyKi8URaVN8lisrgsIUtKJ0vJ0vJmWUbeIsvKW2U5eZssL2+XFWRFWUlWlnfIKvJOCZFL26gua8iaspa8RybCvbKOvE/WlffLevIBWV8+mHGMyiAbykdkI/mobCwfk01kU9lMNpct5OOypXxCtpKtZRv5pGwrn5Lt5NMyQT4j20t/+U/kOdlJPi87yxdkF9lVdpM/yovSyx6yp4ReIHvLl2Uf2Vf2k/3lAPmKHChflYPkazJJDpZD5OtyqHxDDpNvyuFyhBwp35Kj5NtytBwjx8pxMlmOlxPkO3KifFdOkpPlFDlVpshpst/lmWZJ+Q/j3/mN+EE/bX2T3Cy3yK1ym9wud8id8hO5S+6Su+VuuVfulfvkPrlf7pcH5AF5UB6U6TJdHpKH5GF5WB6RR+RReVQek8flOXlSnpLfy9PyjDwjz8nz8ry8cPkxAIVKKKmUClSMyqZiVXaVQ12jcqprVS51nYqo61WcukHlVnlUXpVP5VcFVLwqqAoprYyyilSoCqsiKqpuxMt/MKqEKqmcKqVKq5v/lXhVVN2kiqniv4jPzC/xd/JroVqolqqlaqVaqTaqjWqr2qp2qp1KUAmqvWqvOqgOqqPqqDqpTqqz6qy6qC6qm+qmuqvuqofqoRJVouqtXlZ9VF/VT/VXA9QrImMfBqlBKkklqSFqiBqqhqphapgaroarkWqkGqVGqdFqtBqrxqpklawmqAlKqolqkpqkpqgpKkWlqOlqupqhZqhZapaarWarOWqOmqfmqQVqgVqoFqpUlaoWq8UqTS1RS9QytUytUCvUKrVKrVFr1Dq1Tm1QG1Sa2qw2q61qq9qutqudaqfapXap3Wq32qv2qn1qn9qv9qsD6oA6qA6qdJWuDqlD6rA6rI6oI+qoOqqOqWPqhDqhTqlT6rQ6rc6qs+q8Oq8uqAvqorqYcdoXiEAEKlBBTBATxAaxQY4gR5AzyBnkCnIFkSASxAVxQe4gT5A3yBfkDwoE8UHBoFCgAxPYQFwuejS4MSga3BQUC4oHJYKSgQtKBaWDm4MywS1B2eDWoFxwW1A+uD2oEFQMKgWVgzuCKsGdQdXgrqBacHdQPagR1AxqBfcEtYN7gzrBfUHd4P6gXvBAUD94MHgo+EvQIHg4aBg8EjQKHg0aB48FTYKmQbOgedDi35gf4ffm9/50vidcD91TJ+peurd+WffRfXU/3V8P0K/ogfpVPUi/ppP0YD1Ev66H6jf0MP2mHq5H6JH6LT1Kv61H6zF6rB6nk/V4PUG/oyfqd/UkPVlP0VN1ip6mp+v39Aw9U8/S7+vZ+gM9R8/V8/R8vUB/qBfqRTpVf6QX6491ml6il+plerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq73qF36k/0Lv2p3q336L36M71Pf6736y/0Af2lPqj/ptP1V/qQ/lof1t/oI/pbfVR/p4/p47qsPqlP6e/1aX1Gn9Xn9Hn9g76gf9QXtc84uc94eTfKKBNjYkysiTU5TA6T0+Q0uUwuEzERE2fiTG6T2+Q1eU1+k9/Em3hTyBQyGciQKWwKm6iJmqKmqClmipkSpoRxxpnSprQpY8qYsqasKWfKmfKmvKlgKphKppK5w9xh7jR3mrvMXeZuc7epYWqYWqaWqW1qmzqmjqlr6pp6pp6pb+qbh8xDpoFpYBqahqaRaWQam8amiWlimplmpoVpYVqalqaVaWXamDamrWlr2pl2JsEkmPamvelgOpiOpqPpZDqZzqaz6WK6mG6mm+luupsepodJNImmt+lt+pg+pp/pZwaYAWagGWgGmUEmySSZIWaIGWqGmmFmmBluRpiRGSeq5m0z2owxY804k2ySzQQzwUw0E80kM8lMMVNMikkx0810M8PMMLPMLDPbzDZzzBwzz8wzC8wCs9AsNKkm1Sw2i02aSTNLzVKz3Cw3K81Ks9qsNmvNWrMe1puNZqPZbDabrWar2W62m51mp9lldpndZrfZa/aafWaf2W/2mwPmgDloDpp0k24OmUPmsDlsjpgj5qg5ao6ZY+aEOWFOmVPmtDltzpqz5rzJd/n10ptYm93msNfYnPZam8teZ/++n98WsPG2oC1ktc1r8/2ib6y1xWxxW8KWtM6WsqXtzb/qV7AVbSVb2d5hq9g7bdVf9Wvbe20de5+ta++3tew9v+jXsw/Y+vZR+xAigG1qG9rmtpF91Da2j9kmtqltZpvbtvYp284+bRPsM7a9ffZX/YV2kV1t19i1dp3dbffYs/acPWy/seftD7aH7WkH2FfsQPuqHWRfs0l28K/6I+1bdpR92462Y+xYO+5X/Sl2qk2x0+x0+56dYWf+qr/Afmhn21Q7x8618+z8n/oZOaXaj+xi+7FNswEstcvscrvCrrSr/m+uy+wGu9Fusrvsp3ar3Wa32x12Z+aJsN1j99rP7D77uT1kv7YH7Jf2oD1i0+1XP/Uz9u+I/dYetd/ZY/a4PWFP2lP2e5UZnbHvJ+2P9qL1FggJSJKigGIoG8VSdspB11BOupZy0XUUoespjm6g3JSH8lI+yk8FKJ4KUiHSZMgSUUiFqQhF6UbKTK8ElSRHpag03Uxl6BYqS7dSObqNytPtVIEqUiWqTHdQFbqTqtJdVI3upupUg2pSLbqHatO9VIfuo7p0P9WjB6g+PUgP0V+oAT1MDekRakSPUmN6jJpQU2pGzakFPU4t6QlqRa2pDT1JbekpakdPUwI9Q+3pWepAf6WO9Bx1ouepM71AXagrdaMXqTu9RD2oJyVSL+pNL1Mf6kv9qD8NoFdoIL1Kg+g1SqLBNIRep6H0Bg2jN2k4jaCR9BaNordpNI2hsTSOkmk8TaB3aCK9S5NoMk2hqZRC02g6vUczaCbNovdpNn1Ac2guzaP5tIA+pIW0iFLpI1pMH1MaLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDtpJn9Au+pR20x7aS5/RPvqc9tMXdIC+pIP0N0qnr+gQfU2H6Rs6Qt/6nvQdHaPjdIJO0in6nk7TGTpL5+g8/UAX6Ee6SJ4gxFCEMlRhEMaE2cLYMHuYI7wmzBleG+YKrwsj4fVhXHhDmDvME+YN84X5wwJhfFgwLBTq0IQ2pDAMC4dFwmh4Y1g0vCksFhYPS4QlQxeWCkuHN4dlwlvCsuGtYbnwtrB8eHtYIawYPnp/5fCOsEp4Z1g1vCusFt4dVg9rhDXDWuE9Ye3w3rBOeF9YN7w/LBs+ENYPHwwfCv8SNggfDhuGj4SNwkfDxuFjYZOwadgsbB62CB8PW4ZPhK3C1mGb8JqwbfhU2C58OkwInwnbh8/+NP7AoszxJ381nhj2CnuHL4cvh97fJ+dF50cXRD+MLowuiqZGP4oujn4cTYsuiS6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mbop6XysbOHTCSadc4GJcNhfrsrsc7hqX013rcrnrXMRd7+LcDS63y+Pyunwuvyvg4l1BV8hpZ5x15EJX2BVxUXejK+pucsVccVfClXTOlXKlXXPXwrVwLd0TrpVr7dq4J92T7in3lHvaPe2ece3ds66D+6vr6J5zndzz7nn3guviurpu7kXX3Y3Pdek5meh6u96uj+vj+rl+boAb4Aa6gW6QG+SSXJIb4oa4oW6oG+aGueFuuBvpRrpRbpQb7Ua7sW6sS3bJboKb4Ca6iW6Sm+SmuCkuxaW46W66m+FmuCozL21ljpvj5rl5boFb4Ba6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddmtTtc/vdfnfAHXAH3d9cuvvKHXJfu8PuG3fEfeuOuu/cMXfcnXAn3Sn3vTvtzriz7pw7735wF9yP7qLzLjkyPjIh8k5kYuTdyKTI5MiUyNRISmRaZHrkvciMyMzIrMj7kdmRDyJzInMj8yLzIwsiH0YWRhZFUiMfRRZHPo6kRZZElkaWRZZHVkS8L7g19IV9ER/1N/qi/iZfzBf3JXxJ73wpX9rf7MtcyjvN+9t8eX+7r+Ar+kr+Md/EN/XNfHPfwj/uW/onfCvf2rfxT/q2/infzj/tE/wzvr1/1nfwf/Ud/XO+k3/ed/Yv+C6+q+/mX/Td/Uu+h+/pE30v39u/7Pv4vr6f7+8H+Ff8QP+qH+Rf80l+sB/iX/dD/Rt+mH/TD/cj/MiYt/yozEtkGOeT/Xg/wb/jJ/p3/SQ/2U/xU32Kn+an+/f8DD/Tz/Lv+9n+Az/Hz/Xz/Hy/wH/oF/pFPtV/5Bf7j32aX5J509iv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/D7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AMXM7+B9pU/5L/2h/03/oj/1h/13/lj/rg/4U/6U/57f9qf8Wf9OX/e/+Av+B/9Rf7OGmOMMcbYP2X8lab45cil2/m9fiNG/Gzl3gBw7bYC6T8fzzijXJ/3UruviI/N+PlMz84PZy7VqycmJl5eN01CUGQuQOY7QRl++ujB5X7Gek9BArSGMr+Zf1/R9Tz9g/mjtwHk+FlMRkKZ/SXQ5vL8XwBg4m/M//iTIxeWD8/G/T/mnwtQrMiVmOxwpb8E2vx0f6U1lP2d/PO1/Af5Z/8yGaDVz2JywpX+lfxLwxPwLCT8Yk3GGGOMMcYYY+ySvqJSx8zrz8xPfP7W9Xm8uhKTDa70r1x//vb1OWOMMcYYY4wxxq6+57p2e/rxhITWHf/1RtV/K+qfbjSG/9bM3PjNhvcAmb9RAPAfTgiQ0ZB/5l5s+VO2lXT5qfP3Q8vP+QD+Z5Tyj2hc5QMTY4wxxhhj7A935aT/l79XVyshxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsC/oz/p3Y1d5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Gr7PwEAAP//kFH3Jw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0x11)

6m33.194942631s ago: executing program 0 (id=492):
r0 = open(0x0, 0x108843, 0x98)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$setlease(r0, 0x400, 0x1)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x180c00, 0x0, 0x3, 0x0, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
lseek(r1, 0x6, 0x3)

6m32.336367251s ago: executing program 0 (id=494):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x3, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x20f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x336}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

6m31.017449722s ago: executing program 33 (id=494):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r5, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x3, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x20f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x336}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

5m43.003227963s ago: executing program 7 (id=624):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="002ea6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

5m40.261030212s ago: executing program 7 (id=628):
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)

5m39.100820971s ago: executing program 7 (id=631):
syz_emit_ethernet(0x7c, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x46, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa]}, {0x8, 0x88be, 0x4305000f}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

5m33.048396507s ago: executing program 7 (id=650):
mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000100)='raw\n', 0x4)

5m30.278948455s ago: executing program 7 (id=658):
setuid(0xee01)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xe35, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r2})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1)

5m28.200577604s ago: executing program 7 (id=664):
socket$inet_sctp(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
write(r0, &(0x7f0000000138)='\t', 0x1)
ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e0100003801")

5m25.820370409s ago: executing program 34 (id=664):
socket$inet_sctp(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
write(r0, &(0x7f0000000138)='\t', 0x1)
ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e0100003801")

3m20.388603228s ago: executing program 6 (id=999):
semtimedop(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file2\x00', 0x8002, &(0x7f0000000040)=ANY=[], 0x1, 0x1f3, &(0x7f0000000700)="$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")
lstat(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000440))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
fchown(r0, 0x0, 0x0)

3m19.954656048s ago: executing program 6 (id=1002):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="5299"], 0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

3m15.111791947s ago: executing program 6 (id=1020):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x7)
close_range(r1, 0xffffffffffffffff, 0x2)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x95, @string={0x95, 0x3, "e52c1d126d3c21ad10c5af07d9559c8141031edc336231452383e5fb379baa4c127d5a9846a1ac08b488a881ea8c3c0fcb91cc81a7ac761191ea05aaa38ce779191cc177ad8127944c833e65f49cce19db4557f3b20c500d7d8d0ab5aa8a127db1761c53da582a4d53cc81fa54261983aac4f8904444642e3aeac8ca2a3211efa3f8d51c8703df51f67509bd65907658009779"}}, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4000000)

3m12.399895634s ago: executing program 6 (id=1036):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
write(r0, &(0x7f0000000400)='C', 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)

3m11.085118036s ago: executing program 6 (id=1040):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x1000)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0)

3m10.393226015s ago: executing program 6 (id=1044):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)
shutdown(r1, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

2m54.864083968s ago: executing program 35 (id=1044):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)
shutdown(r1, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

1m29.153103143s ago: executing program 3 (id=1279):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x3, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x20f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x336}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m23.347375917s ago: executing program 2 (id=1291):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$9p(r4, &(0x7f0000001480)='-', 0x1)
splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
writev(r1, &(0x7f0000002900)=[{&(0x7f00000003c0)="a4f4", 0x2}, {&(0x7f00000018c0)="83e2359b7b3d56d2c9d71a527640744dfbee97974caad2d7edb0a4c46207397e14026ef4c43482954138fac6149dc715a320157f0712348239e390714aacbe896430fa26c329e111d1bfa7494fbf9b91eafb549984bab0194bc34b00dae679699844e5e642fc96c9e23f847b9b9a98308b4615360669404fcdfadc7589cc588c19503283c078b259e145d821c15a73b78dc402d9c50b43680b0072d8cb5f348c88902efdf7695d1f983040f35509753c0f64efcf0ccaa6b8e8b40fe13c7a14f75f229548b0ac448d223dac2b7d29fc7e176a8aa4900b9071ccbcf33c098ea6996a2f2c0e5d10bf8b15c287d10192f1e8ace6018b9c4e2daf0b16e2d29a1476339228677176a943f4feff9d4b1a8f4729b74ed4124f55cd883e39991fdc4ca9b24e7c0f9e9fa4dad86d133a19cad1454576f08faa6bc218e5b503ed5525e01bf9084d4e63612b076b3fafb70cc7ad358929a8944699330a08719575ffe4deff74b89b766c6c0f6c787f00749ed8fa052a1b449ba0a24c6c008254886b8be15c6893b297b5d22123ef308b47fd4632c7a62db3945c33a7379395e09db354ce77ce934cc886ac3db3148a42698554443f4e208261e52e402262b606c4b1e7e02fc3adff73922c5bf4c00246c209d969916a54a2f4a391043bc17b97722a252e24ee0ea0ed14a85d7fd4cc6432b8ee259c0d199be8da810d9f0822df9dbd045b05126350558e51096b732c7ec37d6903d03a3fa08fa71b57f5943683c3d60799d11ae0d5c7c81badc04bef65e5e42165a8b8ee5c508abfaaabdbb942dce31fac927cdfeed6a7c84933b0ba4c6a427b9c5caffb3e2f8451ffd12f37d9d2fd929625b86c5e430f83f006d3e08be8eb3f592bfb635032c3173ee7592824c5d7a511781a2c8a3960d524e1ad387d1b9d0852f70089a9319ec706a45cd2c0fc92aa05bb2bd728da578614b908533c29ed73ef6061c9e8e64d405c57ffd7d643436ccdaed8930568a4e2c50905a23a81604c7f11ba0ac3357afb6daac1badfbc4bd531f6aabb8626b51c445d1c0754b8338499e6b2b2117ab220ecc68bd53f3dfe1822b1259d4898df44de2c373863d2f3c67a98157652206158f7c254273c5ffff77dfb305cd5e9405360e518d1e2ae41000318e8846a7a58d3ab1f8d08e2a1ee72c8fe12e71b6aad9a7e36c09e4014dd7511953f62e07a73f6f6f83ec69c1f0456f1d0efd862b0a62d94f3d02ed425ec8ddabfdc06417193655079440d79aac538e90b797773eed267f217546c633e8fa8eb57ef0abb34a522ed0a97b126d3407e244bff4dd70c93cacf71e30b8accc43fe08fe4d36c6e738b911c2a9ec83c0ecb736419fd4055525cacd5d7ff4c741b3d72f7ca1c2ea60af14ec58c592ba50d41a8e8a56da179079b1e5cda4c02dd037d9dd8235e4fe3595c54d7f2fca5080d02fb687aff7b9726f0d40150cd3ec592425870d2a7ff2ec6206641e23efd14bad4f63d4514eae44cbd4cb7c49be945396888e74fd250797a448f2160af430dd46f24f12689727f22b55380ecf23a9b90130fd518adcff6ebbb3987589f3cfd19397b23f88fb76ecb7c626925bc8a198808272c10906709ccfd23282953f2ab2c865ef4a0b2ce098c41269c68aaf25ecc2ae1a1fad5c8fdad7c13ced09748475d3b3a6737dde163fdef559dc4e41b694fdddbd3473e7d5b5d929cfea9bddd885e5a6499fb42177cf2649165fcb586b47c67f76ec8692f046c914305fefbc5231a2db68c2454568e7b2fd3fcfe0a75c9ae6039a9714e9f40410e407a2f9b4994880838c8b04b38a66a6d155c2a2f26927bfd635c3162e5c8d88347d3d9261082315ff13004d810a3108b296be31dbf5d603ae6b147084a64dfba680e72a458351b6b5e33a2d6f90596bea1ab29b46877916d56d7a43703249f0f7bde552c3038b4b2c534736046ae3acae771c0bc722fc493d1909a4baf19c7c33eb690621c8a1106035888e579a85d2ce23bfa0c0233ab2f9e47790b2d26dd3860b4a44b4ce1d09428f488154076982cb3d36c10ac26bc6fd179ca17575459f3e7946460041fc041adcaaca9ef2389f1856c2d7de2ca15391a41a03cb3aae143ddd67276604bec667371e63b57016c5fa89872623954cb0584a596df89fbb069396aae25ddb647d2ab38f7485a330a107f2486ba670dd468971d9c1dbaac32fb8a3ffbf26c345def617c5972b7382584591fd3259b2cbfa356bb4d327e1b945f50b6c50ec2cd9f09228b1ee9815200fe16425a75815bb2b8448291f2ba5262ea9694a8cebc75798cd5d0d61fcf2a157310ccac94f1c27b0c2397dc728f0ccea00bcaafbdd02d04bad117a5852ffcd7137b035279a755f39aed532bd95ff4eced4e43eb3e19d6a3d021c4d0eb8a50dc30b94da7dee7dcf5df6a41a2580b2c31d1b40c73a90dc5603892c909818623d1bc5c0d51ef7a8c28e86dbd5a13b3bb21ac1aafc01f290f50742ebaf46e4640ec08df468065d42c76cd076d46ae38057e7f2d7830bba99790066dbb82784387ea0607fe4fc98e2c9323a6f27774a4b8c5a60f28e16442c6683801935fb499ac10c46087f582a6e89b555d29e5897624ca688a571a9849b65976307a10a4c1fa4a675c4fc03ad8712dd8b294d9be29c260407946dea30a0a63eb81f4ceca9824c07847c0c4ce613872dce90733bce8a7ae5d47eaf2bd1623226d3d2770ec169f97f80cefe86f1b3067ea6b191fefe90fb63f22eda8aaaec3c151cd902924dff6b38e9877f753b5aa44faa7c5fcd4102a5f580f0e79d7179c8ebb14dda1e80745f6194374c8e6d8d15931c92d15b99b4de61073ed6f6d798c922b40f5a3d4bb11e704e815bbc253d43feebba7c6219523784dbc8392cd46a5c19fc190838724d03132529a89dde26607618037d3dacd9d7ad29b6b5e53e94e6d41ed52", 0x81f}], 0x2)
write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411)

