last executing test programs:

16m49.313386954s ago: executing program 1 (id=19):
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x204000, 0x0)
r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40180, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

16m45.307186486s ago: executing program 1 (id=22):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)

16m41.49085139s ago: executing program 1 (id=28):
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00')
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x208, 0x4)
sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)

16m36.789960762s ago: executing program 1 (id=34):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000001380))
getdents64(r3, &(0x7f0000002000)=""/4096, 0x1000)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000640)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp860,shortname=win95,shortname=winnt,shortname=mixed.shortname=winnt,nfs,utf8=0,shortname=lower,codepage=737,uni_xlate=1,nonumtail=0,nonumtail=0,nonumtail=0,shortname=win95,utf8=0,\x00'], 0x2, 0x28c, &(0x7f0000001780)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0xe05c61, 0x0, 0x0, 0x0, &(0x7f0000000080))
chdir(0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, 0x0}}], 0x3, 0x404a810)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10)

16m35.644615426s ago: executing program 32 (id=15):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x24000080)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1)
sendmmsg$sock(r3, 0x0, 0x0, 0x4000080)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e)

16m34.240296788s ago: executing program 1 (id=39):
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0)
symlink(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
r4 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r4, 0x1, 0x0)
msgsnd(r4, 0x0, 0x2000, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="035d43ccaf6246f71a302f277ce89f7d858684cbe741723cd70f6a6e78d7435f2d88b530801e2c56890873558def984ef6d5f810c8769a960f906771dfc65c3db697be362b8b900ca975e220312789819c154831c84539a67424ec51829d0adcd6ab3a4474d194d34c71"], 0x1, 0x19d, &(0x7f0000000000)="$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")
epoll_create(0x628)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

16m30.389175161s ago: executing program 1 (id=40):
openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x49, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0)

16m14.255439361s ago: executing program 33 (id=40):
openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x49, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0)

8m7.371806041s ago: executing program 3 (id=727):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x844039, 0x0, 0x0, 0x0, &(0x7f00000000c0))
r1 = getpid()
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40)
fallocate(r4, 0x0, 0xfff, 0x9)
dup2(r2, r0)
ioctl$NBD_DISCONNECT(r4, 0xab08)
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x32d090, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$eJzs3UtsHHcdB/DvrDdrO6DUaZO2IKRGjYigEYmdpSQIEAEhlEOFInHphYOVOI2VTVo5LnIrRFyeV4499FCEwqEn1ANSEYeKckZCQhy45B6Ju08smtnZ9Tp+xJvEXRs+H2l2/jP/129+npl9ydoA/7cuvZpDqyly6fQrK+X2vbvtzr277Zv9cpLJJI2k2VuluJUUnyQX01vyuXJnPVyx3Twv3//ovVPvftDubTXrpWrf2KnfJlu2XK2XnEgyUa8fw4bxrjz2eMUg7jJhJ/uJg3HrbrI6SvfdX7fAvlX0njc3mUkOJ5mqXwekvjs0Pt3onryR7nIAAABwQD21lrWs5Mi44wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICDpP79/6JeGv3yiRT93/9vVftaVfPWuON9XB+POwAAAAAAAAAAeAJeWMtaVnKkv90tqu/8X6w2jlWPn8mbuZ2FLOVMVjKf5SxnKXNJZqr6d6rH1sr88vLS3HY9u93une5E1fPcoGeGep7bFFqxc+Tdycc+eAAAAAAAAAA4YHb4svxnubT+/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwHRTLRW1XLsX55Jo1mkqkkrbLdavLnfvkg+3jcAQAAAMCn4Km1rGUlR4r/9La7RfWe/9nqff9U3sytLGcxy+lkIVerzwJ67/obf19td+7dbd8sl83jfuffI4VRjZjeZw9bzzxbtThet19N8v38MKdzIpezlMX8OPNZzkJO5HtVaT5FZqqx/vWtpI5zU7yT5cPFDaFcflisz1eRTOdaFqvYzuTK4GOQRr/N0Gx/bCUbMtTIO2V2im/XHpqdXtavDm39ZrB3P5ipDurQICOzde7LbBy9t13uK73zZHL0mZr1nsbgM6hjO800cs57DtfrMte/Gs75C7uNeK8M57yM6lwag7Pv2Z1znnz5H3+5fL1z68b1a7dP75/TaFvdbvfO9rUPnn3tQSam8tzuM7G6TSY+3Lg5sVWbqREPaI+06mz0Yly/WyaXhu+W3W6y6W75YtX3SBbzg7yeq1nI+cxmLhcym6/nXNobzrDjO+e1utYao11rJ79UF6aT/Lpe7w+tQ8nRobwO3+nKfB/dsGc9S0/vIksj3pGan68L5Rw/H3rGGb8HMzE3lIlnds7Eb8szMrc7t24sXZ9/Y5fznarX5WX7y43Ph797Esfz6Mrr8Onyj1VtbTw7yrpntqybq+qODeoam+qOD+oedqW26tdwm0fq1T23ZV27qns+/6yf9h54lZPX0xm8CgFgv+hu3nX4pcOt6fvTf5t+f/oX09enX5n67uSFyS+0cuivzT9N/KHx+8Y3i5fyfn6aI+MIGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/tfcfuvtG/OdzsLSPiykMVqv8nj2OLCpvZ9ijwqTSUbp1b3T7RbNJxvGh0keuXv/twL7e77YWchnd+jVHDrD13vti7/F4xe+8aM6GQ9p3BztMp+uB9w/Py4G7J2zyzffOHv7rbe/snhz/rWF1xZunbtw/sL59tfmvnr22mJnYbb3OO4ogb2w/uw/7kgAAAAAAAAAAACA3drLf1Qo6v/WGPcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfbpVdzaDVF5mbPzJbb9+62O+XSL6+3bCZpJCl+khSfJBfTWzIzNFyx3Twv3//ovVPvftBeH6vZb9/Yqd/urCYTq2XhRJKJev1Agy1M7jBeBuNdGR6v8SjhFYMjLBN2sp84GLf/BgAA///RGv9P")
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)
unlink(&(0x7f0000000080)='./file1\x00')
syz_clone3(&(0x7f0000000840)={0x880, &(0x7f0000000180), &(0x7f00000001c0), 0x0, {0x17}, &(0x7f0000000440)=""/164, 0xa4, &(0x7f0000000780)=""/114, &(0x7f0000000800)=[0x0, r1, r1], 0x3, {r4}}, 0x58)
rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file1\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)

8m3.858448306s ago: executing program 3 (id=730):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000540)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYRESDEC], 0x1, 0x105ea, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0xfdfffffffffffffc)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r5, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x4004, 0x1c7, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x3ff, 0x200}, [{0x6474e551, 0x400, 0xb0, 0x7f, 0x1, 0x6, 0x3, 0x7ff}]}, 0x58)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x80, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@loopback, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x13c}}, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x2008802, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=macgreek,errors=remount-ro,iocharset=macturkish,keep_last_dots,iocharset=macinuit,fmask=00000000000000000001774,keep_last_dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c646d61736b3d30303030303030303430303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c66756e633d504154485f434845434b2c00d68f80963e992f7a790f2a9437a29f8b4d470ae365120a367f816615bab1a73bcb0b34104466f040377b3f4ab5a9da23044717ccad042e8ceab3e5ee0a02b86bf4f8cd552aad29ee2912615d138189a059cae1a9f0c650f76fbda44cada54fb491e9ccd6856997ae44d04073d95a4780d15efe4ceeca4c12c9682120298580b5e8c054c336f3b7d648880a653348c06c67adacbad7c26ba9e6cb5357"], 0x7, 0x1532, &(0x7f0000004d00)="$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")
r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
getdents64(r6, &(0x7f00000005c0)=""/4096, 0x1000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})

7m58.762051618s ago: executing program 3 (id=735):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ftruncate(0xffffffffffffffff, 0x2007ffb)
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x16)
r2 = socket$kcm(0x29, 0x2, 0x0)
memfd_create(0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
io_setup(0x6, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0])
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pwritev(r0, &(0x7f0000000080), 0x0, 0x4000003, 0x3)
ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000140)=""/77)
sendfile(r2, r0, 0x0, 0x8000fb00)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e0000000120001000000000000000000736861333834000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9b73d38760b4ed5beaa9e00"/224], 0xe0}}, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e6, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x1]}, 0x8)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x800})

7m54.631361965s ago: executing program 3 (id=740):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000040012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='10000', 0x5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r6, &(0x7f0000000200)='1', 0x1)
write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={r3, 0xc3e1}, 0x8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0x40000, 0x3, 0x81d7})

7m52.379344294s ago: executing program 3 (id=742):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x844039, 0x0, 0x0, 0x0, &(0x7f00000000c0))
r1 = getpid()
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40)
fallocate(r4, 0x0, 0xfff, 0x9)
dup2(r2, r0)
ioctl$NBD_DISCONNECT(r4, 0xab08)
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x32d090, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000210dc6431450a41d40f157e3512b4b99c026e738de5993f365a0c450b77103ed4a4ce9645d5bda31f3c7059d42c252f8bf6429ca73047cf2160668940f50a78e03514b4a241ac903d9d349a649eb2abefc56cd1ad4da51bca4e370cad9401e0899238a3ce2fbe0aab556b9ba4341a9906debdb2646298351fb5b7ae6dbf1698f4eb5cd65fab44cdf71"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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")
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)
unlink(&(0x7f0000000080)='./file1\x00')
syz_clone3(&(0x7f0000000840)={0x880, &(0x7f0000000180), &(0x7f00000001c0), 0x0, {0x17}, &(0x7f0000000440)=""/164, 0xa4, &(0x7f0000000780)=""/114, &(0x7f0000000800)=[0x0, r1, r1], 0x3, {r4}}, 0x58)
rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file1\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)

7m49.637531609s ago: executing program 3 (id=746):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_pidfd_open(0x0, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x33, 0x0, &(0x7f0000000100))
r10 = dup(r8)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0x8b211000)
syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x3, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
read$FUSE(r10, &(0x7f0000001340)={0x2020}, 0x2020)
sched_setscheduler(0x0, 0x1, 0x0)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r12 = dup(r11)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r12, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r12, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

7m34.262455579s ago: executing program 34 (id=746):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_pidfd_open(0x0, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x33, 0x0, &(0x7f0000000100))
r10 = dup(r8)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0x8b211000)
syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x3, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
read$FUSE(r10, &(0x7f0000001340)={0x2020}, 0x2020)
sched_setscheduler(0x0, 0x1, 0x0)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r12 = dup(r11)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r12, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r12, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

7m1.471849077s ago: executing program 0 (id=787):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
r1 = open(0x0, 0x0, 0x112)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60e98dc258ded60aee45b04b15db386", 0x30)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
r7 = accept$alg(r2, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000003dc0)=[{0x0}, {&(0x7f0000002b40)="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", 0x2d1}], 0x2, &(0x7f0000000300), 0x0, 0x20000800}], 0x1, 0x4054)
recvmsg(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000006940)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRES8=r0, @ANYRES32, @ANYRESOCT, @ANYRES32=r3, @ANYRES16], 0xfe, 0x151c, &(0x7f0000004fc0)="$eJzs3AuYTlXbOPD7XmttxjTpaZLDsNa6N08MlkmSHJLkkCTJK0lOCUmSJEnFOEtySshxkhyGkBymIY3z+ZBzaJI0SZJTTmH9L3369L6979fb973v3/V9c/+ua1+z7mc/99r33vdzzd77ea7n+b7L0BqNalZtQETwP4L/8ScZAGIAYAAA3AAAAQCUjS8bf3l9LonJ/7ONsH+tR1KvdQXsWuL+Z2/c/+yN+5+9cf+zN+5/9sb9z964/9kb95+x7GzLjAI38pJ9F37/Pzvj8///IVmlxn+9rtTNXf9ECvc/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ//99475s4N/3xIAwP+fbV3r1x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsezhrL9KAcCv42tdF2OMMcYYY4wxxv51fM5rXQFjjDHGGGOMMcb+/RAESFAQQA7ICTGQC2LhOoiD6yE33AARuBHi4SbIAzdDXsgH+aEAJEBBKAQaDFggCKEwFIEo3AJFoRgkQnEoASXBQSlIgluhNNwGZeB2KAt3QDm4E8pDBagIleAuqAx3QxW4B6rCvVANqkMNqAn3QS24H2rDA1AHHoS68BDUg4ehPvwFGsAj0BAehUbwGDSGx6EJNIVm0Bxa/LfyX4FX4TXoDj0gGXpCL+gNfaAv9IP+MABeh4EQc+XYDIGhMAyGw1swAt6GkTAKRsM7MAbGwjgYDxNgIqTAuzAJ3oPJ8D5MgakwDaZDKsyAmfABzILZMAc+hLnwEcyD+bAAFkIafAzpsAgWwyewBD6FDFgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW+Ay2wjbYDjtgJ+yC3fA57IG9sA++gEz48k/mn/mb/K4ICChQoEKFOTAHxmAMxmIsxmEc5sbcGMEIxmM85sE8mBfzFsuP+TEBE7AQFkKDBgAJC2NhjGIUi2JRTMRELIEl0KHDJEzC0ngblsEyWBbLYjksh+WxAlbASlgJK2NlrIJVsCpWxWpYDWtgDbwP78P7sTbWxjpYB+tiXayH9TCrYH1sgA2wITbERtgIG2NjbIJNsBk2wxbYAltiS2yFrbANtsG22BbbYTtsj+2xA3bAjtgRO2En7IydsQt2wa74Mr6Mr+Ar+Bq+hj2wmuiJvbAX9sE+2A/7Y398HQfiG/gGvomDcQgOxWE4DN/CEXgaR+IoHI2jsbIYi+NwPJKYiCmYgpNwEk7GyTgFp+JUnI6pOANn4kychbNxNn6Ic/Ej/Ajn43xciGmYhum4aNiVVxhm4FJchstxBa7EFbga1+BqXIfrcR1uxI24GTfjZ/gZbsNtuAN34C5UAPg57sW9OBgzMRP34348gAfwIB7ELMzCQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC8mfNtwV/G1g0FcpoQSOUQOESNiRKyIFXEiTuQWuUVERES8iBd5RB6RV+QV+UV+kSASRCFxThhhBIlQFBaFRVRERVFRVCSKRFFClBBOOJEkkkRpUVqUEWVEWXGHKCfuFOVFBdHaVRKVRGXRxlUR94iqoqqoJqqLGqKmqClqiVqitqgt6og6oq6oK+qJh0V90RP74SPicmcaiSHYWAzFJqKpaCaai7fwCdFSjMBWorVoI54So3AkthMtXXvxrOggxmFH8bwYjy+IzmIidhEvia7iZdFNBOJV0cp1Fz3EFOwpeonp2Ef0Ff1EfzELq4vLHash3hSDxRAxVAwTC/EtMUK8LUaKUWK0eEeMEWPFODFeTBATRYp4V0wS74nJ4n0xRUwV08R0kSpmiJniAzFLzBZzxIdirvhIzBPzxQKxUKSJj0W6WCQWi0/EEvGpyBBLxTKxXKwQK8UqsVqsEWvFOrFebBAbxSaxWWwRn4mtYpvYLnaInWKX2C0+F3vEXrFPfCEyxZdiv/hKHBBfi4PiG5ElvhWHxHfisPheHBE/iKPiR3FMHBcnxElxSvwkTosz4qw4J86Ln8UFcVFcEl6ARCmklEoGMofMKWNkLhkrr5Nx8nqZW94gI/JGGS9vknnkzTKvzCfzywIyQRaUhaSWRlpJMpSFZREZlbfIorKYTJTFZQlZUjpZSibJW2VpeZssI2+XZeUdspy8U5aXFWRFWUneJSvLu2UVeY+sKu+V1WR1WUPWlPfJWvJ+WVs+IOvIB2Vd+ZCsJx+W9eVfZAP5iGwoH5WN5GOysXxcNpFNZTPZXLaQT8iW8knZSraWbeRTsq18WraTz8j28lnZQT4nO8rnZSf5guwsX5Rd5Euyq3xZdpMX5SXpZXfZQybLnrKX7C37yL6yn+wvB8jX5UD5hhwk35SD5RA5VA6Tw+VbcoR8W46Uo+Ro+Y4cI8fKcXK8nCAnyhT5rpwk35OT5ftyipwqp8npMlXOkP2uzDTnn8h/7+/kD/pl65vlFvmZ3Cq3ye1yh9wpd8ndcrfcI/fIfXKfzJSZcr/cLw/IA/KgPCizZJY8JA/Jw/KwPCKPyKPyqDwmj8tz8qQ8JX+Sp+UZeUaek+fleXnhyjEAhUooqZQKVA6VU8WoXCpWXafi1PUqt7pBRdSNKl7dpPKom1VelU/lVwVUgiqoCimtjLKKVKgKqyIqqm7BKydNVUKVVE6VUknq1j+Tr4qqYipRFf+r/D+qr4VqoVqqlqqVaqXaqDaqrWqr2ql2t12uo4PqoDqqjqqT6qQ6j+usuqguqqvqqrqpbupV9arqrrqrZJWseqneqo/qq/qp/mqAel0NVAPVIDVIDVaD1VA1VA1Xw9UINUKNVCPVaDVajVFj1Dg1Tk1QE1SKSlGT1CQ1WU1WU9QUNU1NU6kqVc1UM9UsNUvNUXPUXDVXzVPz1AK1QKWpNJWu0tVitVgtUUtUhlqqlqrlarlaqVaq1Wq1WqvWqvVqvdqoNqqMnFvUFrVVbVXb1Xa1U+1Uu9VutUftUfvUPpWpMtV+tV8dUAfUQXVQZaksdUgdUofVYXVEHVFH1VF1TB1TJ9QJdUqdUqfVaXVWnVXn1Xl1QV1Ql9Sly5d9gQhEoAIV5AhyBDFBTBAbxAZxQVyQO8gdRIJIEB/EB3mCm4O8Qb4gf1AgSAgKBoUCHZjABhSEQeGgSBANbgmKBsWCxKB4UCIoGbigVJAU3BqUDm4LygS3B2WDO4JywZ1B+aBCUDGoFNwVVA7uDqoE9wRVg3uDakH1oEZQM7gvqBXcH9QOHgjqBA8GdYOHgnrBw0H94C9Bg+CRoGHwaNAoeCxoHDweNAmaBs2C5kGL/3L+Xz/c+mfn9/50viddd91DJ+ueupfurfvovrqf7q8H6Nf1QP2GHqTf1IP1ED1UD9PD9Vt6hH5bj9Sj9Gj9jh6jx+pxeryeoCfqFP2unqTf05P1+3qKnqqn6ek6Vc/QM/UHepaerefoD/Vc/ZGep+frBXqhTtMf63S9SC/Wn+gl+lOdoZfqZXq5XqFX6lV6tV6j1+p1er3eoDfqTXqz3qI/01v1Nr1d79A79S69W3+u9+i9ep/+QmfqL/V+/ZU+oL/WB/U3Okt/qw/p7/Rh/b0+on/QR/WP+pg+rk/ok/qU/kmf1mf0WX1On9c/6wv6or6k/eWL+8und6OMMjlMDhNjYkysiTVxJs7kNrlNxERMvIk3eUwek9fkNflNfpNgEkwhU8hcRoZMYVPYRE3UFDVFTaJJNCVMCeOMM0kmyZQ2pU0ZU8aUNWVNOVPOlDflTUVT0dxl7jJ3m7vNPeYec6+511Q31U1NU9PUMrVMbVPb1DF1TF1T19Qz9Ux9U980MA1MQ9PQNDKNTGPT2DQxTUwz08y0MC1MS9PStDKtTBvTxrQ1bU070860N+1NB9PBdDQdTSfTyXQ2nU0X08V0NV1NN9PNvGpeNd1Nd5Nskk0v08v0MX1MP9PPDDADzEAz0Awyg8xgM9gMNUPNcDPcjDAjzEgzyow275gxZqwZZ8abCWaiSTEpZpKZZCabyWaKmWKmmWkm1aSamWammWVmmTlmjplr5pp5Zp5ZYBaYNJNm0k26WWwWmyVmickwGWaZWWZWmBVmlVll1pg1Zp1ZZzaYDWaT2WS2mC1mq9lqtpvtZqfZaXab3WaP2WP2mX0m02Sa/Wa/OWAOmIPmoMkyWeaQOWQOm8PmiDlijpqj5pj59R7nlDltTpuz5qw5b342F8xFc8l4E2Nz2Vh7nY2z19vc9gb7t3F+W8Am2IK2kNU2r833V7Gx1iba4raELWmdLWWT7K028fLmfhOXtxVsRVvJ3mUr27ttld/Ftez9trZ9wNaxD9qa9r6/iuvah2w9+5itbx+3DWxT29A2t43sY7axfdw2sU1tM9vctrVP23b2GdvePms72Od+F6fbRXaNXWvX2fV2j91rz9pz9rD93p63P9vutocdYF+3A+0bdpB90w62Q34Xj7bv2DF2rB1nx9sJduLv4ml2uk21M+xM+4GdZWf/Lk6zH9u5drGdZ+fbBXbhL/HlmhbbT+wS+6nNsEvtMrvcrrAr7Sq7+j9rXW432k12s91tP7db7Ta73e6wO+2uX+LL+7HPfmEz7Zf2kP3OHrBf24P2iM2y3/4SX96/I/YHe9T+aI/Z4/aEPWlP2Z/saXvml/2/vO8n7UV7yXoLhCRIkqKAclBOiqFcFEvXURxdT7npBorQjRRPN1EeupnyUj7KTwUogQpSIdJkyBJRSIWpCEXpFipKxSiRilMJKkmOSlES3Uql6TYqQ7dTWbqDytGdVJ4qUEWqRHdRZbqbqtA9VJXupWpUnWpQTbqPatH9VJseoDr0INWlh6gePUz16S/UgB6hhvQoNaLHqDE9Tk2oKTWj5tSCnqCW9CS1otbUhp6itvQ0taNnqD09Sx3oOepIz1MneoE604vUhV6irvQydaNX6FV6jbpTD0qmntSLelMf6kv9qD8NoNdpIL1Bg+hNGkxDaCgNo+H0Fo2gt2kkjaLR9A6NobE0jsbTBJpIKfQuTaL3aDK9T1NoKk2j6ZRKM2gmfUCzaDbNoQ9pLn1E82g+LaCFlEYfUzotosX0CS2hTymDltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIU+o620jbbTDtpJu2g3fU57aC/toy8ok76k/fQVHaCv6SB9Q1n0LR2i7+gwfU9H6Ac6Sj/SMTpOJ+gknaKf6DSdobN0js7Tz3SBLtIl8gQhhiKUoQqDMEeYM4wJc4Wx4XVhXHh9mDu8IYyEN4bx4U1hnvDmMG+YL8wfFggTwoJhoVCHJrQhhWFYOCwSRsNbwqJhsTAxLB6WCEuGLiwVJoW3hqXD28Iy4e1h2fCOsFx4Z1g+rBA+9mCl8K6wcnh3WCW8J6wa3htWC6uHNcKa4X1hrfD+sHb4QFgnfDAsEz4U1gsfDuHK91Uaho+GjcLHwsbh42GTsGnYLGwetgifCFuGT4atwtZhm/CpsG34dNgufCZsHz4bdgif+8P1yWHPsFfYO+wdev+AXBBdGE2LfhxNjy6KLo5+El0S/TSaEV0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RTdHPW+Zk5w6ISTTrnA5XA5XYzL5WLddS7OXe9yuxtcxN3o4t1NLo+72eV1+Vx+V8AluIKukNPOOOvIha6wK+Ki7hZX1BVzia64K+FKOudKuSTX3LVwLVxL96Rr5Vq7Nu4p95R72j3tnnHPuGddB/ec6+ied53cC66ze9G96F5yXd3Lrpt7xb3qXnPdXQ+X7JJdL9fL9XF9XD/Xzw1wA9xAN9ANcoPcYDfYDXVD3XA33I1wI9xIN9KNdqPdGDfGjXPj3AQ3waW4FDfJTXKT3WQ3xU1x09w0l+pS3Uw3081ys9wcN8fNTZzr5rl5boFb4NJcmkt36W6xW+yWuCUuw2W4ZW6ZW+FWuFVulVvj1rh1bp3b4Da4TW6T2+K2uK1uq9vutrudbqfb7Xa7PW6P2+f2uUyX6fa7/e6AO+AOum9clvvWHXLfucPue3fE/eCOuh/dMXfcnXAn3Sn3kzvtzriz7pw77352F9xFd8l5lxJ5NzIp8l5kcuT9yJTI1Mi0yPRIamRGZGbkg8isyOzInMiHkbmRjyLzIvMjCyILI2mRjyPpkUWRxZFPIksin0YyIksjyyLLIysiKyPeF9wa+sK+iI/6W3xRX8wn+uK+hC/pnS/lk/ytvrS/zZfxt/uy/g5fzt/py/sKvqJ/3DfxTX0z39y38E/4lv5J38q39m38U76tf9q388/49v5Z38E/5zv6530n/4Lv7F/0XfxLvuuvd1z+Nd/d9/DJvqfv5Xv7Pr6v7+f7+wH+dT/Qv+EH+Tf9YD/ED/XD/HD/lh/h3/Yj/Sg/2r/jx/ixfpwf7yf4iT7Fv+sn+ff8ZP++n+Kn+ml+uk/1M/xM/4Gf5Wf7Of5DP9d/5Of5+X6BX+jT/Mc+3S/yi/0nfon/1Gf4pX6ZX+5X+JV+lV/t1/i1fp1f7zf4jX6T3+y3+M/8Vr/Nb/c7/E6/y+/2n/s9fq/f57/wmf5Lv99/5Q/4r/1B/43P8t/6Q/47f9h/74/4H/xR/6M/5o/7E/6kP+V/8qf9GX/Wn/Pn/c/+gr/oL/F31hhjjDHG/im9/2B9z7/zmAIAcWXcCwCu31Yg67frJQBsyPsf474ioW0EAJ7t0eWRX5dq1ZKTk688N0NCUGQ+AET+ZgNX4qXQBp6G9tAaSv/d+vqKl8/Tf87f8+/OH70DIPY3OTFwNb46/1f/YP4nnhqdXi48G/+P64/OB0gscjUnF1yNl0KbL18DgNZQ5h/Mn68l/dfHJ9fXKQCtfpMTB1fjq/UnwZPwHLT/q2f+jQev+8frGGOMMcYYY4z9n9ZXVOz0B/efv9yfJ6irOTnhavxH9+eMMcYYY4wxxhi79l54udszT7Rv37rTPz/I+WeezAMe8OB/4+Ba/2dijDHGGGOM/atdvei/+liua1kQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf3mR79yAcC/5efErvU+MsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9fa/wsAAP//t4wqww==")

6m52.47572929s ago: executing program 0 (id=791):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000040012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r6, &(0x7f0000000200)='1', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r7, &(0x7f0000000280)='0', 0x1)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={r3, 0xc3e1}, 0x8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0x40000, 0x3, 0x81d7})

6m49.24716203s ago: executing program 0 (id=793):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x3, 0xffff, 0x0, 0xfffffffd}})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000300)='AQB123+567890123456789012345678901234567=\x00', 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x10}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}}, 0x4000080)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0)
write(r9, &(0x7f0000000280)="1528b8616b642e302e202e31", 0xc)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r8}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

6m48.477393636s ago: executing program 0 (id=795):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x24000080)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000200), 0x2, 0x9}}, 0xfffffffffffffed0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2, 0x6}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080), 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x6)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000940), 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0)
write(r6, &(0x7f0000000200)='0\n', 0x2)

6m43.485788624s ago: executing program 0 (id=798):
syz_open_procfs(0x0, 0x0)
r0 = socket(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r6=>0x0}, &(0x7f0000000200)=0x5)
setreuid(r6, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xa475, 0x7fff, 0xbb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xef}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r9}, &(0x7f00000007c0), &(0x7f0000000640)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9}, 0x0, &(0x7f0000000580)=r8}, 0x20)

6m41.554675718s ago: executing program 0 (id=800):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00')
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='.\x00', 0x84406d, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
sendto$inet(r1, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x300, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x900, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000280)={0x0, 0x1, 0xc, 0x82, @vifc_lcl_addr=@multicast1, @local}, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
mremap(&(0x7f000007b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000239000/0x1000)=nil)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
prctl$PR_SET_NAME(0x4, 0x0)
r9 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_pidfd_open(r9, 0x0)
r11 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r11, 0xc0045540, &(0x7f0000000080)=0x2)
pidfd_getfd(r10, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\x00')
prctl$PR_SET_PTRACER(0x59616d61, r9)

6m25.532036999s ago: executing program 35 (id=800):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00')
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='.\x00', 0x84406d, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
sendto$inet(r1, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x300, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x900, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000280)={0x0, 0x1, 0xc, 0x82, @vifc_lcl_addr=@multicast1, @local}, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
mremap(&(0x7f000007b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000239000/0x1000)=nil)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
prctl$PR_SET_NAME(0x4, 0x0)
r9 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_pidfd_open(r9, 0x0)
r11 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r11, 0xc0045540, &(0x7f0000000080)=0x2)
pidfd_getfd(r10, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\x00')
prctl$PR_SET_PTRACER(0x59616d61, r9)