1m23.128002859s ago: executing program 2 (id=1293):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
prlimit64(r1, 0xa, 0x0, 0x0)
sysinfo(0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r3, &(0x7f0000000ec0)=""/4114, 0x1012)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)

1m21.188048303s ago: executing program 3 (id=1295):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
io_cancel(0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000)

1m20.098830173s ago: executing program 2 (id=1298):
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$eJzs3W9v09YewPGfS6vm5koI3XuFUG+Bs8KkInXFSSAo4pHnnKQeiR3ZDmqfDFW0RRUBJNgk6BPUB2P/tdewp3sR017F3gXaO1gnHzuQtvnT9V8q9v1EYMc+Pud3HMu/uo2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOVWbbtgScPz28tqMLcaBs0h67v13dg1GdKuiJX8k1xOLqWLLv3v/eqLyX9zMpu+m5VcMsnJ1r8vXrj738mJ7vZDAjoVL15tPV7tdNafjzuQManrexIFXtOpa+VFgaqUy/bNpVqkal5DRytRrJvKDbUTB6Gad2+oQqVSUnpxJWj79arT0N2Fdz4p2nZZfZVPP2//5meLkbvkNRqeXzdlktVJmTvJgXjPi1WsnaZSG5ud9dKg4LazwyMpVBjVk6RQcVShol0sFgrFYqF8u3L7jm1P7ltg7yH7Soz/oMV4HefpGziSiSz/S0M88aUty6L6vlypSiiBNAesz3Tz/8c39dB2e/N/N8tfer96Rkz+v5K+uzIo/w+I5W+/ppPqs/k/d3Z2DrDN+f+nsb2SLXksq9KRjqzL8+OK6BhfXSdRd120+OJJJIF40hTHLFHZEiUVKUtZbHkgS1KTSJTUxJOGaIlkRSKJRZsjypVQtDjyvQQSipJ5ceWGKClIRSpSEiVaFmVFAmmLL3WpimNq2ZBNs99Lw/rfLVQ4SKHikELkfxzdcZ26gSPb6eZ/AAAAAADwwbLMb9+T6/8puWzmctLQ9rjDAgAAAAAAx8j85X82mUwlc5fFqnlc/wMAAAAA8GGxzD12lojk5Wo6170Til8CAAAAAADwgTB//7+STMzYa1fFOtD1/9SpBQgAAAAAAI7sm0Fj7P9mllqWRK1p69c/JAynrO3W8nXriZOscJ6cS7c7t7fGuDZjnc8qMZPyZPbO1bNWNvrlu0Ew32aTjZ44rH5j/Vp7Avi8W0OfAH6S/gHID/JR2q1u2bXumrSVf2WLG3cL4jjnJ2K9HH/5dPOlmO5/6zcnswIPn3XWTCzbybvtJ1mF+8ZRHLwz5Asz3oK556Lv6MZT5kaMrN28JRubnXW79wOYSDefGNqmXEgXpm2+kbn07Vw20n5+d/9zSZuFxUG9r5sopkXE9Nw6ZM/fyLW0zLX5a+mkTxTFvlFMJTGn+6LYWr6+k+7/CTnQvjhEFKWB+yKLotR7FBwiCgAYl43BWei7nXTN3sR/iLPcxqgn+ezN7of58ULeyHxaZn7GnFgnZ/qc0e1RZ3T7iHn9l33PQBqUY5N2f3zXbsG0+3MStwxsN2oULclJ7uXv75etPlp/tP60WCyV7Vu2fbsoU6Yb2YTcAwDoY/QzdkaWsG6Zq+pk5Vpacs9V9X/efaVgUR7KM+nImiyYuw3MNw761prv+RrCwoir1nzPE14WRlzV5Xse9HLwsqXT+TAAADglcyPy8EHy/8KI6+7duXz41XFvLgcAACdDh2+tfPy1FYZe60GhUik48ZJWYeDeU6FXrWvl+bEO3SXHr2vVCoM4cINGMnPfq+pIRe1WKwhjVQtC1Qoib9k8+V1lj36PdNPxY8+NWg3tRFq5gR87bqyqXuSqVvvThhct6dBsHLW069U814m9wFdR0A5dvahUpHVPQa+q/direcmsr1qh13TCFXU/aLSbWlV15IZeKw7SCrtteX4tCJum2sVx72wAAM6IF6+2Hq92OuvPT3Bm3H0EAAC7kaUBAAAAAAAAAAAAAAAAAAAAADj7hty359SO90bAaTmFew2PKdSzEcY/dea1iGRLdl5L72HTHXT6xFo/N+6+n5mZMZ+YAJy4vwIAAP//NVpGnw==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x300, 0x0, 0x2, 0x1, 0x0, 0x6}, 0x20)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))

1m16.988156859s ago: executing program 3 (id=1303):
syz_emit_ethernet(0x7c, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x46, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa]}, {0x8, 0x88be, 0x4305000f}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

1m14.754832486s ago: executing program 3 (id=1305):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fanotify_init(0x0, 0x400)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x541b, &(0x7f0000000000)=0x2)

1m13.436929268s ago: executing program 9 (id=1307):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x12000, 0x6)
r3 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)

1m12.047424207s ago: executing program 9 (id=1309):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000009000001"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x3, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x20f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x336}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m10.54396634s ago: executing program 9 (id=1312):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff79a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003e440000000000007a0a00fe00ffffffc30300fff1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1m8.52921962s ago: executing program 2 (id=1314):
syz_emit_ethernet(0x7c, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x46, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa]}, {0x8, 0x88be, 0x4305000f}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

1m8.349665582s ago: executing program 9 (id=1315):
pipe2(&(0x7f0000000400)={<r0=>0x0, <r1=>0x0}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24)
sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000"], 0x18}, 0x0)
recvfrom$inet(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000500)="000000020104", 0x6)
read(r0, &(0x7f0000000310), 0x6)
sendto$inet(r2, &(0x7f0000000300), 0x22, 0x0, &(0x7f00000000c0)={0x2, 0x1234, @loopback}, 0x10)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)
recvfrom$rxrpc(r3, 0x0, 0x0, 0x40, 0x0, 0x0)

1m6.136848267s ago: executing program 2 (id=1318):
syz_emit_ethernet(0x7c, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x46, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa]}, {0x8, 0x88be, 0x4305000f}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

1m3.103537871s ago: executing program 9 (id=1321):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r1, 0x0, 0x20000100)
syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1m0.383548521s ago: executing program 3 (id=1325):
syz_emit_ethernet(0x7c, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x46, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa]}, {0x8, 0x88be, 0x4305000f}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

57.362738027s ago: executing program 3 (id=1327):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$l2tp(0x2, 0x2, 0x73)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)

55.758644948s ago: executing program 9 (id=1330):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xaf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
brk(0x689d80000000)
read(0xffffffffffffffff, 0x0, 0x0)
tkill(0x0, 0x7)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0)

52.869419008s ago: executing program 2 (id=1335):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1)

39.999129067s ago: executing program 36 (id=1327):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$l2tp(0x2, 0x2, 0x73)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)

39.846834713s ago: executing program 37 (id=1330):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xaf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
brk(0x689d80000000)
read(0xffffffffffffffff, 0x0, 0x0)
tkill(0x0, 0x7)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0)

37.022935764s ago: executing program 38 (id=1335):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1)

18.248969231s ago: executing program 4 (id=1370):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, '\x00', "1d197b2d148a416e00", "82028d89", "c510340febfd300a"}, 0x28)
write(r0, &(0x7f0000000280)='7', 0x1)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c)

17.733429532s ago: executing program 5 (id=1371):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r7, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040)

16.866573146s ago: executing program 5 (id=1372):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)

14.653114601s ago: executing program 5 (id=1373):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
fcntl$notify(r1, 0x402, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8)

11.489183082s ago: executing program 8 (id=1376):
timerfd_create(0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4000805)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r0, &(0x7f0000000080)='./mnt\x00', r0, &(0x7f0000000100)='./mnt\x00')
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000000c0)="fc", 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = userfaultfd(0x801)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
socket$inet_sctp(0x2, 0x1, 0x84)

9.794340567s ago: executing program 4 (id=1377):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x80000)
r4 = dup(r2)
sendto(r3, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800000}, 0x8)
close(r3)
recvfrom(r4, &(0x7f0000000480), 0x2e, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x22, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9.209917321s ago: executing program 4 (id=1378):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0xffffffffffffffdf, 0x1000000000000, 0x0})
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0)
write(r5, 0x0, 0x0)

8.02855782s ago: executing program 4 (id=1379):
socket(0xa, 0x3, 0x87)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x80000)
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
socket(0x1e, 0x4, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x37, 0x7ffffffa}]})
socket$kcm(0x11, 0x3, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
eventfd(0xfffffff9)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0xfd}], 0x1}}], 0x1, 0x0)

6.807039863s ago: executing program 5 (id=1380):
syz_emit_ethernet(0x7c, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x46, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa]}, {0x8, 0x88be, 0x4305000f}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, 0x0, 0x0, 0xc9100120, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

4.779112198s ago: executing program 5 (id=1381):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabb0600000000000000445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "fe1b5c4bf346207d87478c27b86bb51289055bc124bb60432572800f18aa4fd90aabed9d0fe61c88c11301a15ee3f0f5cdf737eba09fed73da1807ecb5b00d17", 0x24}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x37, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x64, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x66, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="10", 0x1, r0)

4.468302034s ago: executing program 8 (id=1382):
syz_open_dev$vim2m(0x0, 0x10002, 0x2)
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x408080)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0x100, 0x7, 0x0, 0x0, 0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x4010, 0xffffffffffffffff, 0x6a855000)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @loopback, 0xb, 0x1b}})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

4.203256303s ago: executing program 4 (id=1383):
timerfd_create(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
openat(0xffffffffffffffff, &(0x7f0000000180)='./proc\x00', 0x200400, 0x2)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f00000003c0)='.\x00', 0x5db)
inotify_add_watch(r3, &(0x7f0000000300)='./file1\x00', 0xa0000006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000180)='0fc5:1227:bak', 0xd)

2.618034483s ago: executing program 4 (id=1384):
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0)

2.496824631s ago: executing program 8 (id=1385):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x0)
socket(0x1a, 0xa, 0x7ffbffff)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2141, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe2(&(0x7f0000000080), 0x80000)
fanotify_init(0x0, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

1.694471985s ago: executing program 8 (id=1386):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe, 0x7, 0x7fffffff, 0x80000000}}]}}}]}, 0x60}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008f}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)
syz_open_dev$sndmidi(0x0, 0x4, 0x141102)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
r4 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)

1.229820902s ago: executing program 8 (id=1387):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x148}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)

71.475897ms ago: executing program 8 (id=1388):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x4, 0x7, 0x20, 0x1, 0x0, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, 0x0, 0x0)
close(r2)
getpeername$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0)

0s ago: executing program 5 (id=1389):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000200)='y\x185\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\x9d\xb4\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\xa7\xd7\xdbG\x98l\xad6', 0x2)
ftruncate(r1, 0x2000000)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clock_gettime(0x0, 0x0)
setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3})
mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

kernel console output (not intermixed with test programs):