5m32.950113178s ago: executing program 5 (id=849):
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
syz_io_uring_setup(0xf00, &(0x7f0000000600)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, &(0x7f0000000000), &(0x7f0000000080))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="3f00000006020400280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r2 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"})
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x100000000000000)

5m30.532456025s ago: executing program 5 (id=850):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}}, 0x24, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x4)
write(0xffffffffffffffff, &(0x7f0000000140)="24000000010006", 0x7)
r4 = memfd_secret(0x80000)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r4, r4}, 0xc)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fanotify_init(0xf00, 0x1000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_mptcp_buf(r6, 0x11c, 0x1, &(0x7f0000000400), &(0x7f0000000500)=0x100)

5m27.184827599s ago: executing program 5 (id=851):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0x20080522, r0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r1, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
ftruncate(r1, 0x800)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80)
acct(&(0x7f00000000c0)='./file1\x00')
acct(0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)

5m23.514055971s ago: executing program 5 (id=853):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r2, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48000, 0x1, {0x2}})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x18, 0x1, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

5m20.24311131s ago: executing program 5 (id=856):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
write(r3, &(0x7f0000000300)='rt1719 0x49', 0xb)
write(r3, &(0x7f0000000400), 0x0)
io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x54)

5m16.441489956s ago: executing program 5 (id=858):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa)
write(r0, &(0x7f0000000100)="d3f76ed5711d1a90b4a64994feeb0525b5a62c4faba3fbdafde38545312abcebecea155fce80eafafe6de81b328b709c70a4e0c7", 0x34)
socket$inet6(0xa, 0x80002, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r2, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f40)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000002580)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002780)={0x0, 0x1, 0x0, &(0x7f0000002340)=[{}], 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x0, &(0x7f00000023c0), 0x8, 0x0, &(0x7f0000002640)=[{}, {}, {}, {}, {}, {}, {}, {}]})

5m0.371484419s ago: executing program 36 (id=858):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa)
write(r0, &(0x7f0000000100)="d3f76ed5711d1a90b4a64994feeb0525b5a62c4faba3fbdafde38545312abcebecea155fce80eafafe6de81b328b709c70a4e0c7", 0x34)
socket$inet6(0xa, 0x80002, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r2, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f40)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000002580)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002780)={0x0, 0x1, 0x0, &(0x7f0000002340)=[{}], 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x0, &(0x7f00000023c0), 0x8, 0x0, &(0x7f0000002640)=[{}, {}, {}, {}, {}, {}, {}, {}]})

1m27.023591363s ago: executing program 4 (id=966):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x20800)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'pcl711\x00', [0x6, 0x7fff, 0x1, 0x1, 0x1, 0x949, 0x9, 0x10000, 0x7d8, 0x7fff, 0x630000, 0x6, 0x2, 0x1, 0x1000, 0x0, 0xfffffff9, 0x10001, 0x8, 0x3ff, 0x3, 0x2, 0x0, 0x53, 0x0, 0xd4, 0x7, 0x8, 0xfffffe00, 0x8000, 0x9, 0x2]})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0)

1m25.48268975s ago: executing program 4 (id=960):
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000000, 0x0)
socket$rds(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = inotify_init()
socket$nl_generic(0x10, 0x3, 0x10)
inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa1000751)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1)
close(0x3)
syz_clone(0x253f5a00, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f0000000000)="10f8658fdba299d983e319c4505f9a0b0509cb9b06e720fbadc4")
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x3, 0x5, 0x0})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000080)=[0x3, 0x2], 0x2)
listen(r5, 0x0)
listen(0xffffffffffffffff, 0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
shutdown(r6, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, 0x0, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

1m19.928160943s ago: executing program 4 (id=967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
getsockname$inet6(r1, 0x0, &(0x7f00000003c0))
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x4000084)
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000003500)=[{&(0x7f0000002200)={&(0x7f0000002100)={0x0, &(0x7f0000001100)="05be8ca6ae01741028231c01ab32498013d2c66ec68f49355de79ab04d2292567189e77ff6e5f2a9266412953cb4571eaa", 0x3, 0x31}, 0x0, 0x1}, 0x0, 0x2}], 0x0)
syz_emit_ethernet(0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450061d532a168305f829078ac1414bbac1414aa4e2222f7935cbcead2bc0af5452fa9c35269dbb9446351cd91a6e6b2940000000000000080b2f728ee3e0ce26126785ebc23f10fe40cdeca821750167b5f400d30a607d8d022f84981fbaf0d2594f04db658750b13646ac3fe715748eb08b3d0c51e3b00c758cd97e3a829b4e2ce24e1fbfe9d5c659dd788950a3ac145f410c0eb993b384e67e262fb84794c378fd09ec24ba9f9428f52ab23f5e89d51aaf42b9391b47ec3e306eb847693b105fca8347291cba107eeb4be14b9fafdfed58fa40a7aa6f0f4bb27973cb0c841ad439dec3c4319ab27340a8757e7dd91988cfc3e575c4dcdee38e3dbbc41d02748c5322ef18197f471d6a9df0126fd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d002000090780000fe0ef9896d674f04cf2c1d638d0e13122a9c444be69caceb3fbd4ef8047b79a3"], 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2002, 0x0)
write$dsp(r3, &(0x7f0000000080)="9f878126", 0x4)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r8], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10004)

1m16.177016845s ago: executing program 4 (id=971):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
write$proc_mixer(0xffffffffffffffff, 0x0, 0x4000)
io_setup(0xa, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m11.964002685s ago: executing program 4 (id=976):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, 0x0, 0x0)
semop(0x0, &(0x7f0000001540)=[{0x3, 0x1, 0x1000}], 0x1)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r3 = semget$private(0x0, 0x6, 0x0)
semop(r3, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1)
semop(0x0, &(0x7f0000001940)=[{0x0, 0x1000, 0x1800}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
landlock_create_ruleset(&(0x7f00000001c0)={0x1, 0xa, 0x2, 0x3802, 0x8, 0x1}, 0x30, 0x1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x3, 0x5, 0x9, 0x2}, 0x10}, 0x1, 0x7}, 0x200c8805)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008850}, 0x4008080)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e23, @broadcast}], 0x20)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)={0xfffffffffffffc97, 0x0, 0x211, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004014}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r8)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r9, 0x300, 0xfffffdfd, 0x0, {0x5}}, 0x14}}, 0x40)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, 0x0, 0x20000048)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r10=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r10, @in={{0x2, 0x4e20, @multicast1}}, 0x2, 0x2, 0xffffffff, 0x2, 0x5, 0x8, 0x4}, 0x9c)

1m6.84764715s ago: executing program 4 (id=980):
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x4000c0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000080)={{0x3, 0x2, 0x6, 0xc, 'syz0\x00', 0x5}, 0x1, [0x8000000000000001, 0x100000001, 0x5, 0x3, 0x4f4, 0x4, 0xbd, 0x2, 0x14, 0xfadb, 0x10001, 0x80000001, 0x26, 0x1ff, 0x2, 0x9, 0x3, 0xfff, 0x8, 0x9, 0x5, 0x6c7, 0x6, 0xffffffff00000000, 0xbc5b, 0x7, 0x200, 0x9, 0xfffffffffffffffe, 0x0, 0x9, 0x7af, 0x2, 0xc80, 0x5, 0x1, 0x8000000000000000, 0xba, 0x2, 0x5, 0x4, 0x4, 0x3ff, 0x0, 0x21d50, 0x8a, 0x4, 0x5, 0xb9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x63, 0x9, 0x25, 0x2, 0x9, 0x4, 0x4, 0xca3, 0x200, 0x3, 0x8000000000000003, 0x4, 0x5, 0x3, 0x6, 0xff, 0x4, 0x7, 0x74db9244, 0x7, 0x5, 0x7, 0x1, 0x4, 0x4, 0x5, 0x7, 0x2, 0x0, 0x8, 0x6, 0x4, 0x6, 0x6, 0x0, 0x631d4cb9, 0x5, 0xfffffffffffff000, 0x8000000000000000, 0x8000000000000001, 0x7, 0x10, 0xfffffffffffffff7, 0x1, 0x5, 0x3, 0x4, 0xffffffffffff4d87, 0x3, 0x9, 0x3, 0x7, 0x0, 0x4, 0x3, 0x120000, 0x9, 0x100, 0x2, 0x3, 0x9, 0x5b, 0x7, 0xfffffffffffffeff, 0xfffffffffffffffe, 0x9, 0x2, 0x6793, 0x6, 0x3, 0x3, 0x4, 0x9, 0x8]})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1e, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000140)='./file0\x00', 0xc888, &(0x7f0000001240)=ANY=[], 0x1, 0x20b, &(0x7f00000006c0)="$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")
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x7d)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7d)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680), 0x40280, 0x0)
ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000640))
open(&(0x7f0000000200)='./file2\x00', 0x60100, 0x32)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140028a99991debebe9d0000000000000000386e1e56cc49e466b9807120926f24360ce8b68cf38de35a45523cdecb0dfd04e44bea12f0e6f99a47af7c1c23a525b74d2840055c21e50f85d6a4814cfea391a2c0300b"], 0x14}}, 0xc048)

57.913298541s ago: executing program 9 (id=991):
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140)
mkdirat(0xffffffffffffff9c, 0x0, 0x19)
io_uring_setup(0x63c8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, <r6=>r4, 0x2})
r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000300)={r8})
ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000080)={r8})
ioprio_get$uid(0x3, 0x0)
r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10)

56.457807085s ago: executing program 9 (id=995):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)

55.635615235s ago: executing program 7 (id=62):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, 0x0, 0x20000000)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp(r3, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
close(0x3)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, 0x0, 0x0, 0x0)

55.483903664s ago: executing program 9 (id=997):
r0 = openat(0xffffffffffffffff, 0x0, 0x4c0142, 0x163)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r3 = gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
syz_open_procfs(r3, &(0x7f0000000080)='gid_map\x00')
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
truncate(&(0x7f0000000100)='./file1\x00', 0x401)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1101, 0x0)
getsockname$llc(r2, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)

53.97322366s ago: executing program 7 (id=999):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r4=>0x0})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4")
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80, 0x100)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10300}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000040)
getdents64(r5, &(0x7f0000000180)=""/28, 0x1c)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00')
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x20044000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f00000002c0)=0x12f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff)
r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./ffs\x00', &(0x7f00000003c0), 0x4040, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@loose}, {@ignoreqv}, {@posixacl}, {@version_9p2000}, {@cache_loose}, {@cache_fscache}, {@uname={'uname', 0x3d, 'ingress\x00'}}, {@noxattr}], [{@pcr={'pcr', 0x3d, 0x26}}, {@dont_hash}, {@appraise_type}]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff)
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)

51.351735186s ago: executing program 37 (id=980):
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x4000c0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000080)={{0x3, 0x2, 0x6, 0xc, 'syz0\x00', 0x5}, 0x1, [0x8000000000000001, 0x100000001, 0x5, 0x3, 0x4f4, 0x4, 0xbd, 0x2, 0x14, 0xfadb, 0x10001, 0x80000001, 0x26, 0x1ff, 0x2, 0x9, 0x3, 0xfff, 0x8, 0x9, 0x5, 0x6c7, 0x6, 0xffffffff00000000, 0xbc5b, 0x7, 0x200, 0x9, 0xfffffffffffffffe, 0x0, 0x9, 0x7af, 0x2, 0xc80, 0x5, 0x1, 0x8000000000000000, 0xba, 0x2, 0x5, 0x4, 0x4, 0x3ff, 0x0, 0x21d50, 0x8a, 0x4, 0x5, 0xb9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x63, 0x9, 0x25, 0x2, 0x9, 0x4, 0x4, 0xca3, 0x200, 0x3, 0x8000000000000003, 0x4, 0x5, 0x3, 0x6, 0xff, 0x4, 0x7, 0x74db9244, 0x7, 0x5, 0x7, 0x1, 0x4, 0x4, 0x5, 0x7, 0x2, 0x0, 0x8, 0x6, 0x4, 0x6, 0x6, 0x0, 0x631d4cb9, 0x5, 0xfffffffffffff000, 0x8000000000000000, 0x8000000000000001, 0x7, 0x10, 0xfffffffffffffff7, 0x1, 0x5, 0x3, 0x4, 0xffffffffffff4d87, 0x3, 0x9, 0x3, 0x7, 0x0, 0x4, 0x3, 0x120000, 0x9, 0x100, 0x2, 0x3, 0x9, 0x5b, 0x7, 0xfffffffffffffeff, 0xfffffffffffffffe, 0x9, 0x2, 0x6793, 0x6, 0x3, 0x3, 0x4, 0x9, 0x8]})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1e, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000140)='./file0\x00', 0xc888, &(0x7f0000001240)=ANY=[], 0x1, 0x20b, &(0x7f00000006c0)="$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")
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x7d)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7d)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680), 0x40280, 0x0)
ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000640))
open(&(0x7f0000000200)='./file2\x00', 0x60100, 0x32)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140028a99991debebe9d0000000000000000386e1e56cc49e466b9807120926f24360ce8b68cf38de35a45523cdecb0dfd04e44bea12f0e6f99a47af7c1c23a525b74d2840055c21e50f85d6a4814cfea391a2c0300b"], 0x14}}, 0xc048)

50.441967216s ago: executing program 9 (id=1003):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r4=>0x0})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80, 0x100)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10300}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000040)
getdents64(r5, &(0x7f0000000180)=""/28, 0x1c)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00')
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x20044000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f00000002c0)=0x12f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff)
r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./ffs\x00', &(0x7f00000003c0), 0x4040, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@loose}, {@ignoreqv}, {@posixacl}, {@version_9p2000}, {@cache_loose}, {@cache_fscache}, {@uname={'uname', 0x3d, 'ingress\x00'}}, {@noxattr}], [{@pcr={'pcr', 0x3d, 0x26}}, {@dont_hash}, {@appraise_type}]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff)
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)

49.395139528s ago: executing program 2 (id=1006):
socket(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x175)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
acct(&(0x7f0000000000)='./bus\x00')
acct(0x0)
listen(0xffffffffffffffff, 0x5)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
syz_ublk_add_dev(r4, 0x0, 0x0, r3, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=<r5=>0x0)
syz_ublk_setup_queues(r4, r5, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r2}, 0x0, 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xf, 0x4cd, 0x2, 0x3, 0x1, "c4249d0788fa8dccada7257c3105714622383e", 0xe3b, 0x5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$kcm(0xa, 0x5, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r7, 0xb1b, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r9 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0xe0}], 0x1}, 0x3e8)

46.136722396s ago: executing program 9 (id=1010):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = socket(0x2, 0x80805, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x0, 0xd, 0x5e}, 0x2c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@private0}}}, &(0x7f00000004c0)=0xe8)
r3 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10)
syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
lseek(r4, 0x7fffffffffffffff, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x14, 0x1, 0x4, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf25000000000000000000000000000000002001000000000000002100000000000000008002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff090000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffffffffffff7f00"/135], 0x13c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f0000000600)={0x28, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="9c6ac0221c3a1c61d80375afd77953850d39c9e687cdffb387f0361b543c8475a25a28e21e2b7d3bda37c42f50a29056fba4501f1692a5f7c7b1520afaf36e747ddf8a24bd554759eaad26660148b4812f7dc14414ff892099035499c04e8d716e2d2841fd8e6bd0702e7f95fa895ec6bfd6d3cc1d79d5f5debad2ba66fbd8970c109a6021d0405b5b78b9d95496e24ee2550a4848816b4e322d3ba9446314b92a52e4a3173582a240d897a3b6e87a761894f8a9fd5bbe72d75936a425a912fecc4334b01e", 0x1, 0x8, 0x3, 0x1, {0x0, 0x0, r5, 0x80000001}}, 0x1)

44.928195687s ago: executing program 2 (id=1011):
syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000004082050c0040000102030109026f0003010838030904000000010100000a240107000a00020102090401000001020000090401010101020000082402010002180507240107a4010009050109f7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

39.444876884s ago: executing program 9 (id=1015):
socket$inet_tcp(0x2, 0x1, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4fb, &(0x7f0000001c80)="$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")
r1 = creat(&(0x7f0000000000)='./file1\x00', 0xa4)
write$UHID_INPUT(r1, &(0x7f0000002180)={0x8, {"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", 0x1000}}, 0xfffffd96)
openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

39.299928558s ago: executing program 2 (id=1016):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000040012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='10000', 0x5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r6, &(0x7f0000000200)='1', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r7, &(0x7f0000000280)='0', 0x1)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={r3, 0xc3e1}, 0x8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0x40000, 0x3, 0x81d7})

37.894018466s ago: executing program 38 (id=1015):
socket$inet_tcp(0x2, 0x1, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4fb, &(0x7f0000001c80)="$eJzs3c9vG1kdAPDvOHF+tNlNdtkDINgtuwsFVXUSt42qHqCcEEKVED2C1IbEjaLYcRQ7pQk9pGeuSFTiBEf+ip64c0Fw41IOSPyIQA0SByOPJ6mT2k3UJHYUfz7SaObNm/r7Xp15L/469gtgYF2JiO2IGImIhxExmZ1Psi3utrbmda92ni7s7jxdSKLRuP/PJK1vnou2f9N0OXvMsYj40fcifpq8Gbe2ubUyXy6X1rPydL2yNl3b3Lq+XJlfKi2VVovFudm5mds3bhVPra+fVEayo6++/MP2t37ebNZEdqa9H6ep1fX8fpym4Yj4wVkE64OhrD8j/W4I7yQXER9GxKfp/T8ZQ+mzCQBcZI3GZDQm28sAwEWXS3NgSa6Q5QImIpcrFFo5vI/iUq5crdWvPapurC62cmVTkc89Wi6XZrJc4VTkk2Z5Nj1+XS5G/kD5RkR8EBG/HB1Py4WFanmxn7/4AMAAu3xo/v/PaGv+BwAuuLF+NwAA6DnzPwAMHvM/AAwe8z8ADJ7W/D/e72YAAD3k9T8ADB7zPwAMlB/eu9fcGrvZ918vPt7cWKk+vr5Yqq0UKhsLhYXq+lphqVpdSr+zp3LU45Wr1bXZm7HxZOrba7X6dG1z60GlurFaf5B+r/eDUj69arsHPQMAuvngkxd/Tpoz8p3xdIu2tRzyfW0ZcNZy/W4A0DdD/W4A0DdW+4LBdYLX+NIDcEF0WKL3gLFOHxBqNBqNs2sScMaufkn+HwZVW/7fXwHDgJH/h8El/w+Dq9FIjrvmfxz3QgDgfJPjB7q8//9htv9d9ubATxYPX/H8LFsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59ve+r+FbC3wicjlCoWI9yJiKvLJo+VyaSYi3o+IP43mR5vl2T63GQA4qdzfkmz9r6uTn08cqPr48v7hSET87Nf3f/Vkvl5f/2PESPKv0b3z9efZ+WLvWw8AHG1vnk73bS/kX+08Xdjbetmev383IsZa8Xd3RmJ3P/5wDKf7schHxKV/J1m5JWnLXZzE9rOI+GKn/icxkeZAWiufHo7fjP1eT+PnDsTPpXWtffP/4gun0BYYNC+a48/dTvdfLq6k+873/1g6Qp1cNv41H2phNx0DX8ffG/+Guox/V44b4+bvv986Gn+z7lnEl4cj9mLvto0/e/GTLvE/P2b8v3zl40+71TV+E3E1OsdvjzVdr6xN1za3ri9X5pdKS6XVYnFudm7m9o1bxek0Rz3dfTb4x51r73era/b/Upf4Y0f0/+vH7P9v//fwx197S/xvftYpfi4+ekv85pz4jWNFT7qt7b0ff7FL/496/q8dK37Ey79uvbFsOADQP7XNrZX5crm0fmYH+SzSGYZwMCgH5/kH6Tu9ijUSnat+8VnrTjtU1Wi8U6xuI8ZpZN2A82D/po+I//a7MQAAAAAAAAAAAAAAQEe9+MRSv/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxfX/AAAA///n5cqK")
r1 = creat(&(0x7f0000000000)='./file1\x00', 0xa4)
write$UHID_INPUT(r1, &(0x7f0000002180)={0x8, {"7fda3706741c0c3de58bf77e2cb663038ea93754da43ffb9e302a7cd120bbadfbc1acfde238b08109e8da2fb2b03e4bf68b31bca2f7140a5ac11d69e32d1633f8253d29e2996e0a2318a65b842c35dafd89d0092b5b80039ebfc6e28b25cc1737e4337566e10a0b867a96b33c6f7d6499fc7a9171d59201982310cdedc70e1cf82512268ed4f03fc6b8034e3499c0fcbcb896a4227e8164620b323b145baaa45c3c119b68fb87881257b5238c76c24b25f580a09c76d0ce9a6556a0e1c1d4a410ed2057f8bce7811156a67bc0695cfafd3a12bce1d06820a9b9725a163d69ef9e6f515e46cfeec35994811f5ec0689b0e62c573caac39696915de880e4653f20fd83b226b11942a578909e121219c41e41f5a7bb5144b2af6841a105a79ad4560f4155bcf427c391cf5e1a14039506bcc7117da942161d391b73c05b9c7b2758ca72654d5891aa7d863bcc8f456ed9c5d2a3e5be25196d074bbd73b75161cb2cee765256f28573c27dab7bed271d9b3a5f58ed82f25205e35d956ab10c83d449985003148312fb72e5a4bb1e52a2e6c9977cbc6334023110946d97b108183668d87c4bcb01355206606e4f7275e06221da58165471a06af43a487cf81850567a1337dfe830552712e43f746106a074095dcd0864e16dd3226609217189551cbf1fa7c18016cd528056e13b63575cad98941bb04afd51223dee0048fc36b375a6fc3e5cdd37a56109b6de60fff9a316fd242f3ab5e4c64119d9b8543dce9db6cea65590b21fe340c3267719e0723f1239afe0ed2a5992b1acd739c0fbbec7eeb2fb3de1c051cd529ca8d85cebb0de8a3a84221ec5a10574590e485168b40783589f09aa5ada32565393433c9f6db4645ad625cb2d9af13f57c424798df8e1fc57552f36100efb62a370ff9095b4f0423dfdb41b3286c3b7a783bb43edefb5e1691d691ae6f915a4629bfa25da7466c80f05d80e0083026f3d02cf9701cf3753e06511af84641159d19ea67c43f0ef99f641bc4ffd42516eaa44f11e51d1e770f75b7f36f5b3e56a3ea29aed6a0e9921e8498aeae8692d1473337a92801e01a17159aed13f0375d248b8403810695a66d4fe0747234b448e075f20ec7c1d44e425d029afc5835cd7568441755ad29e4c8970d124adb9a2eddb5a4b197db61039f82fc5c5592846c84af4e92eac014777d4de53798c83e864e3f990584051f0ff87be3749cfdfe4abede9ad5b64817925c54e47c5fb9e8de2be943549e339410b739c2be2bf555e820eb5df397c22fe9ec468d2d979272c347e17315b2d11db490daf620173c430403ee2504b885bc97ab30d032840ff661cf0200eb1763b4093b686582f0086f7c4ece97ebcbe1f6a71b3395294a2d769f5b667085789c7c538314644d1d20f3dc4544eff0f70f3b7b1087417e36bf8e5f6ffab3a4cf6824402f9649555ec1ebb3375e182ec086181237cca700243e06d6a0d9135395160bfd4790bdef0787973567346d481f21d924e41f3d88e9133577e3e60a5b2feb0ee5e6c3131513a7b0c2344bd96af71d964a9ce14df0fc2aa4b83b64a3ce5646076ed74133a31b132e4f21bc25a8f51e368ee23b7f8ec2d9521fe85a63dea29013748cc1bdefae5dedf510836ae15bb234c7aba5489563b51060a5a4776dbf84411b19a014a922b4779c8dd56741d0c0c9b16cd2fcd28a379398a4f8634b8ff8fdf211abdb75d037255b9b0345cad1e2b9f9a6adc5186c9f2c54f8911620bb59f1cc1c7e36f63a29d3a0d66b6f79e0b79090235e661775795c7e5480f91edff25d421cf718ffddc809d4791f9d114c05d4a5408d17396d9ee8ef836447984bc3fb462888e79f467553a3f09b30e782a41fab516355adb32cae71d9b64652552da8d8aa9c12ace42769e9621d84e10c198d1d7a7f61c1aba68907f56be4f17ce737bd5037ce51f13387d933cf7834d4ebfc64bec7c5b5e7cf5c0eb513baed6ac96c88dbe4d66be6f8a6d7882c61b98bcc84dc1b89d3f8cb387ccbbab54502bcccc5d45aa7f1ae37f821a51fe437522dc3fbbe68fed7bd61613ac5dc26daeb56efc0b23d404799d0788252673fce1983a79b5a5706182b3fc9154144ee57d40e75f36133729be10dc2775d304694bdf2eb33ee02a9abce98bced1b824971225b0e7c217b297e7d53c88d605c8985a1a49c8a0882ed39acffc439c8d679faa484f00f001da6000741cd1b37be1b40137a426b1679bdb221bccd04af1a6110a973fef792cfb5a072ceb708e3b6b9a74d5190a8c95fec0a495c6276c9d425b254493059aca3c3d4c0838769b0561d9ab58784f96f7a0737e280081a38a247131d5ad0e943f56ca6cd4d7f04b343225bda0f33ee40a8196dcf7f2c709abd927791948ab26baf3eaef7a07c0aa10784203c10530762b598a8fdc8eca05d09b3b29da83532d30f9ca1e2c08fa05c71f1cfd0098d7eb2fdaccf0a7332986aaccb1e70b9972c281c04e5b6891dce25c4afdfa386433daf068c0ecf962e231cf1a7a4443234065d8e2742de8310496ae0e98b41e324cfd904780bf8a4f7512258cfc515aa929eaba46e6319d4152fd4dc2c44dc973ef9b5add2be7c966e2203d8c44c0b6d7c0e8784a0a3fc4b806deb0a79eb0161149f2af125dd25ec2b356d64bfd8873fbee2c5b078dbe8115636efd961370e5a1de59a39cafd326f6c66ed24ada5e67972cb11f851968e57e3bc1ac3e32ea5b16a8c4aa75b1a69f9ebf0ee799974b107b81c88ecbab651e6e905d2a8427383ab21a82ceb00f04aae2973f01cfc859d13480067aa83faaa3140c5e42c81f88789a499e1aac55299b21c9e55703cef2aa976165a97d418b6031a0a10871e749a4d4e7347a1fffdb0ff05e978eb19b29c605c178857082a46b7c7c333013909d2182df26f4c55d4b43fbdd62591cbd4d221b3e6fd195c01dc712749c86226d948cd45fce5a1cc8992d2e96664c323f043429a903d2f09b3cc3f0dbb525a6d723ee6a15a0121207f4ca928abe0347bac460fdd460a447f9320ee798b81e6fa617d13c9c765b2ea15cbac4b2f1d69d415bbfe692df34049c23eff7aa4250864b11028e48944cfaa73534b6c82c68bd48ca2a4a90d4c0057cde910f2cfb79820d6d641b0716c74e70402b45da2d9f86a96bcb404de5be0bfd173c207d9ca1db7b20d121cb78a6ed2667ab24b79783b3f9f436862e89f5e41829008c6dfe187dc06ee6e87b6be64059397d283a4b7a30eb01924ffaa127640e79e2cf9b6f0fd0b45c2ef77becd20fff5e3236824dcf6c3d6b2175b00f20bfe48a543d01a5827519bde600016d4a9e866751f0981f683809792efe96e18ea978312b0910f2b1492c786967049a6b93dc959ea622abd0a0eb1a472ecfee838740ef25cf2939cc9bfbd9f6acfa64a72407848183fabd451ac001c1fb2656bc41603f9e0cc2ffb39aea0bcfaf82ecbc5feb668ad118e7ce944602e9c277c0df573a6ced3b9578d4066e5edb733c3fe71dd7dba045660347770a81695247621e540cf1558fb4d8c4b3f68e0da99af0816ede240e038e4fe77b39e3b7fed3eafec0560ce6e6e564d5b69e550adf4bd8ffa68bb7c7c09a5597afc8d1e967b1093692a578a70e8564cfa26826b4add2c9523669b85b7a0f9c3ed8298691affef59411b9a3733f94c416eef5b5056a14cabb75e880ac1e2359a85068c354485fb0eb8b2ae799f192a1915082ad4d153311008e84872189a19fa34c73f37e2ae0890aed3748111bda52bf613e0c9d2755c4b4e0d283eb023283568ae91ef4341cccfa6842cf97f52080e0b3af4cd520c9817385da8d6d34730e31f39f1f3479b254dd589baf5766873e8da6b8356dff6389d3e74b04ff78f998bf8ecbce5bafd4e187e14fe5c238fd8472ed8edcbe05c9a291bfb1c7b607808a76060fb6759f89cef41e92ce1cb845dfd6328d3c71ff921fe5a6f58bc3ae124d221d80c89f9ab40bdd7c841dc7f3bb14d7a51d2decf17e7858a7d2d1be813c25eb790e3467019291d44f4ea5d8d917b078b9f8faa75d27a5e3bb7965c72bd618780fe32c3c34f409afd49ee90c1a1c3bd668bf4facd0b346f145c4a70fd33d0dd17c5214fd48b65a760f076757bcf8b16f58a9a1ebf916b2980a4c6a7e9368a9bffccd5f814e367583986a27c1eda7b4f97047d018fba2666a80cf93bf301589b8e92cdd4b6b02582aebb605977e2725585e6b098638131de8baee3a55791258de78c100643dede61013d771d429b2c634bb67c17b56147c058e65d169bcf6439f33ee4fd7e45c86e3f2fe4fd4780634256011df65f78c462ee0841ca0349f14741d3576ffe8c072772012e3c65826e754907c5c3cdcda9b29b55725622df7028be126868034549ccd65982860725a00d9e1071bde01f214ffb3745ca96729fe2cb29cb0f87a48266539c85f4bad8fabce1664ed0b870df4b03b8c66a9a66fb3eb9f3aa9b65edaead897bd6bb695380daf3aa306c2cf110890dfc863e26758378999de3b51e9efabc452adc0a913587f98b4b1d2ca9619f2ea6c181745e546500561339c1878ab8df19467688552d1a6d93b977af27e7d03e6af72d78f391dcb72cb51e93367c11e0b2002ff552fccd1b91d855f27b902a1c7e397c27406ac08501ed95cf697220fe4475dfdc7893dd6f64e7fc470a165cf0bbe7f6c8347863827c57f4558184c699ec98fdb8327722dbb2c52a27562729459c324115cbff1e675205fd80c11be617c789b1a5e60b269f019bde48b49d6e65c7f2c4e2fe1fdd007e8987dbb67cfe63291819015ef46ff31b9ee0eb08b9a2dcc5bc58c0d5efbb1c94fdf0488bf93ea703558545a65ba465908cc269a35d73391aa687bedf2ba2386bd6e0a085461e658df84a03cf917d1f082948698798ed2673db775ec7f2bd08e7be0ed07bf9fc9c78955253161211db9c4b0e06dccbe9dd3b63c763cc25fa3232c4f95c2a9d8f312ee16ca9387ea8d231b6c3ce34a1a5a29588a8193bed98bcd867c07ae5e2f853a320a58b01bbaa57998eef25798fd8d8fb4da1d2edc12f6c0222ccb3072f990bac2c417ebab6dde9693ce067e6c3535238d03e455958051a57d2cb6e0634983a83034f83a0e8625a2dde2da2e208dc3efe24a05d754a3519cdf6995c9e7cfbad85bce00c63615233119c7fd7547adfec7b7ae21c5b404ba1c6630edf770fd114dde3e8be43445504145ab1be1625abca0c85aba8251684527808f4c5aeed1a59829d2c9ee48f394058ed94c0cfab25b99cc3b2e0866f843838d328c01e09ff40c309c03237b2bfae7f369eb7514b34f0453efffcba0150cbcf36d673f47b696349122f20c75d00fdec7331264d3b269d2da52f831ecbe74260256be26d2f6deadd7193494ec3d713f7f59469dc7501af253494f3df66cbf07ad34076a0326ef21f71d5f6f0083ec31589c1f49ad75e03f2d9a53500876dfa9e87d026e3f8a4155268d59142166396e2bdc5470e204116740f3a8ffe717d6437c3ad8725130720b4ddf118f152b99a01ca3d9362fb6db7958c752484d6e3de9b15f2015c1b14cc75693324938e1bfe76f09a550690556d572f09a4bd51bbb70a11db82d9fc4d7353be3b81a34bb585fe5651a9631d42d24c57802aaeb19fa7c9d0b94b4dce19bf21b5d511e4f6629fc729ce2189c0e6b4fd2bcaa611e2df449c6f8f1ab08ff23855ca7496486e66e158819089c167a47409d0d10e4c79857cc4cd13b67c6b90a48577b8ff249beaff6ba89ef37b5a55d1b654c05b4c0bdcbec206c60053d9118a347", 0x1000}}, 0xfffffd96)
openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