398956][ T8846]  netlink_deliver_tap+0xaed/0xcc0
[  418.399021][ T8846]  netlink_unicast+0x6a5/0x850
[  418.399083][ T8846]  ? __pfx_netlink_unicast+0x10/0x10
[  418.399151][ T8846]  ctrl_getfamily+0x417/0x550
[  418.399216][ T8846]  ? __pfx_ctrl_getfamily+0x10/0x10
[  418.399280][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.399324][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.399365][ T8846]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  418.399440][ T8846]  genl_family_rcv_msg_doit+0x214/0x300
[  418.399505][ T8846]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  418.399572][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.399624][ T8846]  ? genl_get_cmd+0x3e7/0x760
[  418.399703][ T8846]  ? __dev_queue_xmit+0xa33/0x4970
[  418.399755][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.399809][ T8846]  ? __radix_tree_lookup+0x217/0x2b0
[  418.399882][ T8846]  genl_rcv_msg+0x560/0x800
[  418.399949][ T8846]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.400009][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.400055][ T8846]  ? __lock_acquire+0x5c0/0x1f40
[  418.400094][ T8846]  ? __pfx_ctrl_getfamily+0x10/0x10
[  418.400170][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.400228][ T8846]  netlink_rcv_skb+0x159/0x420
[  418.400286][ T8846]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.400370][ T8846]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  418.400448][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.400496][ T8846]  ? netlink_deliver_tap+0x1ae/0xcc0
[  418.400555][ T8846]  genl_rcv+0x28/0x40
[  418.400612][ T8846]  netlink_unicast+0x585/0x850
[  418.400684][ T8846]  ? __pfx_netlink_unicast+0x10/0x10
[  418.400757][ T8846]  netlink_sendmsg+0x8b0/0xda0
[  418.400829][ T8846]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.400893][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.400943][ T8846]  ? apparmor_socket_sendmsg+0x165/0x280
[  418.401012][ T8846]  __sys_sendto+0x48b/0x4e0
[  418.401067][ T8846]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.401130][ T8846]  ? __pfx___sys_sendto+0x10/0x10
[  418.401202][ T8846]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  418.401268][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.401352][ T8846]  __x64_sys_sendto+0xe0/0x1c0
[  418.401410][ T8846]  ? do_syscall_64+0xae/0x790
[  418.401453][ T8846]  ? srso_alias_return_thunk+0x5/0xfbef5
[  418.401502][ T8846]  ? lockdep_hardirqs_on+0x7d/0x110
[  418.401542][ T8846]  do_syscall_64+0x123/0x790
[  418.401585][ T8846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.401624][ T8846] RIP: 0033:0x7f9bf2b5e98e
[  418.401656][ T8846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  418.401695][ T8846] RSP: 002b:00007f9bf3afde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  418.401735][ T8846] RAX: ffffffffffffffda RBX: 00007f9bf3aff6c0 RCX: 00007f9bf2b5e98e
[  418.401764][ T8846] RDX: 0000000000000020 RSI: 00007f9bf3afe000 RDI: 0000000000000005
[  418.401792][ T8846] RBP: 0000000000000000 R08: 00007f9bf3afdf04 R09: 000000000000000c
[  418.401828][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  418.401851][ T8846] R13: 00007f9bf3afdf58 R14: 00007f9bf3afe000 R15: 0000000000000000
[  418.401916][ T8846]  </TASK>
[  418.547817][ T8841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.556505][ T8842] syzkaller0: MTU too low for tipc bearer
[  418.556536][ T8842] tipc: Disabling bearer <eth:syzkaller0>
[  419.263696][ T8856] syzkaller0: entered promiscuous mode
[  419.263772][ T8856] syzkaller0: entered allmulticast mode
[  419.293083][ T8856] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  420.730869][ T8882] r8a66597_udc pcspkr: error -EINVAL: invalid resource (null)
[  420.730921][ T8882] r8a66597_udc pcspkr: probe with driver r8a66597_udc failed with error -22
[  420.780050][ T8886] FAULT_INJECTION: forcing a failure.
[  420.780050][ T8886] name fail_futex, interval 1, probability 0, space 0, times 1
[  420.780112][ T8886] CPU: 1 UID: 0 PID: 8886 Comm: syz.3.757 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.780170][ T8886] Tainted: [L]=SOFTLOCKUP
[  420.780184][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  420.780209][ T8886] Call Trace:
[  420.780222][ T8886]  <TASK>
[  420.780236][ T8886]  dump_stack_lvl+0x100/0x190
[  420.780299][ T8886]  should_fail_ex.cold+0x5/0xa
[  420.780371][ T8886]  get_futex_key+0x1d0/0x14f0
[  420.780426][ T8886]  ? __pfx_get_futex_key+0x10/0x10
[  420.780475][ T8886]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.780524][ T8886]  ? wakeup_preempt_fair+0x5c3/0xdc0
[  420.780577][ T8886]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.780626][ T8886]  ? tracing_record_taskinfo_sched_switch+0xac/0x560
[  420.780688][ T8886]  futex_wait_setup+0x91/0x540
[  420.780766][ T8886]  __futex_wait+0x19f/0x300
[  420.780839][ T8886]  ? __pfx___futex_wait+0x10/0x10
[  420.780899][ T8886]  ? __pfx_try_to_wake_up+0x10/0x10
[  420.780943][ T8886]  ? futex_hash+0x311/0x400
[  420.780998][ T8886]  ? __pfx_futex_wake_mark+0x10/0x10
[  420.781067][ T8886]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.781114][ T8886]  ? find_held_lock+0x2b/0x80
[  420.781167][ T8886]  ? futex_wake+0x4ea/0x5e0
[  420.781227][ T8886]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.781276][ T8886]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.781331][ T8886]  futex_wait+0xe6/0x370
[  420.781394][ T8886]  ? __pfx_futex_wait+0x10/0x10
[  420.781481][ T8886]  do_futex+0x265/0x440
[  420.781535][ T8886]  ? __pfx_do_futex+0x10/0x10
[  420.781586][ T8886]  ? __fget_files+0x34/0x3d0
[  420.781637][ T8886]  __x64_sys_futex+0x34f/0x4d0
[  420.781697][ T8886]  ? __pfx___x64_sys_futex+0x10/0x10
[  420.781753][ T8886]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.781812][ T8886]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.781869][ T8886]  do_syscall_64+0x123/0x790
[  420.781922][ T8886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.781962][ T8886] RIP: 0033:0x7f17d139e159
[  420.781994][ T8886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.782033][ T8886] RSP: 002b:00007f17d219b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  420.782071][ T8886] RAX: ffffffffffffffda RBX: 00007f17d1625fa8 RCX: 00007f17d139e159
[  420.782099][ T8886] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f17d1625fa8
[  420.782124][ T8886] RBP: 00007f17d1625fa0 R08: 0000000000000000 R09: 0000000000000000
[  420.782149][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.782174][ T8886] R13: 00007f17d1626038 R14: 00007fffe0a09c50 R15: 00007fffe0a09d38
[  420.782225][ T8886]  </TASK>
[  421.309840][ T8525] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.904356][ T8945] fuse: fd is not a fuse device
[  425.317048][ T8525] veth0_vlan: entered promiscuous mode
[  426.457568][ T8525] veth1_vlan: entered promiscuous mode
[  426.758039][ T8525] veth0_macvtap: entered promiscuous mode
[  426.792283][ T8525] veth1_macvtap: entered promiscuous mode
[  426.993573][ T8525] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.169040][ T8525] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.365667][ T8982] loop5: detected capacity change from 0 to 40427
[  427.420704][ T8982] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  427.420748][ T8982] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  427.560481][ T8982] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  427.581488][ T8982] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  427.581542][ T8982] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  427.665523][ T3010] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.665585][ T3010] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.665634][ T3010] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.665688][ T3010] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.242566][ T8982] syz.5.783: attempt to access beyond end of device
[  428.242566][ T8982] loop5: rw=2049, sector=45096, nr_sectors = 8144 limit=40427
[  428.251083][ T8982] syz.5.783: attempt to access beyond end of device
[  428.251083][ T8982] loop5: rw=2049, sector=53240, nr_sectors = 8 limit=40427
[  428.251395][ T8982] syz.5.783: attempt to access beyond end of device
[  428.251395][ T8982] loop5: rw=2049, sector=45056, nr_sectors = 8 limit=40427
[  428.283344][ T8982] syz.5.783: attempt to access beyond end of device
[  428.283344][ T8982] loop5: rw=2049, sector=57344, nr_sectors = 4960 limit=40427
[  428.302485][ T8982] syz.5.783: attempt to access beyond end of device
[  428.302485][ T8982] loop5: rw=2049, sector=62304, nr_sectors = 2624 limit=40427
[  428.329831][ T8982] syz.5.783: attempt to access beyond end of device
[  428.329831][ T8982] loop5: rw=2049, sector=64928, nr_sectors = 4096 limit=40427
[  428.364491][ T8982] syz.5.783: attempt to access beyond end of device
[  428.364491][ T8982] loop5: rw=2049, sector=69024, nr_sectors = 4704 limit=40427
[  428.369464][ T8982] syz.5.783: attempt to access beyond end of device
[  428.369464][ T8982] loop5: rw=2049, sector=73728, nr_sectors = 8 limit=40427
[  428.369681][ T8982] syz.5.783: attempt to access beyond end of device
[  428.369681][ T8982] loop5: rw=2049, sector=73736, nr_sectors = 8 limit=40427
[  428.369886][ T8982] syz.5.783: attempt to access beyond end of device
[  428.369886][ T8982] loop5: rw=2049, sector=73744, nr_sectors = 8 limit=40427
[  430.403717][ T9004] loop3: detected capacity change from 0 to 128
[  430.431010][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.431047][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.538208][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  430.538269][ T5615] Tainted: [L]=SOFTLOCKUP
[  430.538284][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  430.538307][ T5615] Call Trace:
[  430.538319][ T5615]  <TASK>
[  430.538334][ T5615]  dump_stack_lvl+0x100/0x190
[  430.538396][ T5615]  f2fs_stop_checkpoint+0x5e6/0xb30
[  430.538444][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.538490][ T5615]  ? errseq_set+0xe3/0x150
[  430.538540][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.538593][ T5615]  f2fs_write_end_bio+0xef9/0x12d0
[  430.538647][ T5615]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  430.538695][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.538746][ T5615]  ? find_held_lock+0x2b/0x80
[  430.538797][ T5615]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  430.538868][ T5615]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  430.538926][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.538987][ T5615]  f2fs_write_end_io+0xc8/0x240
[  430.539032][ T5615]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  430.539080][ T5615]  bio_endio+0x7ba/0x9c0
[  430.539144][ T5615]  submit_bio_noacct+0x22a/0x2130
[  430.539206][ T5615]  f2fs_submit_write_bio+0x133/0x330
[  430.539254][ T5615]  __submit_merged_bio+0x330/0x7b0
[  430.539302][ T5615]  ? rcu_is_watching+0x13/0xc0
[  430.539358][ T5615]  __submit_merged_write_cond+0x3fe/0x510
[  430.539417][ T5615]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  430.539477][ T5615]  ? __pfx___might_resched+0x10/0x10
[  430.539537][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.539583][ T5615]  ? folio_clear_dirty_for_io+0x178/0x960
[  430.539643][ T5615]  f2fs_sync_node_pages+0x13c6/0x1690
[  430.539709][ T5615]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  430.539753][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.539798][ T5615]  ? __lock_acquire+0xe8b/0x1f40
[  430.539887][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.539934][ T5615]  ? down_write+0x146/0x1f0
[  430.539981][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.540030][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.540075][ T5615]  ? up_write+0x2dc/0x5b0
[  430.540117][ T5615]  block_operations+0x938/0xfc0
[  430.540176][ T5615]  ? __pfx_block_operations+0x10/0x10
[  430.540272][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.540313][ T5615]  ? ktime_get+0x22c/0x320
[  430.540348][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.540408][ T5615]  ? rcu_is_watching+0x13/0xc0
[  430.540456][ T5615]  f2fs_write_checkpoint+0x58b/0x53e0
[  430.540510][ T5615]  ? _raw_spin_unlock_irq+0x23/0x50
[  430.540566][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.540603][ T5615]  ? _raw_spin_unlock_irq+0x2e/0x50
[  430.540651][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.540696][ T5615]  ? __wait_for_common+0x1f3/0x4c0
[  430.540730][ T5615]  ? __pfx_schedule_timeout+0x10/0x10
[  430.540787][ T5615]  ? __pfx___wait_for_common+0x10/0x10
[  430.540822][ T5615]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  430.540877][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.540914][ T5615]  ? mark_held_locks+0x40/0x70
[  430.540952][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.540990][ T5615]  ? rcu_is_watching+0x13/0xc0
[  430.541029][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.541065][ T5615]  ? kthread_stop+0x280/0x630
[  430.541111][ T5615]  kill_f2fs_super+0x3f1/0x4a0
[  430.541162][ T5615]  ? __pfx_kill_f2fs_super+0x10/0x10
[  430.541228][ T5615]  ? lockdep_hardirqs_on+0x7d/0x110
[  430.541263][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.541304][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.541359][ T5615]  deactivate_locked_super+0xbd/0x140
[  430.541406][ T5615]  deactivate_super+0xea/0x110
[  430.541452][ T5615]  cleanup_mnt+0x21f/0x450
[  430.541486][ T5615]  task_work_run+0x150/0x240
[  430.541534][ T5615]  ? __pfx_task_work_run+0x10/0x10
[  430.541586][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.541634][ T5615]  exit_to_user_mode_loop+0x1d8/0x700
[  430.541672][ T5615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.541710][ T5615]  ? rcu_is_watching+0x13/0xc0
[  430.541755][ T5615]  do_syscall_64+0x661/0x790
[  430.541794][ T5615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.541834][ T5615] RIP: 0033:0x7f392b59f397
[  430.541861][ T5615] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  430.541891][ T5615] RSP: 002b:00007fff656ed9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  430.541923][ T5615] RAX: 0000000000000000 RBX: 00007f392b6344bb RCX: 00007f392b59f397
[  430.541944][ T5615] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff656edab0
[  430.541964][ T5615] RBP: 00007fff656edab0 R08: 00007fff656eeab0 R09: 00000000ffffffff
[  430.541985][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff656eeb40
[  430.542006][ T5615] R13: 00007f392b6344bb R14: 0000000000068dae R15: 00007fff656eeb80
[  430.542051][ T5615]  </TASK>
[  430.581618][ T9004] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  430.584668][ T9004] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  430.630514][ T9004] EXT4-fs (loop3): shut down requested (2)
[  430.630932][ T9004] fscrypt (loop3, inode 12): Error -5 getting encryption context
[  430.701131][ T5615] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  430.906346][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.906378][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.993590][ T5614] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  431.347646][ T1204] IPVS: starting estimator thread 0...
[  431.486341][ T9015] IPVS: using max 22 ests per chain, 52800 per kthread
[  437.474357][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10
[  437.997161][ T9065] tipc: Started in network mode
[  437.997193][ T9065] tipc: Node identity 4, cluster identity 4711
[  437.997215][ T9065] tipc: Node number set to 4
[  439.569059][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  443.018131][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11
[  443.179539][ T9102] loop5: detected capacity change from 0 to 1024
[  443.272770][ T9102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.381427][ T9102] EXT4-fs error (device loop5): ext4_read_inline_dir:1511: inode #12: block 7: comm syz.5.813: path /123/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=60 fake=0
[  443.763260][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.895450][ T9134] FAULT_INJECTION: forcing a failure.
[  445.895450][ T9134] name failslab, interval 1, probability 0, space 0, times 0
[  445.895500][ T9134] CPU: 1 UID: 0 PID: 9134 Comm: syz.3.819 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  445.895544][ T9134] Tainted: [L]=SOFTLOCKUP
[  445.895556][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  445.895574][ T9134] Call Trace:
[  445.895584][ T9134]  <TASK>
[  445.895597][ T9134]  dump_stack_lvl+0x100/0x190
[  445.895647][ T9134]  should_fail_ex.cold+0x5/0xa
[  445.895683][ T9134]  ? srso_alias_return_thunk+0x5/0xfbef5
[  445.895726][ T9134]  should_failslab+0xc2/0x120
[  445.895760][ T9134]  __kmalloc_cache_noprof+0x91/0x6d0
[  445.895800][ T9134]  ? srso_alias_return_thunk+0x5/0xfbef5
[  445.895838][ T9134]  ? swnode_register+0x51/0x750
[  445.895887][ T9134]  swnode_register+0x51/0x750
[  445.895933][ T9134]  fwnode_create_software_node+0x1c8/0x3f0
[  445.895984][ T9134]  device_create_managed_software_node+0x103/0x270
[  445.896037][ T9134]  iommufd_test+0x3007/0x6600
[  445.896086][ T9134]  ? srso_alias_return_thunk+0x5/0xfbef5
[  445.896124][ T9134]  ? __lock_acquire+0x5c0/0x1f40
[  445.896158][ T9134]  ? srso_alias_return_thunk+0x5/0xfbef5
[  445.896196][ T9134]  ? __lock_acquire+0x5c0/0x1f40
[  445.896228][ T9134]  ? __pfx_iommufd_test+0x10/0x10
[  445.896272][ T9134]  ? tomoyo_path_number_perm+0x188/0x580
[  445.896328][ T9134]  ? srso_alias_return_thunk+0x5/0xfbef5
[  445.896365][ T9134]  ? lock_acquire+0x1d1/0x380
[  445.896400][ T9134]  ? __might_fault+0xc5/0x140
[  445.896441][ T9134]  ? srso_alias_return_thunk+0x5/0xfbef5
[  445.896478][ T9134]  ? find_held_lock+0x2b/0x80
[  445.896521][ T9134]  ? __might_fault+0xc5/0x140
[  445.896580][ T9134]  iommufd_fops_ioctl+0x358/0x520
[  445.896636][ T9134]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  445.896687][ T9134]  ? __fget_files+0x34/0x3d0
[  445.896723][ T9134]  ? hook_file_ioctl_common+0x140/0x440
[  445.896797][ T9134]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  445.896852][ T9134]  __x64_sys_ioctl+0x18e/0x210
[  445.896906][ T9134]  do_syscall_64+0x123/0x790
[  445.896948][ T9134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.896983][ T9134] RIP: 0033:0x7f17d139e159
[  445.897009][ T9134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.897041][ T9134] RSP: 002b:00007f17d219b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  445.897075][ T9134] RAX: ffffffffffffffda RBX: 00007f17d1625fa0 RCX: 00007f17d139e159
[  445.897097][ T9134] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000004
[  445.897117][ T9134] RBP: 00007f17d143506b R08: 0000000000000000 R09: 0000000000000000
[  445.897137][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  445.897157][ T9134] R13: 00007f17d1626038 R14: 00007f17d1625fa0 R15: 00007fffe0a09d38
[  445.897199][ T9134]  </TASK>
[  445.935063][ T9134] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12
[  446.785118][ T9147] CIFS: Attempting to mount //127.0.0.1/share
[  446.908222][ T9152] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x6e
[  447.349898][ T9153] loop3: detected capacity change from 0 to 32768
[  447.381635][ T9153] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  447.381668][ T9153] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  447.415011][ T1176] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  447.453685][ T9153] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[  447.498946][ T9147] CIFS: VFS: cifs_mount failed w/return code = -112
[  447.575177][ T1176] usb 6-1: Using ep0 maxpacket: 16
[  447.579587][ T1176] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  447.585640][   T44] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  447.585667][   T44] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  447.590151][ T1176] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  447.632297][ T1176] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.632344][ T1176] usb 6-1: Product: syz
[  447.632372][ T1176] usb 6-1: Manufacturer: syz
[  447.632400][ T1176] usb 6-1: SerialNumber: syz
[  447.658720][ T1176] usb 6-1: config 0 descriptor??
[  447.719657][ T1176] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  447.719718][ T1176] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  447.911712][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12
[  450.375309][ T1176] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  451.146247][ T1176] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  451.146293][ T1176] em28xx 6-1:0.0: board has no eeprom
[  451.386011][ T1176] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  451.386055][ T1176] em28xx 6-1:0.0: dvb set to bulk mode.
[  451.387346][   T25] em28xx 6-1:0.0: Binding DVB extension
[  451.453590][ T1176] usb 6-1: USB disconnect, device number 11
[  451.461831][   T44] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 3876ms
[  451.476851][ T1176] em28xx 6-1:0.0: Disconnecting em28xx
[  451.713660][   T44] gfs2: fsid=syz:syz.0: jid=0: Done
[  451.715206][ T9153] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  451.743412][ T9153] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  452.355157][   T25] em28xx 6-1:0.0: Registering input extension
[  452.362389][ T1176] em28xx 6-1:0.0: Closing input extension
[  453.634194][ T1176] em28xx: Freeing device
[  456.085023][   T25] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  456.236303][   T25] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  456.237773][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[  456.237826][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.276254][   T25] usb 6-1: config 0 descriptor??