37.73788783s ago: executing program 39 (id=999):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r4=>0x0})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80, 0x100)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10300}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000040)
getdents64(r5, &(0x7f0000000180)=""/28, 0x1c)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00')
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x20044000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f00000002c0)=0x12f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff)
r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./ffs\x00', &(0x7f00000003c0), 0x4040, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@loose}, {@ignoreqv}, {@posixacl}, {@version_9p2000}, {@cache_loose}, {@cache_fscache}, {@uname={'uname', 0x3d, 'ingress\x00'}}, {@noxattr}], [{@pcr={'pcr', 0x3d, 0x26}}, {@dont_hash}, {@appraise_type}]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff)
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)

37.694820595s ago: executing program 2 (id=1021):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r4=>0x0})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4")
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80, 0x100)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10300}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000040)
getdents64(r5, &(0x7f0000000180)=""/28, 0x1c)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00')
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x20044000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f00000002c0)=0x12f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff)
r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./ffs\x00', &(0x7f00000003c0), 0x4040, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@loose}, {@ignoreqv}, {@posixacl}, {@version_9p2000}, {@cache_loose}, {@cache_fscache}, {@uname={'uname', 0x3d, 'ingress\x00'}}, {@noxattr}], [{@pcr={'pcr', 0x3d, 0x26}}, {@dont_hash}, {@appraise_type}]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff)
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)

34.310371606s ago: executing program 2 (id=1024):
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0)

33.219905502s ago: executing program 2 (id=1027):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7)

31.622590794s ago: executing program 40 (id=1027):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7)

7.932377633s ago: executing program 8 (id=1082):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e510a45bd95217d2b38c09fedae469737f49b6a3ef2793f4dae81d598e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}})

5.301933871s ago: executing program 8 (id=1084):
syz_read_part_table(0x5c6, &(0x7f0000000000)="$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")

4.844551321s ago: executing program 8 (id=1086):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0)

2.815910813s ago: executing program 8 (id=1091):
setgroups(0x0, &(0x7f0000000140))
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x200b, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50)

2.059500554s ago: executing program 6 (id=1092):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @empty}, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff, 0xffffffff, 0x6})

1.78811771s ago: executing program 8 (id=1093):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000010)
shutdown(r0, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
close(0xffffffffffffffff)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448cb, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
pselect6(0x40, &(0x7f0000000080)={0xdb43, 0xe, 0x6, 0x3, 0x2040, 0xfffffffffffffff9, 0x2, 0x9}, &(0x7f00000000c0)={0x9, 0xffffffff, 0x2, 0x0, 0x42e, 0x9, 0x9, 0xda}, &(0x7f0000000140)={0x99, 0x1ff, 0x8, 0x58a, 0x9, 0x80, 0x7, 0x6}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={[0x2]}, 0x8})

1.567979448s ago: executing program 6 (id=1094):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = socket(0x2, 0x80805, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x0, 0xd, 0x5e}, 0x2c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@private0}}}, &(0x7f00000004c0)=0xe8)
r3 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10)
syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
lseek(r4, 0x7fffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x8}, @const={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x38}, 0x28)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x14, 0x1, 0x4, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf25000000000000000000000000000000002001000000000000002100000000000000008002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff090000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffffffffffff7f00"/135], 0x13c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f0000000600)={0x28, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="9c6ac0221c3a1c61d80375afd77953850d39c9e687cdffb387f0361b543c8475a25a28e21e2b7d3bda37c42f50a29056fba4501f1692a5f7c7b1520afaf36e747ddf8a24bd554759eaad26660148b4812f7dc14414ff892099035499c04e8d716e2d2841fd8e6bd0702e7f95fa895ec6bfd6d3cc1d79d5f5debad2ba66fbd8970c109a6021d0405b5b78b9d95496e24ee2550a4848816b4e322d3ba9446314b92a52e4a3173582a240d897a3b6e87a761894f8a9fd5bbe72d75936a425a912fecc4334b01e", 0x1, 0x8, 0x3, 0x1, {0x0, 0x0, r5, 0x80000001}}, 0x1)

1.288015866s ago: executing program 6 (id=1095):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000040012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='10000', 0x5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r6, &(0x7f0000000200)='1', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r7, &(0x7f0000000280)='0', 0x1)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={r3, 0xc3e1}, 0x8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0x40000, 0x3, 0x81d7})

1.211285076s ago: executing program 8 (id=1096):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)

920.553526ms ago: executing program 6 (id=1097):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r4=>0x0})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80, 0x100)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10300}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000040)
getdents64(r5, &(0x7f0000000180)=""/28, 0x1c)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00')
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x20044000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f00000002c0)=0x12f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff)
r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./ffs\x00', &(0x7f00000003c0), 0x4040, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@loose}, {@ignoreqv}, {@posixacl}, {@version_9p2000}, {@cache_loose}, {@cache_fscache}, {@uname={'uname', 0x3d, 'ingress\x00'}}, {@noxattr}], [{@pcr={'pcr', 0x3d, 0x26}}, {@dont_hash}, {@appraise_type}]}})
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b)

272.876217ms ago: executing program 6 (id=1098):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="6802000000050104000000000000000003000004540201000300000005"], 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

0s ago: executing program 6 (id=1099):
socket$inet_tcp(0x2, 0x1, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4fb, &(0x7f0000001c80)="$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")
r2 = creat(&(0x7f0000000000)='./file1\x00', 0xa4)
write$UHID_INPUT(r2, &(0x7f0000002180)={0x8, {"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", 0x1000}}, 0xfffffd96)
openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x0, 0x42474752})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg$inet(r6, 0x0, 0x0, 0xf5)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x4000)

kernel console output (not intermixed with test programs):

0
[  928.782376][T11887]  ? __pfx_wake_bit_function+0x10/0x10
[  928.782411][T11887]  gfs2_instantiate+0x168/0x220
[  928.782443][T11887]  gfs2_glock_wait+0x1d4/0x2a0
[  928.782465][T11887]  do_sync+0x49c/0xbb0
[  928.782487][T11887]  ? gfs2_quota_sync+0x353/0x450
[  928.782518][T11887]  ? __pfx_do_sync+0x10/0x10
[  928.782538][T11887]  ? do_raw_spin_lock+0x12b/0x2f0
[  928.782566][T11887]  ? gfs2_quota_sync+0x353/0x450
[  928.782588][T11887]  ? srso_alias_return_thunk+0x5/0xfbef5
[  928.782613][T11887]  ? srso_alias_return_thunk+0x5/0xfbef5
[  928.782638][T11887]  ? do_raw_spin_unlock+0xf5/0x210
[  928.782662][T11887]  gfs2_quota_sync+0x353/0x450
[  928.782694][T11887]  gfs2_quotad+0x2ab/0x6f0
[  928.782729][T11887]  ? __pfx_gfs2_quotad+0x10/0x10
[  928.782752][T11887]  ? srso_alias_return_thunk+0x5/0xfbef5
[  928.782776][T11887]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  928.782799][T11887]  ? srso_alias_return_thunk+0x5/0xfbef5
[  928.782824][T11887]  ? __kthread_parkme+0x71/0x1f0
[  928.782848][T11887]  ? __kthread_parkme+0x196/0x1f0
[  928.782875][T11887]  kthread+0x388/0x470
[  928.782901][T11887]  ? __pfx_gfs2_quotad+0x10/0x10
[  928.782923][T11887]  ? __pfx_kthread+0x10/0x10
[  928.782950][T11887]  ret_from_fork+0x514/0xb70
[  928.782979][T11887]  ? __pfx_ret_from_fork+0x10/0x10
[  928.783003][T11887]  ? srso_alias_return_thunk+0x5/0xfbef5
[  928.783024][T11887]  ? __switch_to+0xc89/0x1420
[  928.783048][T11887]  ? __pfx_kthread+0x10/0x10
[  928.783075][T11887]  ret_from_fork_asm+0x1a/0x30
[  928.783116][T11887]  </TASK>
[  928.784724][T11887] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  929.194267][T10888] Bluetooth: hci3: command tx timeout
[  929.308178][T11647] team0: Port device team_slave_0 added
[  929.318641][T11647] team0: Port device team_slave_1 added
[  929.327647][T11705] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.335340][T11705] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.345586][T11705] bridge_slave_0: entered allmulticast mode
[  929.354033][T11705] bridge_slave_0: entered promiscuous mode
[  929.559944][T11705] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.618093][T11705] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.668835][T11705] bridge_slave_1: entered allmulticast mode
[  929.700471][T11705] bridge_slave_1: entered promiscuous mode
[  930.017284][T11647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  930.041413][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.096030][T11647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.154159][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  930.206361][T11647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.226961][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.301264][T11647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  930.580510][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.773390][T11705] team0: Port device team_slave_0 added
[  930.869964][T11705] team0: Port device team_slave_1 added
[  930.878107][ T5267] 8021q: adding VLAN 0 to HW filter on device eth26
[  930.916176][T11647] hsr_slave_0: entered promiscuous mode
[  930.924909][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  930.932987][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  930.946864][T11647] hsr_slave_1: entered promiscuous mode
[  931.240543][T10888] Bluetooth: hci3: command tx timeout
[  931.388270][T11705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  931.418158][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  931.496269][T11705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  931.526834][T11705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  931.548473][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  931.633648][T11705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  931.694793][T11804] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.715706][T11804] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.740729][T11804] bridge_slave_0: entered allmulticast mode
[  931.771409][T11804] bridge_slave_0: entered promiscuous mode
[  931.824296][T11791] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.846138][T11791] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.864012][T11791] bridge_slave_0: entered allmulticast mode
[  931.893995][T11791] bridge_slave_0: entered promiscuous mode
[  931.927066][T11804] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.963853][T11804] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.991213][T11804] bridge_slave_1: entered allmulticast mode
[  932.005067][T11804] bridge_slave_1: entered promiscuous mode
[  932.067241][T11791] bridge0: port 2(bridge_slave_1) entered blocking state
[  932.105717][T11791] bridge0: port 2(bridge_slave_1) entered disabled state
[  932.130453][T11791] bridge_slave_1: entered allmulticast mode
[  932.139468][T11791] bridge_slave_1: entered promiscuous mode
[  932.352905][T11791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.366420][T11791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.382760][T11804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.469565][T11705] hsr_slave_0: entered promiscuous mode
[  932.476941][T11705] hsr_slave_1: entered promiscuous mode
[  932.483776][T11705] debugfs: 'hsr0' already exists in 'hsr'
[  932.489513][T11705] Cannot create hsr debugfs directory
[  932.571907][T11804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.739749][T11791] team0: Port device team_slave_0 added
[  932.966401][T11791] team0: Port device team_slave_1 added
[  933.069142][T11804] team0: Port device team_slave_0 added
[  933.106749][T11804] team0: Port device team_slave_1 added
[  933.307450][T11791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  933.325623][T11791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  933.382690][T11791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  933.547408][   T96] bridge_slave_1: left allmulticast mode
[  933.568057][   T96] bridge_slave_1: left promiscuous mode
[  933.580398][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.598865][   T96] bridge_slave_0: left allmulticast mode
[  933.611749][   T96] bridge_slave_0: left promiscuous mode
[  933.627415][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.661291][   T96] bridge_slave_1: left allmulticast mode
[  933.668472][   T96] bridge_slave_1: left promiscuous mode
[  933.681999][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.715000][   T96] bridge_slave_0: left allmulticast mode
[  933.731391][   T96] bridge_slave_0: left promiscuous mode
[  933.743267][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.765105][   T96] bridge_slave_1: left allmulticast mode
[  933.781295][   T96] bridge_slave_1: left promiscuous mode
[  933.795308][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.816376][   T96] bridge_slave_0: left allmulticast mode
[  933.840232][   T96] bridge_slave_0: left promiscuous mode
[  933.853330][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.067209][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  934.082775][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  934.093672][   T96] bond0 (unregistering): Released all slaves
[  934.187012][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  934.199726][   T96] bond0 (unregistering): Released all slaves
[  934.302327][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  934.314421][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  934.329463][   T96] bond0 (unregistering): Released all slaves
[  934.351968][T11791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  934.409160][T11791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  934.459304][ T5610] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566
[  934.543853][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  934.543882][ T5610] Tainted: [L]=SOFTLOCKUP
[  934.543888][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  934.543900][ T5610] Call Trace:
[  934.543907][ T5610]  <TASK>
[  934.543916][ T5610]  dump_stack_lvl+0xe8/0x150
[  934.543946][ T5610]  gfs2_assert_warn_i+0x18c/0x2c0
[  934.543982][ T5610]  gfs2_make_fs_ro+0x30d/0x320
[  934.544006][ T5610]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  934.544027][ T5610]  ? __pfx_autoremove_wake_function+0x10/0x10
[  934.544061][ T5610]  ? srso_alias_return_thunk+0x5/0xfbef5
[  934.544084][ T5610]  ? srso_alias_return_thunk+0x5/0xfbef5
[  934.544105][ T5610]  ? flush_work+0xd/0x30
[  934.544131][ T5610]  gfs2_put_super+0x235/0x870
[  934.544157][ T5610]  ? __pfx_gfs2_put_super+0x10/0x10
[  934.544178][ T5610]  generic_shutdown_super+0x13d/0x2d0
[  934.544209][ T5610]  kill_block_super+0x44/0x90
[  934.544238][ T5610]  deactivate_locked_super+0xbc/0x130
[  934.544266][ T5610]  cleanup_mnt+0x3d3/0x460
[  934.544298][ T5610]  task_work_run+0x1d9/0x270
[  934.544329][ T5610]  ? __pfx_task_work_run+0x10/0x10
[  934.544365][ T5610]  exit_to_user_mode_loop+0x1fa/0x730
[  934.544389][ T5610]  ? rcu_is_watching+0x15/0xb0
[  934.544417][ T5610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.544438][ T5610]  do_syscall_64+0x353/0x580
[  934.544463][ T5610]  ? trace_irq_disable+0x3b/0x140
[  934.544491][ T5610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.544510][ T5610] RIP: 0033:0x7f445559f317
[  934.544527][ T5610] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  934.544542][ T5610] RSP: 002b:00007ffea2ab9338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  934.544561][ T5610] RAX: 0000000000000000 RBX: 00007f4455634474 RCX: 00007f445559f317
[  934.544573][ T5610] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea2ab93f0
[  934.544585][ T5610] RBP: 00007ffea2ab93f0 R08: 00007ffea2aba3f0 R09: 00000000ffffffff
[  934.544597][ T5610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea2aba480
[  934.544609][ T5610] R13: 00007f4455634474 R14: 00000000000e2a6f R15: 00007ffea2aba4c0
[  934.544637][ T5610]  </TASK>
[  934.546843][T11791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.214838][T11804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  935.232856][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  935.325140][T11804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  935.352854][T11804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.381856][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  935.453091][T11804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.505343][ T5267] 8021q: adding VLAN 0 to HW filter on device eth27
[  935.532852][   T96] hsr_slave_0: left promiscuous mode
[  935.551090][   T96] hsr_slave_1: left promiscuous mode
[  935.572262][   T96] batman_adv: batadv0: Removing interface: batadv_slave_0
[  935.627253][   T96] batman_adv: batadv0: Removing interface: batadv_slave_1
[  935.678255][   T96] batman_adv: batadv0: Removing interface: batadv_slave_0
[  935.699371][   T96] batman_adv: batadv0: Removing interface: batadv_slave_1
[  937.584045][T11960] loop4: detected capacity change from 0 to 256
[  937.591285][T11960] vfat: Unknown parameter '/�l‰>QO+>(Í@J�æV� 8^eäÕ#lB«¸Úå±@“ò•r爯’®Û‡ò�n0È¢MºoÊ‹'Dþeç½�¥ü8{Ë^'
[  937.633615][T11959] loop4: detected capacity change from 0 to 2048
[  937.655471][T11959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  937.850575][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  937.866918][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  937.879444][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  937.888052][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  937.898689][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  938.348823][   T96] team0 (unregistering): Port device team_slave_1 removed
[  938.375269][   T96] team0 (unregistering): Port device team_slave_0 removed
[  939.960269][ T5613] Bluetooth: hci0: command tx timeout
[  941.059161][T11967] loop4: detected capacity change from 0 to 64
[  941.102954][   T96] team0 (unregistering): Port device team_slave_1 removed
[  941.153747][T11966] bio_check_eod: 5 callbacks suppressed
[  941.153763][T11966] syz.4.925: attempt to access beyond end of device
[  941.153763][T11966] loop4: rw=8390657, sector=159, nr_sectors = 1 limit=64
[  941.172929][T11966] buffer_io_error: 5 callbacks suppressed
[  941.172942][T11966] Buffer I/O error on dev loop4, logical block 159, lost async page write
[  941.187168][T11966] syz.4.925: attempt to access beyond end of device
[  941.187168][T11966] loop4: rw=8390657, sector=160, nr_sectors = 1 limit=64
[  941.200721][T11966] Buffer I/O error on dev loop4, logical block 160, lost async page write
[  941.209209][T11966] syz.4.925: attempt to access beyond end of device
[  941.209209][T11966] loop4: rw=8390657, sector=161, nr_sectors = 1 limit=64
[  941.222703][T11966] Buffer I/O error on dev loop4, logical block 161, lost async page write
[  941.231288][T11966] syz.4.925: attempt to access beyond end of device
[  941.231288][T11966] loop4: rw=8390657, sector=162, nr_sectors = 1 limit=64
[  941.245052][T11966] Buffer I/O error on dev loop4, logical block 162, lost async page write
[  941.253600][T11966] syz.4.925: attempt to access beyond end of device
[  941.253600][T11966] loop4: rw=8390657, sector=163, nr_sectors = 1 limit=64
[  941.267072][T11966] Buffer I/O error on dev loop4, logical block 163, lost async page write
[  941.275625][T11966] syz.4.925: attempt to access beyond end of device
[  941.275625][T11966] loop4: rw=8390657, sector=167, nr_sectors = 1 limit=64
[  941.289109][T11966] Buffer I/O error on dev loop4, logical block 167, lost async page write
[  941.297632][T11966] syz.4.925: attempt to access beyond end of device
[  941.297632][T11966] loop4: rw=8390657, sector=169, nr_sectors = 1 limit=64
[  941.311121][T11966] Buffer I/O error on dev loop4, logical block 169, lost async page write
[  941.319608][T11966] syz.4.925: attempt to access beyond end of device
[  941.319608][T11966] loop4: rw=8390657, sector=171, nr_sectors = 1 limit=64
[  941.333138][T11966] Buffer I/O error on dev loop4, logical block 171, lost async page write
[  941.341698][T11966] syz.4.925: attempt to access beyond end of device
[  941.341698][T11966] loop4: rw=8390657, sector=172, nr_sectors = 1 limit=64
[  941.355167][T11966] Buffer I/O error on dev loop4, logical block 172, lost async page write
[  941.363685][T11966] syz.4.925: attempt to access beyond end of device
[  941.363685][T11966] loop4: rw=8390657, sector=173, nr_sectors = 1 limit=64
[  941.377152][T11966] Buffer I/O error on dev loop4, logical block 173, lost async page write
[  941.457042][   T96] team0 (unregistering): Port device team_slave_0 removed
[  942.814095][ T5613] Bluetooth: hci0: command tx timeout
[  943.965348][T11972] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  943.974722][T11972] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  943.984333][T11972] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  944.312782][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'.
[  944.648699][T11981] loop4: detected capacity change from 0 to 32768
[  944.690456][T11981] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  944.698616][T11981] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  944.735026][T11981] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  944.814071][   T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  944.840355][ T5613] Bluetooth: hci0: command tx timeout
[  944.874147][   T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  944.967939][T11791] hsr_slave_0: entered promiscuous mode
[  945.014211][T11791] hsr_slave_1: entered promiscuous mode
[  945.077901][T11791] debugfs: 'hsr0' already exists in 'hsr'
[  945.128309][T11791] Cannot create hsr debugfs directory
[  945.428363][   T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 554ms
[  945.482303][   T10] gfs2: fsid=syz:syz.0: jid=0: Done
[  945.509229][T11981] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  945.563617][T11981] gfs2: fsid=syz:syz.0: found 1 quota changes
[  945.629909][T11979] 8021q: adding VLAN 0 to HW filter on device bond1
[  945.709841][T11991] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  945.789242][T11991] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  945.818180][T11979] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  945.884385][T11991] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  946.073588][T11979] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  946.557025][T11991] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:2 e:0
[  946.567524][T11991] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  946.812130][T11804] hsr_slave_0: entered promiscuous mode
[  946.920343][ T5613] Bluetooth: hci0: command tx timeout
[  947.257356][   T29] kworker/1:1 (29) used greatest stack depth: 15624 bytes left
[  947.309434][T11979] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  947.337602][T11804] hsr_slave_1: entered promiscuous mode
[  947.398647][T11804] debugfs: 'hsr0' already exists in 'hsr'
[  947.409363][T11979] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:2 e:0
[  947.420036][T11979] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  947.439330][T11804] Cannot create hsr debugfs directory
[  947.544209][T11991] gfs2: fsid=syz:syz.0: gfs2_quotad: sync error -5
[  947.764637][ T5610] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  947.785807][T11861] bridge0: port 1(bridge_slave_0) entered blocking state
[  947.819754][T11861] bridge0: port 1(bridge_slave_0) entered disabled state
[  947.848078][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  947.848106][ T5610] Tainted: [L]=SOFTLOCKUP
[  947.848113][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  947.848124][ T5610] Call Trace:
[  947.848131][ T5610]  <TASK>
[  947.848139][ T5610]  dump_stack_lvl+0xe8/0x150
[  947.848169][ T5610]  gfs2_assert_warn_i+0x18c/0x2c0
[  947.848206][ T5610]  gfs2_qd_dispose+0x444/0x540
[  947.848236][ T5610]  gfs2_quota_cleanup+0x42d/0x770
[  947.848264][ T5610]  ? __pfx_gfs2_quota_cleanup+0x10/0x10
[  947.848290][ T5610]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.848315][ T5610]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.848340][ T5610]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.848369][ T5610]  gfs2_make_fs_ro+0x2a0/0x320
[  947.848392][ T5610]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  947.848412][ T5610]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.848437][ T5610]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.848460][ T5610]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.848481][ T5610]  ? flush_work+0xd/0x30
[  947.848508][ T5610]  gfs2_put_super+0x235/0x870
[  947.848534][ T5610]  ? __pfx_gfs2_put_super+0x10/0x10
[  947.848555][ T5610]  generic_shutdown_super+0x13d/0x2d0
[  947.848585][ T5610]  kill_block_super+0x44/0x90
[  947.848614][ T5610]  deactivate_locked_super+0xbc/0x130
[  947.848642][ T5610]  cleanup_mnt+0x3d3/0x460
[  947.848674][ T5610]  task_work_run+0x1d9/0x270
[  947.848704][ T5610]  ? __pfx_task_work_run+0x10/0x10
[  947.848740][ T5610]  exit_to_user_mode_loop+0x1fa/0x730
[  947.848764][ T5610]  ? rcu_is_watching+0x15/0xb0
[  947.848792][ T5610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.848813][ T5610]  do_syscall_64+0x353/0x580
[  947.848838][ T5610]  ? trace_irq_disable+0x3b/0x140
[  947.848870][ T5610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.848888][ T5610] RIP: 0033:0x7f445559f317
[  947.848906][ T5610] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  947.848920][ T5610] RSP: 002b:00007ffea2ab9338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  947.848939][ T5610] RAX: 0000000000000000 RBX: 00007f4455634474 RCX: 00007f445559f317
[  947.848952][ T5610] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea2ab93f0
[  947.848963][ T5610] RBP: 00007ffea2ab93f0 R08: 00007ffea2aba3f0 R09: 00000000ffffffff
[  947.848976][ T5610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea2aba480
[  947.848987][ T5610] R13: 00007f4455634474 R14: 00000000000e6efc R15: 00007ffea2aba4c0
[  947.849016][ T5610]  </TASK>
[  948.263421][T11861] bridge_slave_0: entered allmulticast mode
[  948.271045][T11861] bridge_slave_0: entered promiscuous mode
[  948.278812][T11861] bridge0: port 2(bridge_slave_1) entered blocking state