[  457.261749][ T9219] fuse: fd is not a fuse device
[  457.535009][ T1176] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  457.589272][   T25] usb 6-1: string descriptor 0 read error: -71
[  457.614062][   T25] usbhid 6-1:0.0: can't add hid device: -71
[  457.621466][   T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  457.644381][   T25] usb 6-1: USB disconnect, device number 12
[  457.690053][ T1176] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  457.710674][ T1176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  457.710725][ T1176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  457.710765][ T1176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 51, changing to 9
[  457.710817][ T1176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 33540, setting to 1024
[  457.713846][ T1176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.713888][ T1176] usb 7-1: Product: syz
[  457.713915][ T1176] usb 7-1: Manufacturer: syz
[  457.713943][ T1176] usb 7-1: SerialNumber: syz
[  459.711412][ T1176] usb 7-1: config 0 descriptor??
[  459.984079][ T1176] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  460.299604][   T25] usb 7-1: USB disconnect, device number 12
[  460.332670][ T9234] fuse: fd is not a fuse device
[  461.185671][ T9243] bond1: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms
[  461.185768][ T9243] bond1: entered allmulticast mode
[  461.187755][ T9245] bond1: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms
[  462.035121][ T9267] loop5: detected capacity change from 0 to 8
[  462.632827][ T9267] SQUASHFS error: lzo decompression failed, data probably corrupt
[  462.633095][ T9267] SQUASHFS error: Failed to read block 0x91: -5
[  462.723725][ T9267] SQUASHFS error: Unable to read metadata cache entry [8f]
[  462.723777][ T9267] SQUASHFS error: Unable to read inode 0x11f
[  463.957490][ T9280] fuse: fd is not a fuse device
[  465.162216][ T9309] FAULT_INJECTION: forcing a failure.
[  465.162216][ T9309] name failslab, interval 1, probability 0, space 0, times 0
[  465.162278][ T9309] CPU: 0 UID: 0 PID: 9309 Comm: syz.2.865 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.162338][ T9309] Tainted: [L]=SOFTLOCKUP
[  465.162353][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  465.162385][ T9309] Call Trace:
[  465.162399][ T9309]  <TASK>
[  465.162415][ T9309]  dump_stack_lvl+0x100/0x190
[  465.162479][ T9309]  should_fail_ex.cold+0x5/0xa
[  465.162525][ T9309]  ? rcu_is_watching+0x13/0xc0
[  465.162584][ T9309]  should_failslab+0xc2/0x120
[  465.162626][ T9309]  __kmalloc_noprof+0xfc/0x840
[  465.162687][ T9309]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.162738][ T9309]  ? vmci_handle_arr_create+0x6c/0x150
[  465.162798][ T9309]  vmci_handle_arr_create+0x6c/0x150
[  465.162848][ T9309]  vmci_ctx_create+0x26e/0x730
[  465.162919][ T9309]  vmci_host_unlocked_ioctl+0x2d7/0x2070
[  465.162979][ T9309]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[  465.163035][ T9309]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.163086][ T9309]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  465.163133][ T9309]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.163180][ T9309]  ? do_vfs_ioctl+0x226/0x13e0
[  465.163238][ T9309]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  465.163306][ T9309]  ? __fget_files+0x34/0x3d0
[  465.163344][ T9309]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.163399][ T9309]  ? find_held_lock+0x2b/0x80
[  465.163451][ T9309]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.163499][ T9309]  ? hook_file_ioctl_common+0x140/0x440
[  465.163576][ T9309]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.163624][ T9309]  ? __fget_files+0x21f/0x3d0
[  465.163670][ T9309]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[  465.163728][ T9309]  __x64_sys_ioctl+0x18e/0x210
[  465.163788][ T9309]  do_syscall_64+0x123/0x790
[  465.163836][ T9309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.163874][ T9309] RIP: 0033:0x7f9bf2b9e159
[  465.163898][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.163927][ T9309] RSP: 002b:00007f9bf3aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  465.163957][ T9309] RAX: ffffffffffffffda RBX: 00007f9bf2e25fa0 RCX: 00007f9bf2b9e159
[  465.163984][ T9309] RDX: 0000200000000100 RSI: 00000000000007a0 RDI: 0000000000000005
[  465.164010][ T9309] RBP: 00007f9bf2c3506b R08: 0000000000000000 R09: 0000000000000000
[  465.164034][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  465.164058][ T9309] R13: 00007f9bf2e26038 R14: 00007f9bf2e25fa0 R15: 00007ffc63c55878
[  465.164102][ T9309]  </TASK>
[  465.503369][ T9312] loop8: detected capacity change from 0 to 1024
[  465.521387][ T9312] EXT4-fs: Ignoring removed bh option
[  465.624342][ T9312] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  465.691371][ T9312] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  465.716724][ T9312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.862512][ T9286] loop5: detected capacity change from 0 to 32768
[  465.998646][ T9312] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  466.240240][ T9286] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  466.277305][ T9290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  466.345332][ T8525] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.360410][ T9290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.095553][   T30] audit: type=1800 audit(1790225621.547:47): pid=9286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.863" name="file1" dev="loop5" ino=17059 res=0 errno=0
[  467.434157][ T9290] bond1: left allmulticast mode
[  467.445918][   T39] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.446029][   T39] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.446092][   T39] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.456056][   T39] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.659885][ T9331] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  467.805789][ T9331] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  467.808770][ T9331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.842380][ T9331] usb 7-1: config 0 descriptor??
[  468.741461][ T5615] ocfs2: Unmounting device (7,5) on (node local)
[  469.564265][ T9385] FAULT_INJECTION: forcing a failure.
[  469.564265][ T9385] name failslab, interval 1, probability 0, space 0, times 0
[  469.564322][ T9385] CPU: 0 UID: 0 PID: 9385 Comm: syz.2.882 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  469.564375][ T9385] Tainted: [L]=SOFTLOCKUP
[  469.564388][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  469.564408][ T9385] Call Trace:
[  469.564418][ T9385]  <TASK>
[  469.564429][ T9385]  dump_stack_lvl+0x100/0x190
[  469.564487][ T9385]  should_fail_ex.cold+0x5/0xa
[  469.564529][ T9385]  ? srso_alias_return_thunk+0x5/0xfbef5
[  469.564577][ T9385]  should_failslab+0xc2/0x120
[  469.564610][ T9385]  __kmalloc_noprof+0xfc/0x840
[  469.564670][ T9385]  ? bpf_prepare_filter+0x77c/0x11e0
[  469.564719][ T9385]  bpf_prepare_filter+0x77c/0x11e0
[  469.564749][ T9385]  ? __pfx_seccomp_check_filter+0x10/0x10
[  469.564805][ T9385]  ? __pfx_bpf_prepare_filter+0x10/0x10
[  469.564849][ T9385]  ? srso_alias_return_thunk+0x5/0xfbef5
[  469.564900][ T9385]  ? __asan_memcpy+0x3c/0x60
[  469.564953][ T9385]  ? srso_alias_return_thunk+0x5/0xfbef5
[  469.565001][ T9385]  ? kmemdup_noprof+0x49/0x60
[  469.565052][ T9385]  ? srso_alias_return_thunk+0x5/0xfbef5
[  469.565108][ T9385]  bpf_prog_create_from_user+0x1df/0x2e0
[  469.565153][ T9385]  ? __pfx_seccomp_check_filter+0x10/0x10
[  469.565211][ T9385]  do_seccomp+0x870/0x27c0
[  469.565265][ T9385]  ? srso_alias_return_thunk+0x5/0xfbef5
[  469.565324][ T9385]  ? __pfx_do_seccomp+0x10/0x10
[  469.565378][ T9385]  ? __sys_socket+0xac/0x260
[  469.565425][ T9385]  ? srso_alias_return_thunk+0x5/0xfbef5
[  469.565472][ T9385]  ? xfd_validate_state+0x129/0x190
[  469.565519][ T9385]  ? srso_alias_return_thunk+0x5/0xfbef5
[  469.565574][ T9385]  do_syscall_64+0x123/0x790
[  469.565622][ T9385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.565662][ T9385] RIP: 0033:0x7f9bf2b9e159
[  469.565693][ T9385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.565732][ T9385] RSP: 002b:00007f9bf3aff028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  469.565771][ T9385] RAX: ffffffffffffffda RBX: 00007f9bf2e25fa0 RCX: 00007f9bf2b9e159
[  469.565798][ T9385] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001
[  469.565823][ T9385] RBP: 00007f9bf2c3506b R08: 0000000000000000 R09: 0000000000000000
[  469.565848][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.565879][ T9385] R13: 00007f9bf2e26038 R14: 00007f9bf2e25fa0 R15: 00007ffc63c55878
[  469.565930][ T9385]  </TASK>
[  469.774785][ T9331] usb 7-1: Cannot set autoneg
[  469.775188][ T9331] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  469.860857][ T9331] usb 7-1: USB disconnect, device number 13
[  470.210241][   T39] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb
[  470.659375][ T9410] ip_tables: iptables: counters copy to user failed while replacing table
[  470.661530][ T9412] FAULT_INJECTION: forcing a failure.
[  470.661530][ T9412] name failslab, interval 1, probability 0, space 0, times 0
[  470.661594][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.6.892 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  470.661671][ T9412] Tainted: [L]=SOFTLOCKUP
[  470.661686][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  470.661709][ T9412] Call Trace:
[  470.661722][ T9412]  <TASK>
[  470.661737][ T9412]  dump_stack_lvl+0x100/0x190
[  470.661803][ T9412]  should_fail_ex.cold+0x5/0xa
[  470.661857][ T9412]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.661913][ T9412]  should_failslab+0xc2/0x120
[  470.661955][ T9412]  __kmalloc_cache_noprof+0x91/0x6d0
[  470.662010][ T9412]  ? vhost_vsock_dev_open+0x79/0x670
[  470.662064][ T9412]  ? __pfx_vhost_vsock_dev_open+0x10/0x10
[  470.662117][ T9412]  vhost_vsock_dev_open+0x79/0x670
[  470.662166][ T9412]  ? __pfx_vhost_vsock_dev_open+0x10/0x10
[  470.662218][ T9412]  misc_open+0x26d/0x450
[  470.662272][ T9412]  ? __pfx_misc_open+0x10/0x10
[  470.662321][ T9412]  chrdev_open+0x234/0x6a0
[  470.662361][ T9412]  ? __pfx_apparmor_file_open+0x10/0x10
[  470.662406][ T9412]  ? __pfx_chrdev_open+0x10/0x10
[  470.662447][ T9412]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.662498][ T9412]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  470.662564][ T9412]  do_dentry_open+0x6ab/0x14d0
[  470.662625][ T9412]  ? __pfx_chrdev_open+0x10/0x10
[  470.662667][ T9412]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.662725][ T9412]  vfs_open+0x82/0x3f0
[  470.662766][ T9412]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.662831][ T9412]  path_openat+0x19fa/0x2440
[  470.662881][ T9412]  ? __pfx_path_openat+0x10/0x10
[  470.662937][ T9412]  do_file_open+0x20e/0x430
[  470.662983][ T9412]  ? __pfx_do_file_open+0x10/0x10
[  470.663060][ T9412]  ? _raw_spin_unlock+0x28/0x50
[  470.663124][ T9412]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.663174][ T9412]  ? alloc_fd+0x471/0x7a0
[  470.663229][ T9412]  do_sys_openat2+0x10f/0x1e0
[  470.663277][ T9412]  ? __pfx_do_sys_openat2+0x10/0x10
[  470.663326][ T9412]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.663375][ T9412]  ? fdget+0x18b/0x210
[  470.663425][ T9412]  __x64_sys_openat+0x12d/0x210
[  470.663473][ T9412]  ? __pfx___x64_sys_openat+0x10/0x10
[  470.663530][ T9412]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.663588][ T9412]  do_syscall_64+0x123/0x790
[  470.663636][ T9412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.663678][ T9412] RIP: 0033:0x7f709b19e159
[  470.663710][ T9412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.663748][ T9412] RSP: 002b:00007f709c154028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  470.663788][ T9412] RAX: ffffffffffffffda RBX: 00007f709b425fa0 RCX: 00007f709b19e159
[  470.663815][ T9412] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  470.663853][ T9412] RBP: 00007f709b23506b R08: 0000000000000000 R09: 0000000000000000
[  470.663878][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  470.663902][ T9412] R13: 00007f709b426038 R14: 00007f709b425fa0 R15: 00007ffe4fa081f8
[  470.663955][ T9412]  </TASK>
[  479.339629][ T9459] loop8: detected capacity change from 0 to 128
[  479.389009][ T9459] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  479.675734][ T9462] syz_tun: entered allmulticast mode
[  479.716436][ T9463] ip_tables: iptables: counters copy to user failed while replacing table
[  479.896851][ T9460] syz_tun: left allmulticast mode
[  479.937738][ T9464] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  480.062591][ T9470] loop5: detected capacity change from 0 to 128
[  480.108645][ T9470] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  480.128600][ T9470] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  480.176936][ T9459] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  480.328833][ T5615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  480.965002][ T5760] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  481.116102][ T5760] usb 9-1: Using ep0 maxpacket: 32
[  481.116858][ T5760] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  481.118254][ T5760] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  481.118293][ T5760] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  481.118331][ T5760] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  481.118399][ T5760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  481.118440][ T5760] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  481.118484][ T5760] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  481.118548][ T5760] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.129784][ T5760] usb 9-1: config 0 descriptor??
[  481.259860][ T9501] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.902'.
[  481.260536][ T9501] FAULT_INJECTION: forcing a failure.
[  481.260536][ T9501] name failslab, interval 1, probability 0, space 0, times 0
[  481.260587][ T9501] CPU: 1 UID: 0 PID: 9501 Comm: syz.6.902 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  481.260639][ T9501] Tainted: [L]=SOFTLOCKUP
[  481.260654][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  481.260682][ T9501] Call Trace:
[  481.260695][ T9501]  <TASK>
[  481.260709][ T9501]  dump_stack_lvl+0x100/0x190
[  481.260770][ T9501]  should_fail_ex.cold+0x5/0xa
[  481.260814][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.260869][ T9501]  should_failslab+0xc2/0x120
[  481.260916][ T9501]  __kmalloc_cache_noprof+0x91/0x6d0
[  481.260971][ T9501]  ? nfnl_osf_add_callback+0x40e/0x870
[  481.261040][ T9501]  nfnl_osf_add_callback+0x40e/0x870
[  481.261105][ T9501]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  481.261163][ T9501]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  481.261201][ T9501]  ? skb_release_data+0x6ca/0x8e0
[  481.261266][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.261315][ T9501]  ? kfree_skbmem+0x19f/0x210
[  481.261407][ T9501]  ? __pfx___dev_queue_xmit+0x10/0x10
[  481.261465][ T9501]  netlink_rcv_skb+0x159/0x420
[  481.261521][ T9501]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  481.261565][ T9501]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  481.261619][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.261689][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.261736][ T9501]  ? ns_capable+0xd2/0xf0
[  481.261805][ T9501]  nfnetlink_rcv+0x1b3/0x440
[  481.261844][ T9501]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  481.261888][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.261936][ T9501]  ? netlink_deliver_tap+0x1ae/0xcc0
[  481.262008][ T9501]  netlink_unicast+0x585/0x850
[  481.262069][ T9501]  ? __pfx_netlink_unicast+0x10/0x10
[  481.262121][ T9501]  ? __build_skb_around+0x278/0x390
[  481.262171][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.262219][ T9501]  ? is_vmalloc_addr+0x86/0xa0
[  481.262277][ T9501]  netlink_sendmsg+0x8b0/0xda0
[  481.262340][ T9501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  481.262399][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.262446][ T9501]  ? apparmor_socket_sendmsg+0x165/0x280
[  481.262510][ T9501]  ____sys_sendmsg+0xa4d/0xbe0
[  481.262551][ T9501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  481.262610][ T9501]  ? __pfx_____sys_sendmsg+0x10/0x10
[  481.262674][ T9501]  ___sys_sendmsg+0x190/0x1e0
[  481.262721][ T9501]  ? __pfx____sys_sendmsg+0x10/0x10
[  481.262769][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.262815][ T9501]  ? futex_wait+0x11e/0x370
[  481.262903][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.262951][ T9501]  ? find_held_lock+0x2b/0x80
[  481.263036][ T9501]  __sys_sendmsg+0x160/0x210
[  481.263098][ T9501]  ? __pfx___sys_sendmsg+0x10/0x10
[  481.263174][ T9501]  ? srso_alias_return_thunk+0x5/0xfbef5
[  481.263230][ T9501]  do_syscall_64+0x123/0x790
[  481.263279][ T9501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.263320][ T9501] RIP: 0033:0x7f709b19e159
[  481.263351][ T9501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.263389][ T9501] RSP: 002b:00007f709c154028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  481.263427][ T9501] RAX: ffffffffffffffda RBX: 00007f709b425fa0 RCX: 00007f709b19e159
[  481.263454][ T9501] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000005
[  481.263479][ T9501] RBP: 00007f709b23506b R08: 0000000000000000 R09: 0000000000000000
[  481.263504][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  481.263529][ T9501] R13: 00007f709b426038 R14: 00007f709b425fa0 R15: 00007ffe4fa081f8
[  481.263580][ T9501]  </TASK>
[  481.424023][ T5760] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  482.011090][ T9321] usb 9-1: USB disconnect, device number 2
[  482.024220][ T9520] overlayfs: failed to clone upperpath
[  482.049954][ T9321] usblp0: removed
[  482.180924][   T30] audit: type=1804 audit(1790225636.627:48): pid=9519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.918" name="/newroot/137/dev/syzkaller0" dev="sda1" ino=2057 res=1 errno=0
[  483.034318][ T9543] FAULT_INJECTION: forcing a failure.
[  483.034318][ T9543] name failslab, interval 1, probability 0, space 0, times 0
[  483.034362][ T9543] CPU: 1 UID: 0 PID: 9543 Comm: syz.5.923 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  483.034405][ T9543] Tainted: [L]=SOFTLOCKUP
[  483.034416][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  483.034434][ T9543] Call Trace:
[  483.034444][ T9543]  <TASK>
[  483.034455][ T9543]  dump_stack_lvl+0x100/0x190
[  483.034501][ T9543]  should_fail_ex.cold+0x5/0xa
[  483.034535][ T9543]  ? srso_alias_return_thunk+0x5/0xfbef5
[  483.034576][ T9543]  should_failslab+0xc2/0x120
[  483.034608][ T9543]  __kmalloc_noprof+0xfc/0x840
[  483.034652][ T9543]  ? __pfx_from_kuid+0x10/0x10
[  483.034683][ T9543]  ? tomoyo_init_log+0x1224/0x20c0
[  483.034722][ T9543]  tomoyo_init_log+0x1224/0x20c0
[  483.034758][ T9543]  ? vsnprintf+0x4c5/0x1300
[  483.034798][ T9543]  ? __pfx_tomoyo_init_log+0x10/0x10
[  483.034838][ T9543]  ? tomoyo_profile+0x47/0x60
[  483.034892][ T9543]  ? srso_alias_return_thunk+0x5/0xfbef5
[  483.034944][ T9543]  ? tomoyo_domain_quota_is_ok+0x367/0x580
[  483.035012][ T9543]  tomoyo_supervisor+0x506/0x1340
[  483.035071][ T9543]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  483.035153][ T9543]  ? srso_alias_return_thunk+0x5/0xfbef5
[  483.035202][ T9543]  ? tomoyo_check_path_acl+0x141/0x210
[  483.035266][ T9543]  ? srso_alias_return_thunk+0x5/0xfbef5
[  483.035318][ T9543]  ? tomoyo_check_acl+0x1f7/0x410
[  483.035386][ T9543]  tomoyo_path_permission+0x270/0x3b0
[  483.035460][ T9543]  tomoyo_check_open_permission+0x34d/0x3c0
[  483.035532][ T9543]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  483.035602][ T9543]  ? __lock_acquire+0x5c0/0x1f40
[  483.035660][ T9543]  ? hook_file_open+0x248/0x8e0
[  483.035740][ T9543]  ? path_get+0x61/0x80
[  483.035795][ T9543]  tomoyo_file_open+0x6b/0x90
[  483.035853][ T9543]  security_file_open+0xb5/0x1e0
[  483.035904][ T9543]  do_dentry_open+0x588/0x14d0
[  483.035974][ T9543]  ? srso_alias_return_thunk+0x5/0xfbef5
[  483.036033][ T9543]  vfs_open+0x82/0x3f0
[  483.036076][ T9543]  ? srso_alias_return_thunk+0x5/0xfbef5
[  483.036134][ T9543]  path_openat+0x19fa/0x2440
[  483.036186][ T9543]  ? __pfx_path_openat+0x10/0x10
[  483.036245][ T9543]  do_file_open+0x20e/0x430
[  483.036293][ T9543]  ? __pfx_do_file_open+0x10/0x10
[  483.036372][ T9543]  ? _raw_spin_unlock+0x28/0x50
[  483.036444][ T9543]  ? srso_alias_return_thunk+0x5/0xfbef5
[  483.036493][ T9543]  ? alloc_fd+0x471/0x7a0
[  483.036549][ T9543]  do_sys_openat2+0x10f/0x1e0
[  483.036598][ T9543]  ? __pfx_do_sys_openat2+0x10/0x10
[  483.036662][ T9543]  __x64_sys_openat+0x12d/0x210
[  483.036711][ T9543]  ? __pfx___x64_sys_openat+0x10/0x10
[  483.036768][ T9543]  ? srso_alias_return_thunk+0x5/0xfbef5
[  483.036827][ T9543]  do_syscall_64+0x123/0x790
[  483.036875][ T9543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.036922][ T9543] RIP: 0033:0x7f392b59e159
[  483.036954][ T9543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.036994][ T9543] RSP: 002b:00007f392c521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  483.037034][ T9543] RAX: ffffffffffffffda RBX: 00007f392b825fa0 RCX: 00007f392b59e159
[  483.037061][ T9543] RDX: 000000000000003f RSI: 00002000000001c0 RDI: 00000000ffffff9c
[  483.037087][ T9543] RBP: 00007f392b63506b R08: 0000000000000000 R09: 0000000000000000
[  483.037113][ T9543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.037137][ T9543] R13: 00007f392b826038 R14: 00007f392b825fa0 R15: 00007fff656ee788