[  948.286153][T11861] bridge0: port 2(bridge_slave_1) entered disabled state
[  948.293312][T11861] bridge_slave_1: entered allmulticast mode
[  948.300703][T11861] bridge_slave_1: entered promiscuous mode
[  948.331042][T11861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  948.342959][T11861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  948.377401][T11861] team0: Port device team_slave_0 added
[  948.385342][T11861] team0: Port device team_slave_1 added
[  948.843283][T11861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  948.908470][T11861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  949.147153][T11861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  949.530023][T10888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  949.542511][T10888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  949.552497][T10888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  949.580393][T10888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  949.588588][T10888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  949.765358][T11861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  949.820255][T11861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  950.021756][T11861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  950.978143][T11861] hsr_slave_0: entered promiscuous mode
[  951.008977][T11861] hsr_slave_1: entered promiscuous mode
[  951.056746][T11861] debugfs: 'hsr0' already exists in 'hsr'
[  951.107030][T11861] Cannot create hsr debugfs directory
[  951.655065][T10888] Bluetooth: hci4: command tx timeout
[  953.124618][T12025] loop4: detected capacity change from 0 to 64
[  953.164776][T12025] bio_check_eod: 5 callbacks suppressed
[  953.164791][T12025] syz.4.929: attempt to access beyond end of device
[  953.164791][T12025] loop4: rw=8390657, sector=159, nr_sectors = 1 limit=64
[  953.184067][T12025] buffer_io_error: 5 callbacks suppressed
[  953.184080][T12025] Buffer I/O error on dev loop4, logical block 159, lost async page write
[  953.198472][T12025] syz.4.929: attempt to access beyond end of device
[  953.198472][T12025] loop4: rw=8390657, sector=160, nr_sectors = 1 limit=64
[  953.212031][T12025] Buffer I/O error on dev loop4, logical block 160, lost async page write
[  953.220600][T12025] syz.4.929: attempt to access beyond end of device
[  953.220600][T12025] loop4: rw=8390657, sector=161, nr_sectors = 1 limit=64
[  953.234060][T12025] Buffer I/O error on dev loop4, logical block 161, lost async page write
[  953.242754][T12025] syz.4.929: attempt to access beyond end of device
[  953.242754][T12025] loop4: rw=8390657, sector=162, nr_sectors = 1 limit=64
[  953.256234][T12025] Buffer I/O error on dev loop4, logical block 162, lost async page write
[  953.264767][T12025] syz.4.929: attempt to access beyond end of device
[  953.264767][T12025] loop4: rw=8390657, sector=163, nr_sectors = 1 limit=64
[  953.278292][T12025] Buffer I/O error on dev loop4, logical block 163, lost async page write
[  953.286843][T12025] syz.4.929: attempt to access beyond end of device
[  953.286843][T12025] loop4: rw=8390657, sector=167, nr_sectors = 1 limit=64
[  953.300450][T12025] Buffer I/O error on dev loop4, logical block 167, lost async page write
[  953.308936][T12025] syz.4.929: attempt to access beyond end of device
[  953.308936][T12025] loop4: rw=8390657, sector=169, nr_sectors = 1 limit=64
[  953.322443][T12025] Buffer I/O error on dev loop4, logical block 169, lost async page write
[  953.330973][T12025] syz.4.929: attempt to access beyond end of device
[  953.330973][T12025] loop4: rw=8390657, sector=171, nr_sectors = 1 limit=64
[  953.344456][T12025] Buffer I/O error on dev loop4, logical block 171, lost async page write
[  953.353005][T12025] syz.4.929: attempt to access beyond end of device
[  953.353005][T12025] loop4: rw=8390657, sector=172, nr_sectors = 1 limit=64
[  953.366491][T12025] Buffer I/O error on dev loop4, logical block 172, lost async page write
[  953.375044][T12025] syz.4.929: attempt to access beyond end of device
[  953.375044][T12025] loop4: rw=8390657, sector=173, nr_sectors = 1 limit=64
[  953.388525][T12025] Buffer I/O error on dev loop4, logical block 173, lost async page write
[  953.721933][T10888] Bluetooth: hci4: command tx timeout
[  954.430446][T12036] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  954.746391][T12035] bridge0: port 3(erspan0) entered blocking state
[  954.755728][T12035] bridge0: port 3(erspan0) entered disabled state
[  954.762475][T12035] erspan0: entered allmulticast mode
[  954.769308][T12035] erspan0: entered promiscuous mode
[  956.349065][T10888] Bluetooth: hci4: command tx timeout
[  958.629471][T10888] Bluetooth: hci4: command tx timeout
[  960.336872][   T31] audit: type=1326 audit(1786163021.480:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.4.934" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f445559e0d9 code=0x0
[  960.516877][T11804] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  960.538507][T11804] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  960.838729][T11804] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  960.870523][T11804] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  961.071955][T11804] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  961.467048][T11804] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  961.945025][T11804] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  962.013026][T11804] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  964.776808][T12100] loop4: detected capacity change from 0 to 64
[  964.800384][T12100] bio_check_eod: 5 callbacks suppressed
[  964.800398][T12100] syz.4.937: attempt to access beyond end of device
[  964.800398][T12100] loop4: rw=8390657, sector=159, nr_sectors = 1 limit=64
[  964.819430][T12100] buffer_io_error: 5 callbacks suppressed
[  964.819442][T12100] Buffer I/O error on dev loop4, logical block 159, lost async page write
[  964.833873][T12100] syz.4.937: attempt to access beyond end of device
[  964.833873][T12100] loop4: rw=8390657, sector=160, nr_sectors = 1 limit=64
[  964.847434][T12100] Buffer I/O error on dev loop4, logical block 160, lost async page write
[  964.856088][T12100] syz.4.937: attempt to access beyond end of device
[  964.856088][T12100] loop4: rw=8390657, sector=161, nr_sectors = 1 limit=64
[  964.869632][T12100] Buffer I/O error on dev loop4, logical block 161, lost async page write
[  964.878165][T12100] syz.4.937: attempt to access beyond end of device
[  964.878165][T12100] loop4: rw=8390657, sector=162, nr_sectors = 1 limit=64
[  964.891674][T12100] Buffer I/O error on dev loop4, logical block 162, lost async page write
[  964.900226][T12100] syz.4.937: attempt to access beyond end of device
[  964.900226][T12100] loop4: rw=8390657, sector=163, nr_sectors = 1 limit=64
[  964.913695][T12100] Buffer I/O error on dev loop4, logical block 163, lost async page write
[  964.922221][T12100] syz.4.937: attempt to access beyond end of device
[  964.922221][T12100] loop4: rw=8390657, sector=167, nr_sectors = 1 limit=64
[  964.935728][T12100] Buffer I/O error on dev loop4, logical block 167, lost async page write
[  964.944243][T12100] syz.4.937: attempt to access beyond end of device
[  964.944243][T12100] loop4: rw=8390657, sector=169, nr_sectors = 1 limit=64
[  964.957997][T12100] Buffer I/O error on dev loop4, logical block 169, lost async page write
[  964.966593][T12100] syz.4.937: attempt to access beyond end of device
[  964.966593][T12100] loop4: rw=8390657, sector=171, nr_sectors = 1 limit=64
[  964.980063][T12100] Buffer I/O error on dev loop4, logical block 171, lost async page write
[  964.988625][T12100] syz.4.937: attempt to access beyond end of device
[  964.988625][T12100] loop4: rw=8390657, sector=172, nr_sectors = 1 limit=64
[  965.002116][T12100] Buffer I/O error on dev loop4, logical block 172, lost async page write
[  965.010652][T12100] syz.4.937: attempt to access beyond end of device
[  965.010652][T12100] loop4: rw=8390657, sector=173, nr_sectors = 1 limit=64
[  965.024124][T12100] Buffer I/O error on dev loop4, logical block 173, lost async page write
[  967.502937][T11961] bridge0: port 1(bridge_slave_0) entered blocking state
[  967.553809][T11961] bridge0: port 1(bridge_slave_0) entered disabled state
[  967.601011][T11961] bridge_slave_0: entered allmulticast mode
[  967.637567][T11961] bridge_slave_0: entered promiscuous mode
[  967.667867][T11961] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.733639][T11961] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.778258][T11961] bridge_slave_1: entered allmulticast mode
[  967.825903][T11961] bridge_slave_1: entered promiscuous mode
[  970.116880][   T96] bridge_slave_1: left allmulticast mode
[  970.173975][   T96] bridge_slave_1: left promiscuous mode
[  970.219593][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.280004][   T96] bridge_slave_0: left allmulticast mode
[  970.319937][   T96] bridge_slave_0: left promiscuous mode
[  970.362630][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.409443][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  970.429134][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  970.436974][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  970.446524][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  970.454539][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  970.560632][   T96] bridge_slave_1: left allmulticast mode
[  970.597804][   T96] bridge_slave_1: left promiscuous mode
[  970.634239][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.678739][   T96] bridge_slave_0: left allmulticast mode
[  970.711961][   T96] bridge_slave_0: left promiscuous mode
[  970.745766][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.166793][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  971.203951][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  971.232410][   T96] bond0 (unregistering): Released all slaves
[  971.437088][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  971.451111][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  971.461340][   T96] bond0 (unregistering): Released all slaves
[  971.913752][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4
[  972.033738][   T96] hsr_slave_0: left promiscuous mode
[  972.049395][   T96] hsr_slave_1: left promiscuous mode
[  972.068360][   T96] batman_adv: batadv0: Removing interface: batadv_slave_0
[  972.090058][   T96] batman_adv: batadv0: Removing interface: batadv_slave_1
[  972.144704][   T96] hsr_slave_0: left promiscuous mode
[  972.163679][   T96] hsr_slave_1: left promiscuous mode
[  972.169550][   T96] batman_adv: batadv0: Removing interface: batadv_slave_0
[  972.179235][   T96] batman_adv: batadv0: Removing interface: batadv_slave_1
[  972.395984][   T96] team0 (unregistering): Port device team_slave_1 removed
[  972.418038][   T96] team0 (unregistering): Port device team_slave_0 removed
[  972.521998][ T5613] Bluetooth: hci5: command tx timeout
[  972.774955][T10888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  972.786738][T10888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  972.795698][T10888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  972.804090][T10888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  972.813343][T10888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  973.205527][   T96] team0 (unregistering): Port device team_slave_1 removed
[  973.249648][   T96] team0 (unregistering): Port device team_slave_0 removed
[  973.587441][T11961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  973.885467][T11961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  974.264633][T12124] bond0: (slave netdevsim1): Releasing backup interface
[  974.297468][T11961] team0: Port device team_slave_0 added
[  974.344869][T11961] team0: Port device team_slave_1 added
[  974.602110][T10888] Bluetooth: hci5: command tx timeout
[  974.840677][T10888] Bluetooth: hci1: command tx timeout
[  974.869085][T11961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  974.940203][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  975.017315][T11961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  975.316068][T11961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  975.392517][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  975.552525][T11961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  975.589952][T12008] bridge0: port 1(bridge_slave_0) entered blocking state
[  975.610481][T12008] bridge0: port 1(bridge_slave_0) entered disabled state
[  975.630435][T12008] bridge_slave_0: entered allmulticast mode
[  975.673223][T12008] bridge_slave_0: entered promiscuous mode
[  975.823276][T12008] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.878594][T12008] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.929070][T12008] bridge_slave_1: entered allmulticast mode
[  975.964755][T12008] bridge_slave_1: entered promiscuous mode
[  976.446630][T12008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  976.469448][T11961] hsr_slave_0: entered promiscuous mode
[  976.478111][T11961] hsr_slave_1: entered promiscuous mode
[  976.529225][T12165] loop4: detected capacity change from 0 to 2048
[  976.563033][T12165] EXT4-fs: Ignoring removed i_version option
[  976.622627][T12165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  976.664493][T12165] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  976.680413][T10888] Bluetooth: hci5: command tx timeout
[  976.818604][T12008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  976.922189][T10888] Bluetooth: hci1: command tx timeout
[  977.334713][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  978.760212][T10888] Bluetooth: hci5: command tx timeout
[  979.000299][T10888] Bluetooth: hci1: command tx timeout
[  979.599963][T12008] team0: Port device team_slave_0 added
[  979.733319][T12008] team0: Port device team_slave_1 added
[  980.767354][T11861] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  980.802372][T11861] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  980.822326][T11861] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  980.834100][T11861] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  980.882252][T11861] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  980.918589][T11861] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  980.958460][T11861] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  981.000799][T11861] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  981.020761][T12008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  981.035350][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.085236][T10888] Bluetooth: hci1: command tx timeout
[  981.127387][T12008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  981.162147][T12008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  981.174674][T12214] netlink: 68 bytes leftover after parsing attributes in process `syz.4.945'.
[  981.196128][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.241848][T12008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  982.204499][T12222] loop4: detected capacity change from 0 to 131072
[  982.261768][T12222] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0)
[  982.271208][T12222] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  982.302387][T12222] F2FS-fs (loop4): invalid crc value
[  982.368149][T12222] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  982.391015][T12222] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  982.398060][T12222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  982.611858][T12222] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36
[  982.626466][T12222] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36
[  984.059986][T12008] hsr_slave_0: entered promiscuous mode
[  984.107045][T12008] hsr_slave_1: entered promiscuous mode
[  984.130867][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  984.195698][T12008] debugfs: 'hsr0' already exists in 'hsr'
[  984.223397][T12008] Cannot create hsr debugfs directory
[  984.360321][   T10] usb 5-1: Using ep0 maxpacket: 32
[  984.386790][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  984.439636][   T10] usb 5-1: config 0 has no interface number 0
[  984.479131][   T10] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  984.539575][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  984.564360][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  984.572536][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  984.583023][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  984.597665][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  984.623345][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.735632][   T10] usb 5-1: Product: syz
[  984.781630][   T10] usb 5-1: Manufacturer: syz
[  984.810291][   T10] usb 5-1: SerialNumber: syz
[  984.867897][   T10] usb 5-1: config 0 descriptor??
[  985.050010][   T10] usb 5-1: can't set config #0, error -71
[  985.159509][   T10] usb 5-1: USB disconnect, device number 7
[  986.376980][   T96] bridge_slave_1: left allmulticast mode
[  986.409904][   T96] bridge_slave_1: left promiscuous mode
[  986.443443][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[  986.482196][   T96] bridge_slave_0: left allmulticast mode
[  986.499266][   T96] bridge_slave_0: left promiscuous mode
[  986.512123][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[  986.534950][   T96] bridge_slave_1: left allmulticast mode
[  986.552587][   T96] bridge_slave_1: left promiscuous mode
[  986.561053][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[  986.582102][   T96] bridge_slave_0: left allmulticast mode
[  986.587732][   T96] bridge_slave_0: left promiscuous mode
[  986.615147][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[  986.763443][ T5613] Bluetooth: hci6: command tx timeout
[  986.938961][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  986.961408][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  986.981650][   T96] bond0 (unregistering): Released all slaves
[  987.119578][T12248] loop4: detected capacity change from 0 to 256
[  987.136005][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  987.196023][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  988.659385][   T96] bond0 (unregistering): Released all slaves
[  988.795168][T12126] bridge0: port 1(bridge_slave_0) entered blocking state
[  988.847367][ T5613] Bluetooth: hci6: command tx timeout
[  989.004433][T12126] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.508221][T12126] bridge_slave_0: entered allmulticast mode
[  989.575363][T12126] bridge_slave_0: entered promiscuous mode
[  989.934481][   T96] hsr_slave_0: left promiscuous mode
[  989.979920][   T96] hsr_slave_1: left promiscuous mode
[  990.009217][   T96] batman_adv: batadv0: Removing interface: batadv_slave_0
[  990.056573][   T96] batman_adv: batadv0: Removing interface: batadv_slave_1
[  990.106850][   T96] hsr_slave_0: left promiscuous mode
[  990.142297][   T96] hsr_slave_1: left promiscuous mode
[  990.177497][   T96] batman_adv: batadv0: Removing interface: batadv_slave_0
[  990.218933][   T96] batman_adv: batadv0: Removing interface: batadv_slave_1
[  990.457694][T12259] trusted_key: encrypted_key: key user:syz not found
[  990.758598][   T96] team0 (unregistering): Port device team_slave_1 removed
[  990.838487][   T96] team0 (unregistering): Port device team_slave_0 removed
[  990.886190][T12264] loop4: detected capacity change from 0 to 2048
[  990.904721][T12264] udf: Unknown parameter '†ir½s°00000000000000000000'
[  990.923822][ T5613] Bluetooth: hci6: command tx timeout
[  992.866628][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  992.876235][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  993.000492][T10888] Bluetooth: hci6: command tx timeout
[  993.255045][   T96] team0 (unregistering): Port device team_slave_1 removed
[  993.288220][   T96] team0 (unregistering): Port device team_slave_0 removed
[  993.468302][T12126] bridge0: port 2(bridge_slave_1) entered blocking state
[  993.485598][T12126] bridge0: port 2(bridge_slave_1) entered disabled state
[  993.499396][T12126] bridge_slave_1: entered allmulticast mode