[  483.037190][ T9543]  </TASK>
[  483.087690][ T9552] loop8: detected capacity change from 0 to 256
[  483.352213][ T9552] exfat: Deprecated parameter 'utf8'
[  483.355319][ T9552] exfat: Deprecated parameter 'namecase'
[  483.355390][ T9552] exfat: Deprecated parameter 'utf8'
[  484.223409][ T9552] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  484.658636][ T9563] loop6: detected capacity change from 0 to 512
[  484.752922][ T9563] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  484.896795][ T9563] EXT4-fs (loop6): orphan file too big: 4085121025
[  484.904340][ T9563] EXT4-fs (loop6): mount failed
[  485.236009][   T30] audit: type=1800 audit(1790225639.677:49): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.925" name="file1" dev="loop8" ino=1048643 res=0 errno=0
[  485.293370][ T9567] fuse: fd is not a fuse device
[  489.811560][ T9606] FAULT_INJECTION: forcing a failure.
[  489.811560][ T9606] name failslab, interval 1, probability 0, space 0, times 0
[  489.811617][ T9606] CPU: 0 UID: 0 PID: 9606 Comm: syz.2.942 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  489.811672][ T9606] Tainted: [L]=SOFTLOCKUP
[  489.811686][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  489.811709][ T9606] Call Trace:
[  489.811721][ T9606]  <TASK>
[  489.811736][ T9606]  dump_stack_lvl+0x100/0x190
[  489.811797][ T9606]  should_fail_ex.cold+0x5/0xa
[  489.811841][ T9606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  489.811894][ T9606]  ? __pfx_transactions_open+0x10/0x10
[  489.811954][ T9606]  should_failslab+0xc2/0x120
[  489.812000][ T9606]  kmem_cache_alloc_noprof+0x92/0x6a0
[  489.812060][ T9606]  ? seq_open+0x55/0x170
[  489.812118][ T9606]  ? __pfx_transactions_show+0x10/0x10
[  489.812176][ T9606]  ? __pfx_transactions_open+0x10/0x10
[  489.812227][ T9606]  seq_open+0x55/0x170
[  489.812280][ T9606]  ? __pfx_transactions_show+0x10/0x10
[  489.812337][ T9606]  single_open+0xfc/0x1d0
[  489.812394][ T9606]  full_proxy_open_regular+0x1b6/0x370
[  489.812446][ T9606]  do_dentry_open+0x6ab/0x14d0
[  489.812503][ T9606]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  489.812552][ T9606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  489.812605][ T9606]  vfs_open+0x82/0x3f0
[  489.812643][ T9606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  489.812697][ T9606]  path_openat+0x19fa/0x2440
[  489.812745][ T9606]  ? __pfx_path_openat+0x10/0x10
[  489.812798][ T9606]  do_file_open+0x20e/0x430
[  489.812841][ T9606]  ? __pfx_do_file_open+0x10/0x10
[  489.812914][ T9606]  ? _raw_spin_unlock+0x28/0x50
[  489.812979][ T9606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  489.813026][ T9606]  ? alloc_fd+0x471/0x7a0
[  489.813079][ T9606]  do_sys_openat2+0x10f/0x1e0
[  489.813124][ T9606]  ? __pfx_do_sys_openat2+0x10/0x10
[  489.813170][ T9606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  489.813217][ T9606]  ? kfree+0x1e5/0x6d0
[  489.813275][ T9606]  __x64_sys_openat+0x12d/0x210
[  489.813321][ T9606]  ? __pfx___x64_sys_openat+0x10/0x10
[  489.813376][ T9606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  489.813431][ T9606]  do_syscall_64+0x123/0x790
[  489.813477][ T9606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.813518][ T9606] RIP: 0033:0x7f9bf2b9e159
[  489.813548][ T9606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.813586][ T9606] RSP: 002b:00007f9bf3aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  489.813624][ T9606] RAX: ffffffffffffffda RBX: 00007f9bf2e25fa0 RCX: 00007f9bf2b9e159
[  489.813650][ T9606] RDX: 0000000000000000 RSI: 0000200000002780 RDI: ffffffffffffff9c
[  489.813676][ T9606] RBP: 00007f9bf2c3506b R08: 0000000000000000 R09: 0000000000000000
[  489.813701][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  489.813725][ T9606] R13: 00007f9bf2e26038 R14: 00007f9bf2e25fa0 R15: 00007ffc63c55878
[  489.813776][ T9606]  </TASK>
[  490.453147][ T9625] loop5: detected capacity change from 0 to 1024
[  490.639700][ T9634] gadgetfs: bound to dummy_udc driver
[  490.730016][ T9625] hfsplus: failed to load attributes file
[  490.876084][ T9329] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  490.876390][    C1] gadgetfs: connected
[  490.877428][ T9329] gadgetfs: disconnected
[  491.027265][    C1] gadgetfs: connected
[  491.029027][ T9329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  491.031882][ T9329] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  491.031933][ T9329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.060391][    C1] gadgetfs: configuration #1
[  491.362579][ T9634] gadgetfs: suspended from state 3
[  491.362695][ T9634] gadgetfs: disconnected
[  491.364191][ T9329] usb 1-1: USB disconnect, device number 13
[  491.951650][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.954'.
[  492.619112][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.619477][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.311269][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.357878][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.101757][ T9676] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  495.114049][ T1204] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.116260][ T1204] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.122300][ T1204] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.122375][ T1204] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.673495][ T5620] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  495.673543][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  495.673606][ T5620] Tainted: [L]=SOFTLOCKUP
[  495.673622][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  495.673652][ T5620] Workqueue: hci4 hci_rx_work
[  495.673718][ T5620] Call Trace:
[  495.673732][ T5620]  <TASK>
[  495.673748][ T5620]  dump_stack_lvl+0x100/0x190
[  495.673814][ T5620]  sysfs_warn_dup.cold+0x1c/0x28
[  495.673883][ T5620]  sysfs_create_dir_ns+0x24b/0x2b0
[  495.673933][ T5620]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  495.673983][ T5620]  ? find_held_lock+0x2b/0x80
[  495.674043][ T5620]  ? kobject_add_internal+0x25f/0x930
[  495.674106][ T5620]  ? kobject_add_internal+0x25f/0x930
[  495.674172][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.674227][ T5620]  ? do_raw_spin_unlock+0x145/0x1e0
[  495.674286][ T5620]  kobject_add_internal+0x2c8/0x930
[  495.674367][ T5620]  kobject_add+0x16a/0x1e0
[  495.674427][ T5620]  ? __pfx_kobject_add+0x10/0x10
[  495.674485][ T5620]  ? class_to_subsys+0x10f/0x150
[  495.674531][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.674582][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.674631][ T5620]  ? kobject_put+0xb9/0x640
[  495.674680][ T5620]  ? _raw_spin_unlock+0x28/0x50
[  495.674756][ T5620]  device_add+0x294/0x1970
[  495.674795][ T5620]  ? __pfx_dev_set_name+0x10/0x10
[  495.674841][ T5620]  ? __pfx_device_add+0x10/0x10
[  495.674879][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.674929][ T5620]  ? mgmt_send_event_skb+0x2fb/0x460
[  495.675008][ T5620]  hci_conn_add_sysfs+0x1a3/0x260
[  495.675053][ T5620]  le_conn_complete_evt+0x122f/0x2130
[  495.675128][ T5620]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  495.675188][ T5620]  ? hci_event_packet+0x186/0xcd0
[  495.675244][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.675307][ T5620]  hci_le_conn_complete_evt+0x23c/0x3a0
[  495.675378][ T5620]  ? skb_pull_data+0x15f/0x1e0
[  495.675429][ T5620]  hci_le_meta_evt+0x34a/0x5f0
[  495.675495][ T5620]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  495.675565][ T5620]  hci_event_packet+0x51c/0xcd0
[  495.675627][ T5620]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  495.675694][ T5620]  ? __pfx_hci_event_packet+0x10/0x10
[  495.675763][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.675812][ T5620]  ? lockdep_hardirqs_on+0x7d/0x110
[  495.675853][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.675913][ T5620]  hci_rx_work+0x451/0xfc0
[  495.675982][ T5620]  process_one_work+0xac7/0x1b10
[  495.676066][ T5620]  ? __pfx_process_one_work+0x10/0x10
[  495.676130][ T5620]  ? lock_acquire+0x1d1/0x380
[  495.676184][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.676241][ T5620]  worker_thread+0x5ef/0xe50
[  495.676322][ T5620]  ? kthread+0x13a/0x450
[  495.676379][ T5620]  ? __pfx_worker_thread+0x10/0x10
[  495.676438][ T5620]  kthread+0x373/0x450
[  495.676492][ T5620]  ? __pfx_kthread+0x10/0x10
[  495.676549][ T5620]  ret_from_fork+0x730/0xd60
[  495.676594][ T5620]  ? __pfx_ret_from_fork+0x10/0x10
[  495.676639][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.676688][ T5620]  ? __switch_to+0x800/0x10f0
[  495.676742][ T5620]  ? __switch_to_asm+0x39/0x70
[  495.676781][ T5620]  ? __pfx_kthread+0x10/0x10
[  495.676839][ T5620]  ret_from_fork_asm+0x1a/0x30
[  495.676905][ T5620]  </TASK>
[  495.677387][ T5620] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  495.677449][ T5620] Bluetooth: hci4: failed to register connection device
[  495.693706][ T9687] infiniband syz0: set down
[  495.693745][ T9687] infiniband syz0: added bond0
[  495.727029][ T9687] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  495.727097][ T9687] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  495.727181][ T9687] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  495.792700][ T9687] RDS/IB: syz0: added
[  495.793256][ T9687] smc: adding ib device syz0 with port count 1
[  495.793413][ T9687] smc:    ib device syz0 port 1 has no pnetid
[  497.596616][ T8993] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  497.943181][ T8993] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  497.955245][ T8993] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  497.955296][ T8993] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 8
[  497.955328][ T8993] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  498.003690][ T8993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.003730][ T8993] usb 9-1: Product: syz
[  498.003759][ T8993] usb 9-1: Manufacturer: syz
[  498.003787][ T8993] usb 9-1: SerialNumber: syz
[  498.798393][ T9707] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  498.824726][ T8993] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  498.824766][ T8993] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  498.951771][ T8993] usbserial_generic 9-1:1.0: generic converter detected
[  498.969715][ T8993] usb 9-1: generic converter now attached to ttyUSB0
[  499.215494][ T9299] usb 9-1: USB disconnect, device number 3
[  499.280422][ T9299] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  499.294306][ T9299] usbserial_generic 9-1:1.0: device disconnected
[  499.774239][    C0] vcan0: j1939_tp_rxtimer: 0xffff888073bdac00: rx timeout, send abort
[  500.275255][    C0] vcan0: j1939_tp_rxtimer: 0xffff888073bda800: rx timeout, send abort
[  500.277239][    C0] vcan0: j1939_tp_rxtimer: 0xffff888073bdac00: abort rx timeout. Force session deactivation
[  500.562149][ T9724] loop8: detected capacity change from 0 to 40427
[  500.570819][ T9724] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  500.570860][ T9724] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  500.668572][ T9724] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  500.685406][ T9724] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  500.685446][ T9724] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  500.775341][    C0] vcan0: j1939_tp_rxtimer: 0xffff888073bda800: abort rx timeout. Force session deactivation
[  501.018293][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  501.049820][   T30] audit: type=1804 audit(1790225655.497:50): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.974" name="/newroot/29/bus/bus" dev="loop8" ino=10 res=1 errno=0
[  501.562758][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.707796][ T9741] FAULT_INJECTION: forcing a failure.
[  501.707796][ T9741] name failslab, interval 1, probability 0, space 0, times 0
[  501.707856][ T9741] CPU: 0 UID: 0 PID: 9741 Comm: syz.5.981 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  501.707913][ T9741] Tainted: [L]=SOFTLOCKUP
[  501.707927][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  501.707953][ T9741] Call Trace:
[  501.707970][ T9741]  <TASK>
[  501.707986][ T9741]  dump_stack_lvl+0x100/0x190
[  501.708048][ T9741]  should_fail_ex.cold+0x5/0xa
[  501.708094][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.708151][ T9741]  should_failslab+0xc2/0x120
[  501.708194][ T9741]  __kmalloc_cache_noprof+0x91/0x6d0
[  501.708250][ T9741]  ? kobject_uevent_env+0x263/0x18b0
[  501.708322][ T9741]  kobject_uevent_env+0x263/0x18b0
[  501.708387][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.708445][ T9741]  ? kernfs_put+0x3f/0x60
[  501.708492][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.708541][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.708589][ T9741]  ? bus_to_subsys+0x114/0x150
[  501.708641][ T9741]  device_add+0x1173/0x1970
[  501.708683][ T9741]  ? __pfx_device_add+0x10/0x10
[  501.708719][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.708767][ T9741]  ? kfree+0x1e5/0x6d0
[  501.708829][ T9741]  device_create_groups_vargs+0x1f8/0x270
[  501.708877][ T9741]  device_create+0xed/0x130
[  501.708918][ T9741]  ? __pfx_device_create+0x10/0x10
[  501.708960][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.709009][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.709055][ T9741]  ? con_is_visible+0x65/0x150
[  501.709097][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.709145][ T9741]  ? csi_J+0x57e/0xad0
[  501.709206][ T9741]  vcs_make_sysfs+0x32/0x80
[  501.709253][ T9741]  vc_allocate+0x539/0x880
[  501.709308][ T9741]  ? __pfx_vc_allocate+0x10/0x10
[  501.709376][ T9741]  con_install+0xa1/0x620
[  501.709442][ T9741]  ? __pfx_con_install+0x10/0x10
[  501.709508][ T9741]  ? __pfx_con_install+0x10/0x10
[  501.709568][ T9741]  tty_init_dev.part.0+0x9e/0x470
[  501.709636][ T9741]  tty_open+0x953/0xe20
[  501.709699][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.709752][ T9741]  ? __pfx_tty_open+0x10/0x10
[  501.709810][ T9741]  ? chrdev_open+0x589/0x6a0
[  501.709847][ T9741]  ? chrdev_open+0x589/0x6a0
[  501.709881][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.709939][ T9741]  ? __pfx_tty_open+0x10/0x10
[  501.710001][ T9741]  chrdev_open+0x234/0x6a0
[  501.710042][ T9741]  ? __pfx_chrdev_open+0x10/0x10
[  501.710082][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.710131][ T9741]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  501.710196][ T9741]  do_dentry_open+0x6ab/0x14d0
[  501.710256][ T9741]  ? __pfx_chrdev_open+0x10/0x10
[  501.710298][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.710353][ T9741]  vfs_open+0x82/0x3f0
[  501.710392][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.710454][ T9741]  path_openat+0x19fa/0x2440
[  501.710505][ T9741]  ? __pfx_path_openat+0x10/0x10
[  501.710560][ T9741]  do_file_open+0x20e/0x430
[  501.710606][ T9741]  ? __pfx_do_file_open+0x10/0x10
[  501.710687][ T9741]  ? _raw_spin_unlock+0x28/0x50
[  501.710748][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.710796][ T9741]  ? alloc_fd+0x471/0x7a0
[  501.710851][ T9741]  do_sys_openat2+0x10f/0x1e0
[  501.710898][ T9741]  ? __pfx_do_sys_openat2+0x10/0x10
[  501.710945][ T9741]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  501.711004][ T9741]  __x64_sys_openat+0x12d/0x210
[  501.711055][ T9741]  ? __pfx___x64_sys_openat+0x10/0x10
[  501.711111][ T9741]  ? srso_alias_return_thunk+0x5/0xfbef5
[  501.711166][ T9741]  do_syscall_64+0x123/0x790
[  501.711214][ T9741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.711255][ T9741] RIP: 0033:0x7f392b55e98e
[  501.711287][ T9741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  501.711327][ T9741] RSP: 002b:00007f392c520b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  501.711366][ T9741] RAX: ffffffffffffffda RBX: 00007f392c5216c0 RCX: 00007f392b55e98e
[  501.711392][ T9741] RDX: 0000000000000002 RSI: 00007f392c520c00 RDI: ffffffffffffff9c
[  501.711418][ T9741] RBP: 00007f392b63506b R08: 0000000000000000 R09: 0000000000000000
[  501.711454][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  501.711478][ T9741] R13: 00007f392b826038 R14: 00007f392b825fa0 R15: 00007fff656ee788
[  501.711532][ T9741]  </TASK>
[  501.887587][ T5620] Bluetooth: hci4: command 0x0406 tx timeout
[  501.919890][ T9739] Config c/1 of g1 needs at least one function.
[  501.920403][ T9739] udc dummy_udc.0: failed to start g1: -22
[  501.920441][ T9739] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  502.229916][ T9739] UDC core: g1: couldn't find an available UDC or it's busy
[  502.529903][ T9733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.541138][ T9733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.700493][ T9756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  504.276611][ T9733] xfrm1: left promiscuous mode
[  504.276649][ T9733] xfrm1: left allmulticast mode
[  504.285238][ T6085] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.285381][ T6085] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.285445][ T6085] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.285507][ T6085] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.381477][ T9770] binder_alloc: 9767: binder_alloc_buf size -240 failed, no address space
[  504.381786][ T9770] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  506.202602][ T9772] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  508.204968][ T5627] Bluetooth: hci4: command 0x0406 tx timeout
[  509.068976][ T5620] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  509.069021][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  509.069078][ T5620] Tainted: [L]=SOFTLOCKUP
[  509.069092][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  509.069120][ T5620] Workqueue: hci2 hci_rx_work
[  509.069178][ T5620] Call Trace:
[  509.069191][ T5620]  <TASK>
[  509.069207][ T5620]  dump_stack_lvl+0x100/0x190
[  509.069265][ T5620]  sysfs_warn_dup.cold+0x1c/0x28
[  509.069330][ T5620]  sysfs_create_dir_ns+0x24b/0x2b0
[  509.069377][ T5620]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  509.069424][ T5620]  ? find_held_lock+0x2b/0x80
[  509.069484][ T5620]  ? kobject_add_internal+0x25f/0x930
[  509.069538][ T5620]  ? kobject_add_internal+0x25f/0x930
[  509.069594][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.069642][ T5620]  ? do_raw_spin_unlock+0x145/0x1e0
[  509.069693][ T5620]  kobject_add_internal+0x2c8/0x930
[  509.069755][ T5620]  kobject_add+0x16a/0x1e0
[  509.069808][ T5620]  ? __pfx_kobject_add+0x10/0x10
[  509.069866][ T5620]  ? class_to_subsys+0x10f/0x150
[  509.069909][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.069950][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.069988][ T5620]  ? kobject_put+0xb9/0x640
[  509.070030][ T5620]  ? _raw_spin_unlock+0x28/0x50
[  509.070097][ T5620]  device_add+0x294/0x1970
[  509.070134][ T5620]  ? __pfx_dev_set_name+0x10/0x10
[  509.070174][ T5620]  ? __pfx_device_add+0x10/0x10
[  509.070209][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.070250][ T5620]  ? mgmt_send_event_skb+0x2fb/0x460
[  509.070318][ T5620]  hci_conn_add_sysfs+0x1a3/0x260
[  509.070358][ T5620]  le_conn_complete_evt+0x122f/0x2130
[  509.070422][ T5620]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  509.070474][ T5620]  ? hci_event_packet+0x186/0xcd0
[  509.070520][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.070570][ T5620]  hci_le_conn_complete_evt+0x23c/0x3a0
[  509.070623][ T5620]  ? skb_pull_data+0x15f/0x1e0
[  509.070669][ T5620]  hci_le_meta_evt+0x34a/0x5f0
[  509.070728][ T5620]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  509.070788][ T5620]  hci_event_packet+0x51c/0xcd0
[  509.070841][ T5620]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  509.070904][ T5620]  ? __pfx_hci_event_packet+0x10/0x10
[  509.070963][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.071004][ T5620]  ? lockdep_hardirqs_on+0x7d/0x110
[  509.071041][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.071090][ T5620]  hci_rx_work+0x451/0xfc0
[  509.071156][ T5620]  process_one_work+0xac7/0x1b10
[  509.071237][ T5620]  ? __pfx_process_one_work+0x10/0x10
[  509.071297][ T5620]  ? lock_acquire+0x1d1/0x380
[  509.071349][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.071403][ T5620]  worker_thread+0x5ef/0xe50
[  509.071480][ T5620]  ? kthread+0x13a/0x450
[  509.071535][ T5620]  ? __pfx_worker_thread+0x10/0x10
[  509.071592][ T5620]  kthread+0x373/0x450
[  509.071644][ T5620]  ? __pfx_kthread+0x10/0x10
[  509.071699][ T5620]  ret_from_fork+0x730/0xd60
[  509.071742][ T5620]  ? __pfx_ret_from_fork+0x10/0x10
[  509.071786][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.071833][ T5620]  ? __switch_to+0x800/0x10f0
[  509.071894][ T5620]  ? __switch_to_asm+0x39/0x70
[  509.071932][ T5620]  ? __pfx_kthread+0x10/0x10
[  509.071988][ T5620]  ret_from_fork_asm+0x1a/0x30
[  509.072050][ T5620]  </TASK>
[  509.073183][ T5620] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  509.073239][ T5620] Bluetooth: hci2: failed to register connection device
[  509.077740][ T9804] loop6: detected capacity change from 0 to 16
[  509.136300][ T9804] erofs (device loop6): mounted with root inode @ nid 36.
[  509.616495][ T9813] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  509.822987][ T9811] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.823327][ T9811] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.097880][ T9823] overlayfs: failed to clone upperpath
[  510.114578][ T9824] gadgetfs: bound to dummy_udc driver
[  510.403237][ T9811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.704501][ T9811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  514.021153][ T6085] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  514.021274][ T6085] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  514.021340][ T6085] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  514.021402][ T6085] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  514.109438][ T9852] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1000'.
[  514.493267][ T9864] FAULT_INJECTION: forcing a failure.
[  514.493267][ T9864] name failslab, interval 1, probability 0, space 0, times 0
[  514.493328][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.2.1018 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  514.493385][ T9864] Tainted: [L]=SOFTLOCKUP
[  514.493399][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  514.493424][ T9864] Call Trace:
[  514.493437][ T9864]  <TASK>
[  514.493452][ T9864]  dump_stack_lvl+0x100/0x190
[  514.493516][ T9864]  should_fail_ex.cold+0x5/0xa
[  514.493560][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.493615][ T9864]  should_failslab+0xc2/0x120
[  514.493658][ T9864]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  514.493724][ T9864]  ? __alloc_skb+0x140/0x710
[  514.493797][ T9864]  __alloc_skb+0x140/0x710
[  514.493849][ T9864]  ? __alloc_skb+0x5b7/0x710
[  514.493905][ T9864]  ? __pfx___alloc_skb+0x10/0x10
[  514.493981][ T9864]  _sctp_make_chunk+0x51/0x270
[  514.494027][ T9864]  sctp_make_control+0x2f/0x2d0
[  514.494072][ T9864]  sctp_make_init+0x6d0/0xda0
[  514.494125][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.494177][ T9864]  ? __pfx_sctp_make_init+0x10/0x10
[  514.494233][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.494288][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.494338][ T9864]  ? sctp_sm_lookup_event+0x10e/0x520
[  514.494381][ T9864]  ? __pfx_sctp_sm_lookup_event+0x10/0x10
[  514.494423][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.494480][ T9864]  sctp_sf_do_prm_asoc+0xbf/0x360
[  514.494540][ T9864]  ? __pfx_sctp_pname+0x10/0x10
[  514.494580][ T9864]  sctp_do_sm+0x17a/0x5c30
[  514.494646][ T9864]  ? sctp_sendmsg_to_asoc+0x1748/0x1c50
[  514.494698][ T9864]  ? sctp_sendmsg+0x1144/0x22e0
[  514.494757][ T9864]  ? __sys_sendmsg+0x160/0x210
[  514.494817][ T9864]  ? do_syscall_64+0x123/0x790
[  514.494856][ T9864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.494905][ T9864]  ? __pfx_sctp_do_sm+0x10/0x10
[  514.495026][ T9864]  ? __kasan_kmalloc+0xaa/0xb0
[  514.495090][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.495139][ T9864]  ? __sk_mem_raise_allocated+0x789/0x1570
[  514.495215][ T9864]  sctp_primitive_ASSOCIATE+0x9c/0xd0
[  514.495285][ T9864]  sctp_sendmsg_to_asoc+0xa6a/0x1c50
[  514.495336][ T9864]  ? __asan_memcpy+0x40/0x60
[  514.495393][ T9864]  ? sctp_assoc_set_primary+0x276/0x310
[  514.495450][ T9864]  ? sctp_assoc_add_peer+0x256/0x1550
[  514.495515][ T9864]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  514.495566][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.495613][ T9864]  ? sctp_connect_new_asoc+0x41e/0x770
[  514.495676][ T9864]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  514.495734][ T9864]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[  514.495787][ T9864]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[  514.495838][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.495891][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.495939][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.496000][ T9864]  sctp_sendmsg+0x1144/0x22e0
[  514.496070][ T9864]  ? __pfx_sctp_sendmsg+0x10/0x10
[  514.496134][ T9864]  ? copy_iovec_from_user+0xcf/0x140
[  514.496191][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.496239][ T9864]  ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0
[  514.496298][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.496346][ T9864]  ? aa_sock_msg_perm+0x11e/0x200
[  514.496400][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.496449][ T9864]  ? __pfx_sctp_sendmsg+0x10/0x10
[  514.496511][ T9864]  inet_sendmsg+0x11c/0x140
[  514.496560][ T9864]  ____sys_sendmsg+0x9c9/0xbe0
[  514.496603][ T9864]  ? __pfx_inet_sendmsg+0x10/0x10
[  514.496651][ T9864]  ? __pfx_____sys_sendmsg+0x10/0x10
[  514.496717][ T9864]  ___sys_sendmsg+0x190/0x1e0
[  514.496768][ T9864]  ? __pfx____sys_sendmsg+0x10/0x10
[  514.496816][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.496864][ T9864]  ? futex_wait+0x11e/0x370
[  514.496944][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.497000][ T9864]  ? find_held_lock+0x2b/0x80
[  514.497086][ T9864]  __sys_sendmsg+0x160/0x210
[  514.497150][ T9864]  ? __pfx___sys_sendmsg+0x10/0x10
[  514.497228][ T9864]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.497285][ T9864]  do_syscall_64+0x123/0x790
[  514.497333][ T9864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.497374][ T9864] RIP: 0033:0x7f9bf2b9e159
[  514.497405][ T9864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.497444][ T9864] RSP: 002b:00007f9bf3aff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  514.497484][ T9864] RAX: ffffffffffffffda RBX: 00007f9bf2e25fa0 RCX: 00007f9bf2b9e159
[  514.497511][ T9864] RDX: 0000000000048043 RSI: 0000200000000800 RDI: 0000000000000004
[  514.497537][ T9864] RBP: 00007f9bf2c3506b R08: 0000000000000000 R09: 0000000000000000
[  514.497563][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  514.497588][ T9864] R13: 00007f9bf2e26038 R14: 00007f9bf2e25fa0 R15: 00007ffc63c55878
[  514.497641][ T9864]  </TASK>
[  514.545743][ T9295] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  514.800834][ T9295] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  514.892800][ T9295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  514.892857][ T9295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  514.892916][ T9295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.071314][ T9295] usb 7-1: config 0 descriptor??
[  515.245484][ T5627] Bluetooth: hci2: command 0x0406 tx timeout
[  515.421368][ T9876] gadgetfs: bound to dummy_udc driver
[  515.722131][ T9295] usb 7-1: string descriptor 0 read error: -22
[  515.810317][ T9886] loop8: detected capacity change from 0 to 1024
[  516.077863][ T9295] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000D/input/input31
[  516.313042][ T9295] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0
[  516.400078][ T9886] jffs2: notice: (9886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  516.543356][ T8525] hfsplus: walked past end of dir
[  516.581870][ T9899] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1032'.
[  516.582013][ T9899] FAULT_INJECTION: forcing a failure.
[  516.582013][ T9899] name fail_futex, interval 1, probability 0, space 0, times 0
[  516.582064][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.5.1032 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  516.582118][ T9899] Tainted: [L]=SOFTLOCKUP
[  516.582132][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  516.582156][ T9899] Call Trace:
[  516.582168][ T9899]  <TASK>
[  516.582183][ T9899]  dump_stack_lvl+0x100/0x190
[  516.582246][ T9899]  should_fail_ex.cold+0x5/0xa
[  516.582297][ T9899]  get_futex_key+0x1d0/0x14f0
[  516.582352][ T9899]  ? __pfx_get_futex_key+0x10/0x10
[  516.582404][ T9899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.582452][ T9899]  ? ___sys_sendmsg+0x127/0x1e0
[  516.582518][ T9899]  futex_wake+0xf4/0x5e0
[  516.582575][ T9899]  ? futex_wait+0x11e/0x370
[  516.582642][ T9899]  ? __pfx_futex_wake+0x10/0x10
[  516.582707][ T9899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.582756][ T9899]  ? find_held_lock+0x2b/0x80
[  516.582825][ T9899]  do_futex+0x2b2/0x440
[  516.582880][ T9899]  ? __pfx_do_futex+0x10/0x10
[  516.582933][ T9899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.582984][ T9899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.583031][ T9899]  ? fput+0x7c/0x100
[  516.583077][ T9899]  __x64_sys_futex+0x34f/0x4d0
[  516.583136][ T9899]  ? __pfx___x64_sys_futex+0x10/0x10
[  516.583199][ T9899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.583263][ T9899]  do_syscall_64+0x123/0x790
[  516.583311][ T9899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.583353][ T9899] RIP: 0033:0x7f392b59e159
[  516.583384][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.583424][ T9899] RSP: 002b:00007f392c5210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  516.583463][ T9899] RAX: ffffffffffffffda RBX: 00007f392b825fa8 RCX: 00007f392b59e159
[  516.583497][ T9899] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f392b825fac
[  516.583524][ T9899] RBP: 00007f392b825fa0 R08: 0000000000000001 R09: 0000000000000000
[  516.583549][ T9899] R10: 0000000000001508 R11: 0000000000000246 R12: 0000000000000000
[  516.583574][ T9899] R13: 00007f392b826038 R14: 00007fff656ee6a0 R15: 00007fff656ee788
[  516.583627][ T9899]  </TASK>
[  516.849808][ T9295] usb 7-1: USB disconnect, device number 14
[  516.870426][ T8525] hfsplus: walked past end of dir
[  516.959432][ T9896] fido_id[9896]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  517.139055][ T9908] loop5: detected capacity change from 0 to 128
[  517.158974][ T9908] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  517.184151][ T9908] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  517.446334][ T9911] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816)
[  518.548052][ T9923] FAULT_INJECTION: forcing a failure.
[  518.548052][ T9923] name failslab, interval 1, probability 0, space 0, times 0
[  518.548098][ T9923] CPU: 0 UID: 0 PID: 9923 Comm: syz.6.1040 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  518.548143][ T9923] Tainted: [L]=SOFTLOCKUP
[  518.548154][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  518.548173][ T9923] Call Trace:
[  518.548183][ T9923]  <TASK>
[  518.548194][ T9923]  dump_stack_lvl+0x100/0x190
[  518.548242][ T9923]  should_fail_ex.cold+0x5/0xa
[  518.548276][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.548320][ T9923]  should_failslab+0xc2/0x120
[  518.548353][ T9923]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  518.548405][ T9923]  ? hugetlbfs_alloc_inode+0x8c/0x1d0
[  518.548462][ T9923]  hugetlbfs_alloc_inode+0x8c/0x1d0
[  518.548516][ T9923]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  518.548568][ T9923]  alloc_inode+0x68/0x250
[  518.548612][ T9923]  new_inode+0x22/0x1c0
[  518.548652][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.548696][ T9923]  hugetlbfs_get_inode+0x39a/0x700
[  518.548752][ T9923]  hugetlb_file_setup+0x15b/0x5b0
[  518.548786][ T9923]  ksys_mmap_pgoff+0x242/0x610
[  518.548838][ T9923]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  518.548898][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.548935][ T9923]  ? xfd_validate_state+0x129/0x190
[  518.548973][ T9923]  __x64_sys_mmap+0x125/0x190
[  518.549012][ T9923]  do_syscall_64+0x123/0x790
[  518.549047][ T9923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.549079][ T9923] RIP: 0033:0x7f709b19e159
[  518.549105][ T9923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.549133][ T9923] RSP: 002b:00007f709c154028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  518.549162][ T9923] RAX: ffffffffffffffda RBX: 00007f709b425fa0 RCX: 00007f709b19e159
[  518.549182][ T9923] RDX: 000000000200000e RSI: 0000000000800000 RDI: 0000200000000000
[  518.549201][ T9923] RBP: 00007f709b23506b R08: ffffffffffffffff R09: 0000000000000000
[  518.549220][ T9923] R10: 000000000006c033 R11: 0000000000000246 R12: 0000000000000000
[  518.549238][ T9923] R13: 00007f709b426038 R14: 00007f709b425fa0 R15: 00007ffe4fa081f8
[  518.549277][ T9923]  </TASK>
[  520.494996][ T9939] syz_tun: entered allmulticast mode
[  520.539364][ T9938] syz_tun: left allmulticast mode
[  520.830332][ T9950] fuse: fd is not a fuse device
[  521.713126][ T9959] loop5: detected capacity change from 0 to 512
[  521.736239][ T9959] EXT4-fs (loop5): invalid journal inode
[  521.736342][ T9959] EXT4-fs (loop5): can't get journal size
[  521.788229][ T9959] EXT4-fs (loop5): 1 truncate cleaned up
[  521.823084][ T9959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.142242][ T9959] loop5: detected capacity change from 512 to 64
[  522.358646][ T5615] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 1: comm syz-executor: error -ENOMEM reading directory block
[  522.723593][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.625602][ T9989] fuse: Bad value for 'fd'
[  524.054451][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  524.062258][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  524.063542][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  524.085942][ T9295] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  524.276642][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  524.333667][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  524.745183][ T9295] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  524.777406][ T9295] usb 3-1: config 0 interface 0 has no altsetting 0
[  524.777473][ T9295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.820283][ T9295] usb 3-1: config 0 descriptor??
[  525.367157][ T1204] bridge_slave_1: left allmulticast mode
[  525.367196][ T1204] bridge_slave_1: left promiscuous mode
[  525.367517][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.399821][ T1204] bridge_slave_0: left allmulticast mode
[  525.399865][ T1204] bridge_slave_0: left promiscuous mode
[  525.411479][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.911882][ T9295] usb 3-1: string descriptor 0 read error: -71
[  525.926752][ T9295] usbhid 3-1:0.0: can't add hid device: -71
[  525.926884][ T9295] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  525.950489][ T9295] usb 3-1: USB disconnect, device number 21
[  526.090148][ T1204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.099169][ T1204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.141772][ T1204] bond0 (unregistering): Released all slaves
[  526.535690][ T5620] Bluetooth: hci2: command tx timeout
[  528.197498][T10041] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.201162][T10041] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.465015][T10051] loop2: detected capacity change from 0 to 16
[  528.472192][T10051] erofs (device loop2): mounted with root inode @ nid 36.
[  529.751767][ T5620] Bluetooth: hci2: command tx timeout
[  530.085182][T10041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.138296][T10041] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.595701][   T60] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.604717][ T3010] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.604796][ T3010] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.607566][ T3010] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.647540][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13
[  530.716809][ T1204] hsr_slave_0: left promiscuous mode
[  530.770372][ T1204] hsr_slave_1: left promiscuous mode
[  530.773147][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.793883][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_1
[  531.639046][ T1204] team0 (unregistering): Port device team_slave_1 removed
[  531.689280][ T1204] team0 (unregistering): Port device team_slave_0 removed
[  531.804938][ T5627] Bluetooth: hci2: command tx timeout
[  533.472447][T10118] fuse: Bad value for 'fd'
[  533.885241][ T5627] Bluetooth: hci2: command tx timeout
[  533.955148][T10001] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.955287][T10001] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.955472][T10001] bridge_slave_0: entered allmulticast mode
[  533.985822][T10001] bridge_slave_0: entered promiscuous mode
[  533.997916][T10001] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.998122][T10001] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.998302][T10001] bridge_slave_1: entered allmulticast mode
[  534.002200][   T30] audit: type=1800 audit(1790225688.447:51): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1085" name="nullb0" dev="tmpfs" ino=1235 res=0 errno=0
[  534.004213][T10001] bridge_slave_1: entered promiscuous mode
[  534.142084][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.163289][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.248294][T10001] team0: Port device team_slave_0 added
[  534.261733][T10001] team0: Port device team_slave_1 added
[  534.403412][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.403442][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  534.403491][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.415310][T10001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.415333][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  534.415380][T10001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  534.792707][T10001] hsr_slave_0: entered promiscuous mode
[  534.799964][T10001] hsr_slave_1: entered promiscuous mode
[  534.804465][T10001] debugfs: 'hsr0' already exists in 'hsr'
[  534.804496][T10001] Cannot create hsr debugfs directory
[  534.813305][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14
[  534.989097][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  534.991090][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  534.995571][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  534.996707][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  534.999188][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  536.263416][T10162] loop8: detected capacity change from 0 to 8
[  537.088395][ T5627] Bluetooth: hci6: command tx timeout
[  537.537230][   T60] IPVS: starting estimator thread 0...
[  537.625170][T10192] IPVS: using max 22 ests per chain, 52800 per kthread
[  539.177342][ T5627] Bluetooth: hci6: command tx timeout
[  539.241003][T10159] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.241356][T10159] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.480659][T10159] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.490573][T10159] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.878055][ T6085] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  539.878117][ T6085] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.878213][ T6085] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  539.878265][ T6085] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.878326][ T6085] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  539.878374][ T6085] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.878433][ T6085] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  539.878481][ T6085] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.141834][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'.
[  540.514445][T10212] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  541.245503][ T5627] Bluetooth: hci6: command tx timeout
[  542.295394][T10237] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  543.167913][T10249] loop2: detected capacity change from 0 to 2640
[  543.173004][T10249] buffer_io_error: 26 callbacks suppressed
[  543.173086][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.173281][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.173524][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.173640][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.175305][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.175848][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.176174][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.176307][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.176351][T10249] ldm_validate_partition_table(): Disk read failed.
[  543.176545][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.176700][T10249] Buffer I/O error on dev loop2, logical block 0, async page read
[  543.176950][T10249] Dev loop2: unable to read RDB block 0
[  543.178106][T10249]  loop2: unable to read partition table
[  543.180451][T10249] loop_reread_partitions: partition scan of loop2 (3Ÿ¾‚³˜) failed (rc=-5)
[  543.334261][ T5627] Bluetooth: hci6: command tx timeout
[  546.336684][ T6404] bridge_slave_1: left allmulticast mode
[  546.336725][ T6404] bridge_slave_1: left promiscuous mode
[  546.336982][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.343956][ T6404] bridge_slave_0: left allmulticast mode
[  546.343991][ T6404] bridge_slave_0: left promiscuous mode
[  546.348437][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.621598][ T6404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  546.623713][ T6404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  546.624743][ T6404] bond0 (unregistering): Released all slaves
[  546.795649][ T6404] tipc: Left network mode
[  546.796252][T10001] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  546.833664][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  546.852943][T10001] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  546.887709][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  546.888801][T10001] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  546.909041][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  546.998789][T10001] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  547.003383][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  547.272756][T10136] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.272921][T10136] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.273109][T10136] bridge_slave_0: entered allmulticast mode
[  547.291038][T10136] bridge_slave_0: entered promiscuous mode
[  547.320095][T10136] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.320230][T10136] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.320414][T10136] bridge_slave_1: entered allmulticast mode
[  547.324666][T10136] bridge_slave_1: entered promiscuous mode
[  547.455991][T10136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  547.476439][T10136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  547.705316][T10136] team0: Port device team_slave_0 added
[  547.747709][T10136] team0: Port device team_slave_1 added
[  547.825845][ T6404] hsr_slave_0: left promiscuous mode
[  547.827128][ T6404] hsr_slave_1: left promiscuous mode
[  547.828135][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0
[  547.829193][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.190560][ T6404] team0 (unregistering): Port device team_slave_1 removed
[  548.214621][ T6404] team0 (unregistering): Port device team_slave_0 removed
[  548.451848][T10136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.451876][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.451939][T10136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.457691][T10136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  548.457714][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.457761][T10136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  548.574014][T10136] hsr_slave_0: entered promiscuous mode
[  548.575637][T10136] hsr_slave_1: entered promiscuous mode
[  548.576525][T10136] debugfs: 'hsr0' already exists in 'hsr'
[  548.576561][T10136] Cannot create hsr debugfs directory
[  549.011853][T10001] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.064597][T10001] 8021q: adding VLAN 0 to HW filter on device team0
[  549.086245][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.086385][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.113557][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.113686][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state
[  549.337495][T10136] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  549.344064][T10136] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  549.352833][T10136] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  549.369508][T10136] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  549.373718][T10136] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  549.407743][T10136] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  549.408753][T10136] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  549.434963][T10136] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  549.647737][T10136] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.664310][T10136] 8021q: adding VLAN 0 to HW filter on device team0
[  549.690458][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.690662][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.709416][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.709566][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  550.298814][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  550.680892][T10136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.032269][T10001] veth0_vlan: entered promiscuous mode
[  551.041985][T10001] veth1_vlan: entered promiscuous mode
[  551.097450][T10001] veth0_macvtap: entered promiscuous mode
[  551.103412][T10001] veth1_macvtap: entered promiscuous mode
[  551.127090][T10001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.146605][T10001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.190574][ T6404] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.253859][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13
[  551.305449][ T6085] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.305517][ T6085] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.309435][ T6085] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.479156][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.479191][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.557041][ T6085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.557076][ T6085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.623795][T10136] veth0_vlan: entered promiscuous mode
[  551.658173][T10136] veth1_vlan: entered promiscuous mode
[  551.778326][  T142] IPVS: stopping estimator thread 0...
[  551.814123][  T142] IPVS: starting estimator thread 0...
[  551.823598][   T12] IPVS: stopping estimator thread 0...
[  551.833272][   T12] IPVS: starting estimator thread 0...
[  551.839970][T10136] veth0_macvtap: entered promiscuous mode
[  551.872349][T10136] veth1_macvtap: entered promiscuous mode
[  551.915414][T10384] IPVS: using max 23 ests per chain, 55200 per kthread
[  551.918947][T10389] fuse: fd is not a fuse device
[  551.949453][T10136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.997939][T10136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  552.055744][  T142] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.055818][  T142] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  552.055879][  T142] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  552.055939][  T142] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.155447][ T9164] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  552.304964][ T9164] usb 6-1: Using ep0 maxpacket: 16
[  552.306034][ T9164] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  552.307566][ T9164] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  552.307615][ T9164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  552.313005][ T9164] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.313046][ T9164] usb 6-1: Product: syz
[  552.313082][ T9164] usb 6-1: Manufacturer: syz
[  552.313111][ T9164] usb 6-1: SerialNumber: syz
[  552.379071][ T9164] usb 6-1: config 0 descriptor??
[  552.413283][ T9164] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  552.413343][ T9164] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  552.805275][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14
[  553.021382][ T9164] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  553.037567][ T9164] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  553.084586][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.084621][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.223210][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.223245][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.527041][T10411] loop2: detected capacity change from 0 to 128
[  553.536052][T10411] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  553.561263][T10411] FAT-fs (loop2): bogus number of reserved sectors
[  553.561339][T10411] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  553.561371][T10411] FAT-fs (loop2): Can't find a valid FAT filesystem
[  553.833794][ T9164] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[  554.077295][ T9164] em28xx 6-1:0.0: AC97 command still being executed: not handled properly!
[  554.077333][ T9164] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  554.270841][ T9164] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  554.271299][ T9164] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  554.274188][ T9164] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  554.274607][ T9164] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  554.349576][ T9164] usb 6-1: USB disconnect, device number 13
[  554.995042][ T5624] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  555.147885][ T5624] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  555.151211][ T5624] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  555.152445][ T5624] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  555.152501][ T5624] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  555.152564][ T5624] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.506644][T10437] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.507320][T10437] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.624098][T10449] overlayfs: failed to clone upperpath
[  556.863250][ T5624] cxacru 9-1:1.0: send of cm 0x84 failed (-71)
[  556.863304][ T5624] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71
[  556.863863][ T5624] cxacru 9-1:1.0: send of cm 0x88 failed (-71)
[  556.863942][ T5624] ATM dev 0: poll status: error -71
[  556.863968][ T5624] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume
[  556.863996][ T5624] ATM dev 0: usbatm_submit_urb: urb 0xffff888055f89000 submission failed (-8)!
[  556.864379][ T5624] ATM dev 0: usbatm_submit_urb: urb 0xffff888055f89e00 submission failed (-8)!
[  556.864417][ T5624] ATM dev 0: usbatm_submit_urb: urb 0xffff888055f89a00 submission failed (-8)!
[  556.864453][ T5624] ATM dev 0: usbatm_submit_urb: urb 0xffff888055f89600 submission failed (-8)!
[  556.954189][ T5624] usb 9-1: USB disconnect, device number 4
[  556.965263][    C0] ATM dev 0: usbatm_submit_urb: urb 0xffff888055f89600 submission failed (-19)!
[  557.060864][T10455] loop2: detected capacity change from 0 to 128
[  557.070954][T10455] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  557.099030][T10455] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  557.202640][T10458] fuse: fd is not a fuse device
[  557.307727][T10461] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816)
[  557.327340][T10461] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816)
[  558.078085][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  558.114290][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  560.037079][T10478] loop5: detected capacity change from 0 to 4096
[  560.129501][T10478] ntfs3(loop5): Failed to initialize $Secure::$SII (-22).
[  560.129643][T10478] ntfs3(loop5): Failed to initialize $Secure (-22).
[  560.671419][T10478] loop5: detected capacity change from 0 to 4096
[  560.684008][T10478] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  560.861911][T10478] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  560.971521][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15
[  561.005567][ T6404] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  561.005648][ T6404] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  561.005708][ T6404] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  561.005768][ T6404] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.478264][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  565.019737][T10543] overlayfs: failed to clone upperpath
[  565.995542][T10554] loop9: detected capacity change from 0 to 4096
[  566.037771][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16
[  566.212482][T10554] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  566.258160][T10563] fuse: fd is not a fuse device
[  566.512446][T10554] ntfs3(loop9): Failed to load $Extend (-22).
[  566.512507][T10554] ntfs3(loop9): Failed to initialize $Extend.
[  567.062479][   T30] audit: type=1804 audit(1790225721.507:52): pid=10554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1158" name=2F6E6577726F6F742F342F2E022F66696C6531 dev="loop9" ino=30 res=1 errno=0
[  567.452025][    C1] Unknown status report in ack skb
[  572.724599][T10627] loop5: detected capacity change from 0 to 4096
[  572.768761][T10627] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  573.062910][T10627] ntfs3(loop5): Failed to load $Extend (-22).
[  573.062948][T10627] ntfs3(loop5): Failed to initialize $Extend.
[  577.831286][T10667] overlayfs: failed to clone upperpath
[  582.611272][T10702] loop5: detected capacity change from 0 to 2048
[  582.827812][T10702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  583.209095][T10711] syzkaller0: entered promiscuous mode
[  583.209139][T10711] syzkaller0: entered allmulticast mode
[  583.272577][T10711] tipc: Started in network mode
[  583.272628][T10711] tipc: Node identity 120da7458c5, cluster identity 4711
[  583.273026][T10711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  583.295426][T10708] tipc: Resetting bearer <eth:syzkaller0>
[  583.474242][T10001] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.554631][T10708] tipc: Disabling bearer <eth:syzkaller0>
[  586.386652][T10755] fuse: fd is not a fuse device
[  587.297285][T10760] binder_alloc: 10759: pid 10759 spamming oneway? 1 buffers allocated for a total size of 4096
[  587.519835][T10765] loop2: detected capacity change from 0 to 1024
[  592.700856][T10808] ip6gre1: entered allmulticast mode
[  592.716189][ T3010] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  593.050242][T10818] syzkaller0: entered promiscuous mode
[  593.050277][T10818] syzkaller0: entered allmulticast mode
[  597.005145][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  598.551313][T10868] tpm_tis pcspkr: no memory resource defined
[  598.652837][T10872] fuse: fd is not a fuse device
[  598.666285][ T9329] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  598.837653][ T9329] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 1.00
[  598.840080][ T9329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.702124][ T9329] input: USB Touchscreen 0596:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input32
[  601.237618][ T9329] usb 6-1: USB disconnect, device number 14
[  605.965104][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  608.134556][T10944] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  613.228440][T10970] loop2: detected capacity change from 0 to 2048
[  613.285735][T10970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.285863][T10970] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  614.342696][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.753285][T10991] syz.2.1269 (10991): drop_caches: 2
[  621.367630][T11021] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  621.414713][T11019] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  621.428502][T11019] syzkaller0: entered promiscuous mode
[  621.428536][T11019] syzkaller0: entered allmulticast mode
[  621.519803][T11019] tipc: Resetting bearer <eth:syzkaller0>
[  621.533236][T11016] tipc: Resetting bearer <eth:syzkaller0>
[  621.676558][T11025] loop5: detected capacity change from 0 to 1024
[  621.752933][T11016] tipc: Disabling bearer <eth:syzkaller0>
[  621.789966][   T30] audit: type=1800 audit(1790225776.237:53): pid=11025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1281" name="file1" dev="loop5" ino=20 res=0 errno=0
[  622.271641][T11032] syzkaller0: entered promiscuous mode
[  622.271676][T11032] syzkaller0: entered allmulticast mode
[  622.605087][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  623.744505][T11051] loop8: detected capacity change from 0 to 4096
[  623.952688][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  628.111637][T11074] loop8: detected capacity change from 0 to 32768
[  628.121471][T11074] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1294 (11074)
[  628.128055][T11074] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  628.128103][T11074] BTRFS info (device loop8): using sha256 checksum algorithm
[  628.263391][T11074] BTRFS info (device loop8): enabling ssd optimizations
[  628.263424][T11074] BTRFS info (device loop8): turning on sync discard
[  628.263448][T11074] BTRFS info (device loop8): enabling free space tree
[  628.263473][T11074] BTRFS info (device loop8): use zlib compression, level 3
[  631.613986][ T8525] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  635.821647][T11131] Config c/1 of g1 needs at least one function.
[  635.821811][T11131] udc usbip-vudc.0: failed to start g1: -22
[  635.821847][T11131] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  635.897644][T11131] UDC core: g1: couldn't find an available UDC or it's busy
[  638.952885][T11150] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816)
[  638.998717][T11150] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816)
[  639.042427][T11155] loop2: detected capacity change from 0 to 164
[  640.425272][T11161] rock: directory entry would overflow storage
[  640.425288][T11161] rock: sig=0x4f50, size=4, remaining=3
[  640.425308][T11161] iso9660: Corrupted directory entry in block 5 of inode 1792
[  641.237765][T11166] fuse: fd is not a fuse device
[  646.325203][   T30] audit: type=1807 audit(1790225800.767:54): UNKNOWN= res=0
[  646.354746][   T30] audit: type=1802 audit(1790225800.797:55): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="iou-wrk-11191" res=0 errno=0
[  646.397559][T11190] ima: policy update failed
[  646.397757][   T30] audit: type=1802 audit(1790225800.847:56): pid=11190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1319" res=0 errno=0
[  646.603423][T11201] loop8: detected capacity change from 0 to 8
[  646.619808][T11201] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  647.033839][T11201] syz.8.1320 (11201): drop_caches: 2
[  647.611340][T11187] udevd[11187]: incorrect cramfs checksum on /dev/loop8
[  648.794426][T11187] udevd[11187]: incorrect cramfs checksum on /dev/loop8
[  650.279171][T11214] FAULT_INJECTION: forcing a failure.
[  650.279171][T11214] name failslab, interval 1, probability 0, space 0, times 0
[  650.279218][T11214] CPU: 0 UID: 0 PID: 11214 Comm: syz.8.1322 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  650.279260][T11214] Tainted: [L]=SOFTLOCKUP
[  650.279271][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  650.279296][T11214] Call Trace:
[  650.279306][T11214]  <TASK>
[  650.279318][T11214]  dump_stack_lvl+0x100/0x190
[  650.279365][T11214]  should_fail_ex.cold+0x5/0xa
[  650.279399][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.279440][T11214]  should_failslab+0xc2/0x120
[  650.279472][T11214]  __kmalloc_cache_noprof+0x91/0x6d0
[  650.279510][T11214]  ? nf_register_net_hooks+0xb1/0xd0
[  650.279556][T11214]  ? ip_vs_add_service+0x565/0x2240
[  650.279599][T11214]  ip_vs_add_service+0x565/0x2240
[  650.279633][T11214]  ? __might_fault+0xc5/0x140
[  650.279680][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.279754][T11214]  ? do_ip_vs_set_ctl+0xb86/0xc90
[  650.279803][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.279849][T11214]  do_ip_vs_set_ctl+0xb86/0xc90
[  650.279907][T11214]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[  650.279953][T11214]  ? rcu_is_watching+0x13/0xc0
[  650.280007][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.280070][T11214]  ? find_held_lock+0x2b/0x80
[  650.280128][T11214]  ? nf_sockopt_find.isra.0+0x222/0x290
[  650.280198][T11214]  ? nf_sockopt_find.isra.0+0x222/0x290
[  650.280264][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.280329][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.280394][T11214]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  650.280474][T11214]  ? nf_setsockopt+0x8d/0xf0
[  650.280539][T11214]  nf_setsockopt+0x8d/0xf0
[  650.280610][T11214]  ip_setsockopt+0xcb/0xf0
[  650.280669][T11214]  sctp_setsockopt+0x161/0xb370
[  650.280735][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.280789][T11214]  ? __fget_files+0x34/0x3d0
[  650.280831][T11214]  ? __pfx_sctp_setsockopt+0x10/0x10
[  650.280914][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.280965][T11214]  ? aa_sock_opt_perm+0x114/0x1e0
[  650.281018][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.281070][T11214]  ? sock_common_setsockopt+0x2e/0xf0
[  650.281114][T11214]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  650.281163][T11214]  do_sock_setsockopt+0xf3/0x1d0
[  650.281208][T11214]  __sys_setsockopt+0x195/0x220
[  650.281273][T11214]  __x64_sys_setsockopt+0xbd/0x160
[  650.281336][T11214]  ? do_syscall_64+0xae/0x790
[  650.281374][T11214]  ? srso_alias_return_thunk+0x5/0xfbef5
[  650.281420][T11214]  ? lockdep_hardirqs_on+0x7d/0x110
[  650.281458][T11214]  do_syscall_64+0x123/0x790
[  650.281503][T11214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.281542][T11214] RIP: 0033:0x7fc78999e159
[  650.281571][T11214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.281609][T11214] RSP: 002b:00007fc78a8f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  650.281647][T11214] RAX: ffffffffffffffda RBX: 00007fc789c25fa0 RCX: 00007fc78999e159
[  650.281671][T11214] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005
[  650.281695][T11214] RBP: 00007fc789a3506b R08: 000000000000002c R09: 0000000000000000
[  650.281719][T11214] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000
[  650.281744][T11214] R13: 00007fc789c26038 R14: 00007fc789c25fa0 R15: 00007ffee012d5a8
[  650.281793][T11214]  </TASK>
[  652.241415][T11224] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  652.337259][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  654.651979][T11246] netlink: 'syz.5.1334': attribute type 1 has an invalid length.
[  655.885133][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  656.575469][T11246] 8021q: adding VLAN 0 to HW filter on device bond1
[  656.733852][T11255] bond1: (slave gretap1): making interface the new active one
[  656.756791][T11255] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  658.029437][   T30] audit: type=1800 audit(1790225812.467:57): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1338" name=08 dev="sda1" ino=2063 res=0 errno=0
[  662.241115][T11286] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  663.415875][ T5627] Bluetooth: hci6: command 0x0406 tx timeout
[  663.441681][T11273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  671.985999][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  672.008085][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  672.014071][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  672.030266][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  672.032513][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  672.149867][T11305] syzkaller0: entered promiscuous mode
[  672.149902][T11305] syzkaller0: entered allmulticast mode
[  672.457164][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  672.462028][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  672.474523][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  672.492362][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  672.493194][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  674.125907][ T5627] Bluetooth: hci1: command tx timeout
[  674.320271][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  674.342511][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  674.357308][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  674.358445][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  674.373871][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  674.647967][ T5627] Bluetooth: hci7: command tx timeout
[  676.377211][T11337] Bluetooth: hci1: command tx timeout
[  676.685062][T11337] Bluetooth: hci7: command tx timeout
[  676.685131][T11337] Bluetooth: hci6: command tx timeout
[  679.683353][ T5636] Bluetooth: hci1: command tx timeout
[  679.683410][ T5636] Bluetooth: hci7: command tx timeout
[  679.683410][T11337] Bluetooth: hci6: command tx timeout
[  681.730803][ T5627] Bluetooth: hci6: command tx timeout
[  681.736392][ T5627] Bluetooth: hci1: command tx timeout
[  681.742664][T11337] Bluetooth: hci7: command tx timeout
[  683.051883][T11397] tipc: Started in network mode
[  683.051939][T11397] tipc: Node identity e24e827e8ff2, cluster identity 4711
[  683.052156][T11397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  683.112082][T11397] syzkaller0: entered promiscuous mode
[  683.112118][T11397] syzkaller0: entered allmulticast mode
[  683.534771][T11401] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  683.596739][T11401] loop0: detected capacity change from 0 to 65536
[  683.805386][ T5636] Bluetooth: hci6: command tx timeout
[  683.928648][T11397] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  684.038042][T11399] tipc: Resetting bearer <eth:syzkaller0>
[  684.130034][T11396] tipc: Resetting bearer <eth:syzkaller0>
[  684.263171][T11396] tipc: Disabling bearer <eth:syzkaller0>
[  684.434550][ T9331] tipc: Node number set to 1841070718
[  685.292881][ T5871] bridge_slave_1: left allmulticast mode
[  685.292955][ T5871] bridge_slave_1: left promiscuous mode
[  685.293223][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.339189][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  685.396165][ T5871] bridge_slave_0: left allmulticast mode
[  685.396262][ T5871] bridge_slave_0: left promiscuous mode
[  685.396568][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.611558][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  687.669066][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  687.709307][ T5871] bond0 (unregistering): Released all slaves
[  691.552785][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17
[  695.113581][ T5871] hsr_slave_0: left promiscuous mode
[  695.131270][ T5871] hsr_slave_1: left promiscuous mode
[  695.141592][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  695.175752][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  696.244111][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  696.320142][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  698.711424][T11312] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.711545][T11312] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.711700][T11312] bridge_slave_0: entered allmulticast mode
[  698.720058][T11312] bridge_slave_0: entered promiscuous mode
[  698.733656][T11312] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.733828][T11312] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.733985][T11312] bridge_slave_1: entered allmulticast mode
[  698.740923][T11312] bridge_slave_1: entered promiscuous mode
[  699.314295][T11494] program syz.5.1373 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  699.368045][T11312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.371878][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18
[  699.913616][T11494] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.914327][T11494] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.410278][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  701.455029][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  702.403005][T11312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.572772][T11312] team0: Port device team_slave_0 added
[  704.707112][T11312] team0: Port device team_slave_1 added
[  704.848552][T11306] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.848887][T11306] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.849062][T11306] bridge_slave_0: entered allmulticast mode
[  704.853164][T11306] bridge_slave_0: entered promiscuous mode
[  705.080429][T11306] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.084166][T11306] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.084370][T11306] bridge_slave_1: entered allmulticast mode
[  705.088482][T11306] bridge_slave_1: entered promiscuous mode
[  705.205750][T11312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.205778][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.205825][T11312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.216317][ T6404] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.220429][   T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.220599][   T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.220664][   T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.225948][T11312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  705.225973][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.226020][T11312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.274266][T11306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.278324][T11306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  707.180804][T11306] team0: Port device team_slave_0 added
[  707.267920][T11306] team0: Port device team_slave_1 added
[  707.580644][T11329] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.583057][T11329] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.583246][T11329] bridge_slave_0: entered allmulticast mode
[  707.608030][T11329] bridge_slave_0: entered promiscuous mode
[  707.796384][T11329] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.796538][T11329] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.796734][T11329] bridge_slave_1: entered allmulticast mode
[  707.800860][T11329] bridge_slave_1: entered promiscuous mode
[  707.982693][T11312] hsr_slave_0: entered promiscuous mode
[  707.989711][T11312] hsr_slave_1: entered promiscuous mode
[  707.996858][T11312] debugfs: 'hsr0' already exists in 'hsr'
[  707.996890][T11312] Cannot create hsr debugfs directory
[  707.997839][T11306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  707.997861][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.997908][T11306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  709.061859][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.084287][T11306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  709.084333][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  709.084382][T11306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  709.217384][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  709.534033][T11329] team0: Port device team_slave_0 added
[  709.563035][T11562] 
[  709.565483][T11562] ======================================================
[  709.572789][T11562] WARNING: possible circular locking dependency detected
[  709.580059][T11562] syzkaller #0 Tainted: G             L     
[  709.586058][T11562] ------------------------------------------------------
[  709.593088][T11562] syz.8.1388/11562 is trying to acquire lock:
[  709.599174][T11562] ffff888024935dc0 (&sb->s_type->i_mutex_key#34){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0
[  709.610681][T11562] 
[  709.610681][T11562] but task is already holding lock:
[  709.618061][T11562] ffffffff90483240 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610
[  709.627683][T11562] 
[  709.627683][T11562] which lock already depends on the new lock.
[  709.627683][T11562] 
[  709.638206][T11562] 
[  709.638206][T11562] the existing dependency chain (in reverse order) is:
[  709.647256][T11562] 
[  709.647256][T11562] -> #2 (tpg_instances_lock){+.+.}-{4:4}:
[  709.655218][T11562]        lock_acquire+0x1d1/0x380
[  709.660366][T11562]        __mutex_lock+0x1a4/0x1bd0
[  709.665527][T11562]        usbg_make_tpg+0x10b/0x610
[  709.670694][T11562]        target_fabric_make_tpg+0xab/0x8c0
[  709.676671][T11562]        configfs_mkdir+0x525/0xd40
[  709.681928][T11562]        vfs_mkdir+0x364/0x850
[  709.686737][T11562]        filename_mkdirat+0x48b/0x5e0
[  709.692159][T11562]        __x64_sys_mkdirat+0x89/0xc0
[  709.697485][T11562]        do_syscall_64+0x123/0x790
[  709.702626][T11562]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.709168][T11562] 
[  709.709168][T11562] -> #1 (&subsys->su_mutex){+.+.}-{4:4}:
[  709.713713][T11306] hsr_slave_0: entered promiscuous mode
[  709.719327][T11306] hsr_slave_1: entered promiscuous mode
[  709.721365][T11306] debugfs: 'hsr0' already exists in 'hsr'
[  709.721392][T11306] Cannot create hsr debugfs directory
[  709.740571][T11562]        lock_acquire+0x1d1/0x380
[  709.745621][T11562]        __mutex_lock+0x1a4/0x1bd0
[  709.750945][T11562]        configfs_rmdir+0x5ae/0x950
[  709.756254][T11562]        vfs_rmdir+0x328/0x8a0
[  709.761066][T11562]        filename_rmdir+0x31a/0x5c0
[  709.766299][T11562]        __x64_sys_rmdir+0x46/0x70
[  709.771482][T11562]        do_syscall_64+0x123/0x790
[  709.776808][T11562]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.783503][T11562] 
[  709.783503][T11562] -> #0 (&sb->s_type->i_mutex_key#34){++++}-{4:4}:
[  709.792298][T11562]        check_prev_add+0xeb/0xe60
[  709.797616][T11562]        __lock_acquire+0x1528/0x1f40
[  709.803206][T11562]        lock_acquire+0x1d1/0x380
[  709.808364][T11562]        down_write+0x8b/0x1f0
[  709.813211][T11562]        configfs_depend_item_unlocked+0xf3/0x6a0
[  709.819672][T11562]        usbg_make_tpg+0x251/0x610
[  709.824844][T11562]        target_fabric_make_tpg+0xab/0x8c0
[  709.828300][T11329] team0: Port device team_slave_1 added
[  709.836313][T11562]        configfs_mkdir+0x525/0xd40
[  709.841656][T11562]        vfs_mkdir+0x364/0x850
[  709.846558][T11562]        filename_mkdirat+0x48b/0x5e0
[  709.852013][T11562]        __x64_sys_mkdirat+0x89/0xc0
[  709.857416][T11562]        do_syscall_64+0x123/0x790
[  709.862759][T11562]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.869450][T11562] 
[  709.869450][T11562] other info that might help us debug this:
[  709.869450][T11562] 
[  709.879847][T11562] Chain exists of:
[  709.879847][T11562]   &sb->s_type->i_mutex_key#34 --> &subsys->su_mutex --> tpg_instances_lock
[  709.879847][T11562] 
[  709.894964][T11562]  Possible unsafe locking scenario:
[  709.894964][T11562] 
[  709.902428][T11562]        CPU0                    CPU1
[  709.907918][T11562]        ----                    ----
[  709.913281][T11562]   lock(tpg_instances_lock);
[  709.917979][T11562]                                lock(&subsys->su_mutex);
[  709.925284][T11562]                                lock(tpg_instances_lock);
[  709.932509][T11562]   lock(&sb->s_type->i_mutex_key#34);
[  709.938008][T11562] 
[  709.938008][T11562]  *** DEADLOCK ***
[  709.938008][T11562] 
[  709.946154][T11562] locks held by syz.8.1388/11562: 4, last CPU#0:
[  709.952699][T11562]  #0: ffff88801e3de460 (sb_writers#23){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[  709.962624][T11562]  #1: ffff88807a572280 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400
[  709.973519][T11562]  #2: ffffffff8ffb60a8 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40
[  709.983465][T11562]  #3: ffffffff90483240 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610
[  709.993349][T11562] 
[  709.993349][T11562] stack backtrace:
[  709.999444][T11562] CPU: 0 UID: 0 PID: 11562 Comm: syz.8.1388 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  710.010595][T11562] Tainted: [L]=SOFTLOCKUP
[  710.015140][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  710.025301][T11562] Call Trace:
[  710.028767][T11562]  <TASK>
[  710.031705][T11562]  dump_stack_lvl+0x100/0x190
[  710.036422][T11562]  print_circular_bug.cold+0x178/0x1be
[  710.041968][T11562]  check_noncircular+0x146/0x160
[  710.047057][T11562]  check_prev_add+0xeb/0xe60
[  710.051759][T11562]  __lock_acquire+0x1528/0x1f40
[  710.056724][T11562]  ? srso_alias_return_thunk+0x5/0xfbef5
[  710.062422][T11562]  ? rcu_is_watching+0x13/0xc0
[  710.067410][T11562]  lock_acquire+0x1d1/0x380
[  710.071959][T11562]  ? configfs_depend_item_unlocked+0xf3/0x6a0
[  710.078244][T11562]  ? __pfx___might_resched+0x10/0x10
[  710.083577][T11562]  down_write+0x8b/0x1f0
[  710.087847][T11562]  ? configfs_depend_item_unlocked+0xf3/0x6a0
[  710.093956][T11562]  ? __pfx_down_write+0x10/0x10
[  710.099364][T11562]  ? kstrtou16+0xde/0x130
[  710.103735][T11562]  configfs_depend_item_unlocked+0xf3/0x6a0
[  710.109674][T11562]  usbg_make_tpg+0x251/0x610
[  710.114569][T11562]  ? __pfx_usbg_make_tpg+0x10/0x10
[  710.119768][T11562]  ? srso_alias_return_thunk+0x5/0xfbef5
[  710.125529][T11562]  ? srso_alias_return_thunk+0x5/0xfbef5
[  710.131214][T11562]  ? find_held_lock+0x2b/0x80
[  710.136008][T11562]  ? __pfx_usbg_make_tpg+0x10/0x10
[  710.141158][T11562]  ? __pfx_target_fabric_make_tpg+0x10/0x10
[  710.147066][T11562]  target_fabric_make_tpg+0xab/0x8c0
[  710.152374][T11562]  ? __pfx_target_fabric_make_tpg+0x10/0x10
[  710.158292][T11562]  configfs_mkdir+0x525/0xd40
[  710.163029][T11562]  ? __pfx_configfs_mkdir+0x10/0x10
[  710.168323][T11562]  ? srso_alias_return_thunk+0x5/0xfbef5
[  710.173993][T11562]  vfs_mkdir+0x364/0x850
[  710.178273][T11562]  filename_mkdirat+0x48b/0x5e0
[  710.183147][T11562]  ? __pfx_filename_mkdirat+0x10/0x10
[  710.188541][T11562]  ? strncpy_from_user+0x19d/0x2d0
[  710.193697][T11562]  ? srso_alias_return_thunk+0x5/0xfbef5
[  710.199356][T11562]  ? do_getname+0x191/0x390
[  710.203896][T11562]  __x64_sys_mkdirat+0x89/0xc0
[  710.208686][T11562]  do_syscall_64+0x123/0x790
[  710.213299][T11562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.219217][T11562] RIP: 0033:0x7fc78999e159
[  710.223649][T11562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.243414][T11562] RSP: 002b:00007fc78a8f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  710.251872][T11562] RAX: ffffffffffffffda RBX: 00007fc789c25fa0 RCX: 00007fc78999e159
[  710.260129][T11562] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c
[  710.268158][T11562] RBP: 00007fc789a3506b R08: 0000000000000000 R09: 0000000000000000
[  710.276236][T11562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  710.284224][T11562] R13: 00007fc789c26038 R14: 00007fc789c25fa0 R15: 00007ffee012d5a8
[  710.292308][T11562]  </TASK>
[  710.319889][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  710.319915][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  710.319963][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  710.322508][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  710.322531][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  710.322576][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  710.378111][T11329] hsr_slave_0: entered promiscuous mode
[  710.380661][T11329] hsr_slave_1: entered promiscuous mode
[  710.381205][T11329] debugfs: 'hsr0' already exists in 'hsr'
[  710.381230][T11329] Cannot create hsr debugfs directory
[  710.662767][ T5273] 8021q: adding VLAN 0 to HW filter on device eth19
[  710.777197][ T5871] bridge_slave_1: left allmulticast mode
[  710.777235][ T5871] bridge_slave_1: left promiscuous mode
[  710.777420][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.862926][ T5871] bridge_slave_0: left allmulticast mode
[  710.862963][ T5871] bridge_slave_0: left promiscuous mode
[  710.863155][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.486956][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  711.488578][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  711.489386][ T5871] bond0 (unregistering): Released all slaves
[  711.872092][ T5871] tipc: Left network mode
[  711.874697][ T5273] 8021q: adding VLAN 0 to HW filter on device eth20
[  712.203854][ T5871] hsr_slave_0: left promiscuous mode
[  712.204421][ T5871] hsr_slave_1: left promiscuous mode
[  712.209653][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  712.226362][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  712.389390][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  712.403169][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  712.611623][ T5273] 8021q: adding VLAN 0 to HW filter on device eth21
[  712.792539][ T5871] IPVS: stop unused estimator thread 0...
[  713.087306][ T5273] 8021q: adding VLAN 0 to HW filter on device eth22
[  713.377527][ T5871] bridge_slave_1: left allmulticast mode
[  713.377563][ T5871] bridge_slave_1: left promiscuous mode
[  713.377755][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.379143][ T5871] bridge_slave_0: left allmulticast mode
[  713.379172][ T5871] bridge_slave_0: left promiscuous mode
[  713.379337][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.400183][ T5871] bridge_slave_1: left allmulticast mode
[  713.400219][ T5871] bridge_slave_1: left promiscuous mode
[  713.400407][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.412327][ T5871] bridge_slave_0: left allmulticast mode
[  713.412361][ T5871] bridge_slave_0: left promiscuous mode
[  713.412523][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.461214][ T5871] bridge_slave_1: left allmulticast mode
[  713.461251][ T5871] bridge_slave_1: left promiscuous mode
[  713.461431][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.462960][ T5871] bridge_slave_0: left allmulticast mode
[  713.462995][ T5871] bridge_slave_0: left promiscuous mode
[  713.463143][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.501680][ T5871] bridge_slave_1: left allmulticast mode
[  713.501716][ T5871] bridge_slave_1: left promiscuous mode
[  713.501897][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.503406][ T5871] bridge_slave_0: left allmulticast mode
[  713.503434][ T5871] bridge_slave_0: left promiscuous mode
[  713.503580][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.579436][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.581301][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.582475][ T5871] bond0 (unregistering): Released all slaves
[  713.739622][ T5871] bond1 (unregistering): (slave gretap1): Releasing active interface
[  713.771529][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.772917][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.773617][ T5871] bond0 (unregistering): Released all slaves
[  713.809670][ T5871] bond1 (unregistering): Released all slaves
[  713.916901][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.918093][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.918709][ T5871] bond0 (unregistering): Released all slaves
[  713.921292][ T5871] bond1 (unregistering): Released all slaves
[  713.984448][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.002855][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.003963][ T5871] bond0 (unregistering): Released all slaves
[  714.056992][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.058831][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.059812][ T5871] bond0 (unregistering): Released all slaves
[  714.063824][ T5273] 8021q: adding VLAN 0 to HW filter on device eth23
[  714.636998][ T5273] 8021q: adding VLAN 0 to HW filter on device eth24
[  715.043059][ T5871] hsr_slave_0: left promiscuous mode
[  715.043568][ T5871] hsr_slave_1: left promiscuous mode
[  715.044132][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.061630][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.080743][ T5871] hsr_slave_0: left promiscuous mode
[  715.081248][ T5871] hsr_slave_1: left promiscuous mode
[  715.081854][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.082352][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.111720][ T5871] hsr_slave_0: left promiscuous mode
[  715.112213][ T5871] hsr_slave_1: left promiscuous mode
[  715.112793][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.113263][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.143833][ T5871] hsr_slave_0: left promiscuous mode
[  715.144376][ T5871] hsr_slave_1: left promiscuous mode
[  715.155940][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.156607][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.157149][ T5871] hsr_slave_0: left promiscuous mode
[  715.157649][ T5871] hsr_slave_1: left promiscuous mode
[  715.158217][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.158753][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.221768][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  715.232815][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  715.396874][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  715.401386][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  715.582078][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  715.608709][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  715.769754][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  715.774320][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  715.880267][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  715.894773][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  715.954898][ T5273] 8021q: adding VLAN 0 to HW filter on device eth25
[  716.451813][ T5273] 8021q: adding VLAN 0 to HW filter on device eth26
[  716.916063][ T5871] IPVS: stop unused estimator thread 0...
[  716.919664][ T5273] 8021q: adding VLAN 0 to HW filter on device eth27
[  717.309659][ T5273] 8021q: adding VLAN 0 to HW filter on device eth28
[  717.673212][ T5273] 8021q: adding VLAN 0 to HW filter on device eth29
[  718.047616][ T5273] 8021q: adding VLAN 0 to HW filter on device eth30
[  718.441775][ T5273] 8021q: adding VLAN 0 to HW filter on device eth31
[  718.818226][ T5273] 8021q: adding VLAN 0 to HW filter on device eth32