[  993.509353][T12126] bridge_slave_1: entered promiscuous mode
[  995.903359][T12126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  995.988213][T12126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  996.348097][T12141] bridge0: port 1(bridge_slave_0) entered blocking state
[  996.425194][T12141] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.458091][T12141] bridge_slave_0: entered allmulticast mode
[  996.503779][T12141] bridge_slave_0: entered promiscuous mode
[  996.550534][T10888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  996.564669][T10888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  996.572405][T10888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  996.582251][T10888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  996.599016][T10888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  996.823701][T12126] team0: Port device team_slave_0 added
[  996.917839][T12141] bridge0: port 2(bridge_slave_1) entered blocking state
[  996.949774][T12141] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.992231][T12141] bridge_slave_1: entered allmulticast mode
[  997.027978][T12141] bridge_slave_1: entered promiscuous mode
[  997.151787][T12126] team0: Port device team_slave_1 added
[  998.682563][T10888] Bluetooth: hci3: command tx timeout
[  999.967740][T12141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1000.029351][T12126] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1000.051035][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1000.102551][T12293] loop4: detected capacity change from 0 to 1024
[ 1000.109710][T12126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1000.159273][T12141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1000.301168][T12126] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1000.330096][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1000.458964][T12126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1000.760457][T10888] Bluetooth: hci3: command tx timeout
[ 1000.987760][T12141] team0: Port device team_slave_0 added
[ 1001.024830][T12141] team0: Port device team_slave_1 added
[ 1001.204256][T12126] hsr_slave_0: entered promiscuous mode
[ 1001.211365][T12126] hsr_slave_1: entered promiscuous mode
[ 1001.217610][T12126] debugfs: 'hsr0' already exists in 'hsr'
[ 1001.223917][T12126] Cannot create hsr debugfs directory
[ 1001.591326][T12141] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1001.626876][T12141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1001.705629][T12141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1001.742826][T12141] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1001.759973][T12141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1001.813186][T12141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1002.412932][T12141] hsr_slave_0: entered promiscuous mode
[ 1002.439103][T12141] hsr_slave_1: entered promiscuous mode
[ 1002.459825][T12141] debugfs: 'hsr0' already exists in 'hsr'
[ 1002.470441][T12141] Cannot create hsr debugfs directory
[ 1002.841150][ T5613] Bluetooth: hci3: command tx timeout
[ 1004.920187][ T5613] Bluetooth: hci3: command 0x0419 tx timeout
[ 1006.050860][T12314] bond2: entered promiscuous mode
[ 1006.331938][T12008] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1006.374479][T12008] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1006.401620][T12008] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1006.429621][T12008] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1006.508770][   T96] bridge_slave_1: left allmulticast mode
[ 1006.514755][   T96] bridge_slave_1: left promiscuous mode
[ 1006.520983][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.530814][   T96] bridge_slave_0: left allmulticast mode
[ 1006.536456][   T96] bridge_slave_0: left promiscuous mode
[ 1006.543776][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.556588][   T96] bridge_slave_1: left allmulticast mode
[ 1006.562380][   T96] bridge_slave_1: left promiscuous mode
[ 1006.568065][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.579106][   T96] bridge_slave_0: left allmulticast mode
[ 1006.585708][   T96] bridge_slave_0: left promiscuous mode
[ 1006.592247][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.727339][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1006.739549][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1006.767227][   T96] bond0 (unregistering): Released all slaves
[ 1006.921477][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1006.933932][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1006.944460][   T96] bond0 (unregistering): Released all slaves
[ 1006.963718][T12008] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1006.975120][T12008] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1007.013645][ T5613] Bluetooth: hci3: command 0x0419 tx timeout
[ 1007.061833][T12233] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1007.082833][T12233] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.132128][T12233] bridge_slave_0: entered allmulticast mode
[ 1007.142900][T12233] bridge_slave_0: entered promiscuous mode
[ 1007.166245][T12008] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1007.207386][T12008] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1007.317270][   T96] hsr_slave_0: left promiscuous mode
[ 1007.367424][   T96] hsr_slave_1: left promiscuous mode
[ 1007.396081][   T96] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1007.436538][   T96] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1007.497756][   T96] hsr_slave_0: left promiscuous mode
[ 1007.522184][   T96] hsr_slave_1: left promiscuous mode
[ 1007.551794][   T96] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1007.568724][   T96] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1007.915118][   T96] team0 (unregistering): Port device team_slave_1 removed
[ 1007.958617][   T96] team0 (unregistering): Port device team_slave_0 removed
[ 1008.629268][   T96] team0 (unregistering): Port device team_slave_1 removed
[ 1008.695979][   T96] team0 (unregistering): Port device team_slave_0 removed
[ 1009.065567][T12233] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.095440][T12233] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.116620][T12233] bridge_slave_1: entered allmulticast mode
[ 1009.135404][T12233] bridge_slave_1: entered promiscuous mode
[ 1009.157083][T12008] kthread_run failed with err -4
[ 1009.584772][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1009.641807][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1009.965434][T12281] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.012773][T12281] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.058020][T12281] bridge_slave_0: entered allmulticast mode
[ 1010.084182][T12281] bridge_slave_0: entered promiscuous mode
[ 1010.142871][T12281] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1010.178632][T12281] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.207243][T12281] bridge_slave_1: entered allmulticast mode
[ 1010.257129][T12281] bridge_slave_1: entered promiscuous mode
[ 1010.594232][T12233] team0: Port device team_slave_0 added
[ 1010.643810][T12281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1010.735444][T12281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1010.799288][T12233] team0: Port device team_slave_1 added
[ 1010.977531][T12126] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1011.019788][T12126] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1011.051606][T10888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1011.067361][T10888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1011.076138][T10888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1011.090891][T10888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1011.101954][T10888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1011.456205][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1011.482576][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1011.535762][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1011.565158][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1011.580797][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1011.641433][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1011.669566][T12126] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1011.709435][T12126] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1011.733414][T12126] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1011.757864][T12126] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1011.783272][T12281] team0: Port device team_slave_0 added
[ 1011.913785][T12126] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1011.954109][T12126] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1012.015232][T12281] team0: Port device team_slave_1 added
[ 1012.599824][T12233] hsr_slave_0: entered promiscuous mode
[ 1012.613803][T12233] hsr_slave_1: entered promiscuous mode
[ 1012.634226][T12281] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1012.650332][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.703261][T12281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1012.773970][T12281] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1012.808678][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.909290][T12281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1013.160583][T10888] Bluetooth: hci0: command tx timeout
[ 1013.737235][T12281] hsr_slave_0: entered promiscuous mode
[ 1013.762783][T12281] hsr_slave_1: entered promiscuous mode
[ 1013.780577][T12281] debugfs: 'hsr0' already exists in 'hsr'
[ 1013.787946][T12281] Cannot create hsr debugfs directory
[ 1015.067677][T12141] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1015.106463][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1015.205841][T12141] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1015.224218][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1015.240395][T10888] Bluetooth: hci0: command tx timeout
[ 1015.246674][T12141] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1015.268843][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1015.293372][   T96] bridge_slave_1: left allmulticast mode
[ 1015.307783][   T96] bridge_slave_1: left promiscuous mode
[ 1015.323778][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.352986][   T96] bridge_slave_0: left allmulticast mode
[ 1015.370335][   T96] bridge_slave_0: left promiscuous mode
[ 1015.377497][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.603987][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1015.634052][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1015.654949][   T96] bond0 (unregistering): Released all slaves
[ 1016.024337][T12141] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1016.093195][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1016.129250][   T96] hsr_slave_0: left promiscuous mode
[ 1016.152106][   T96] hsr_slave_1: left promiscuous mode
[ 1016.167893][   T96] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1016.191280][   T96] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1016.397127][   T96] team0 (unregistering): Port device team_slave_1 removed
[ 1016.419638][   T96] team0 (unregistering): Port device team_slave_0 removed
[ 1016.908443][T12126] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1017.332679][T10888] Bluetooth: hci0: command tx timeout
[ 1017.421436][T12126] 8021q: adding VLAN 0 to HW filter on device team0
[ 1017.533363][   T96] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1017.540530][   T96] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1017.664099][   T96] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1017.671250][   T96] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1017.774283][T12371] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1017.794838][T12371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1017.828410][T12371] bridge_slave_0: entered allmulticast mode
[ 1017.859098][T12371] bridge_slave_0: entered promiscuous mode
[ 1017.894870][T12371] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1017.907943][T12371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1017.940524][T12371] bridge_slave_1: entered allmulticast mode
[ 1017.958109][T12371] bridge_slave_1: entered promiscuous mode
[ 1018.091921][T12141] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1018.275403][T12371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1018.345545][T12371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1018.553953][T12141] 8021q: adding VLAN 0 to HW filter on device team0
[ 1018.617494][T12371] team0: Port device team_slave_0 added
[ 1018.640033][T12281] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1018.675998][T12281] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1018.699891][T11618] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.707023][T11618] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1018.752701][T12371] team0: Port device team_slave_1 added
[ 1018.799099][T12281] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1018.857837][T12281] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1018.888578][T11615] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.895727][T11615] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1018.958247][T12281] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1018.975004][T12281] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1019.065650][T12371] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1019.093668][T12371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1019.173641][T12371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1019.211946][T12281] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1019.237294][T12281] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1019.267797][T12371] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1019.303476][T12371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1019.402074][T10888] Bluetooth: hci0: command tx timeout
[ 1019.467685][T12371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1019.967280][T12371] hsr_slave_0: entered promiscuous mode
[ 1019.981497][T12371] hsr_slave_1: entered promiscuous mode
[ 1019.993077][T12371] debugfs: 'hsr0' already exists in 'hsr'
[ 1020.010434][T12371] Cannot create hsr debugfs directory
[ 1020.054098][T12233] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1020.076646][T12233] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1020.128073][T12233] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1020.174654][T12233] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1020.210480][T12233] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1020.248681][T12233] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1020.318773][T12233] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1020.347864][T12233] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1021.344031][T12126] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1021.695275][T12281] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1021.945783][T12281] 8021q: adding VLAN 0 to HW filter on device team0
[ 1022.079963][   T96] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1022.087132][   T96] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1022.194043][T12233] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1022.245217][T11615] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1022.252356][T11615] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1022.542784][T12233] 8021q: adding VLAN 0 to HW filter on device team0
[ 1022.694276][   T96] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1022.701423][   T96] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1022.892221][   T96] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1022.899380][   T96] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1023.537880][T12141] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1023.779852][T12126] veth0_vlan: entered promiscuous mode
[ 1023.957405][T12126] veth1_vlan: entered promiscuous mode
[ 1024.032724][T12371] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1024.155698][T12371] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1024.198480][T12371] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1024.262484][T12371] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1024.318035][T12371] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1024.356889][T12371] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1024.397520][T12371] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1024.454466][T12371] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1024.796954][T12126] veth0_macvtap: entered promiscuous mode
[ 1024.902429][T12126] veth1_macvtap: entered promiscuous mode
[ 1025.066663][T12126] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1025.153136][T12126] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1025.518039][T12141] veth0_vlan: entered promiscuous mode
[ 1025.622494][ T1315] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.760961][T11615] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.845449][T12141] veth1_vlan: entered promiscuous mode
[ 1025.973639][ T5924] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.036924][T12371] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1026.115440][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1026.158544][  T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1026.167936][   T96] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.193657][  T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1026.427868][T12141] veth0_macvtap: entered promiscuous mode
[ 1026.503248][T12371] 8021q: adding VLAN 0 to HW filter on device team0
[ 1026.597283][T12141] veth1_macvtap: entered promiscuous mode
[ 1026.649492][T11615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1026.691826][T12233] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1026.698920][T11615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1026.731380][   T96] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.738492][   T96] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1026.847214][T11618] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.854353][T11618] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1026.936085][T12281] veth0_vlan: entered promiscuous mode
[ 1027.038657][T12141] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1027.110014][T12281] veth1_vlan: entered promiscuous mode
[ 1027.198879][T12141] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1027.481522][T11618] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1027.811360][T12603] loop4: detected capacity change from 0 to 40427
[ 1027.845508][T12603] F2FS-fs (loop4): invalid crc value
[ 1028.032976][T12603] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1028.049898][T12603] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[ 1028.057904][T12603] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 1028.068747][T12603] F2FS-fs (loop4): Start checkpoint disabled!
[ 1028.104959][T12603] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[ 1028.113488][T12603] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 1028.190027][T12605] netlink: 76 bytes leftover after parsing attributes in process `syz.8.760'.
[ 1028.232701][T11404] IPVS: starting estimator thread 0...
[ 1028.434558][T12608] IPVS: using max 33 ests per chain, 79200 per kthread
[ 1028.462758][T10579] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.489720][T12603] bio_check_eod: 5 callbacks suppressed
[ 1028.489736][T12603] syz.4.966: attempt to access beyond end of device
[ 1028.489736][T12603] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[ 1028.623184][ T3289] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.754020][  T140] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.868124][T12281] veth0_macvtap: entered promiscuous mode
[ 1028.921589][T10578] kworker/u8:17: attempt to access beyond end of device
[ 1028.921589][T10578] loop4: rw=1, sector=45096, nr_sectors = 128 limit=40427
[ 1029.070900][T12281] veth1_macvtap: entered promiscuous mode
[ 1029.107444][T10578] kworker/u8:17: attempt to access beyond end of device
[ 1029.107444][T10578] loop4: rw=2049, sector=45224, nr_sectors = 16 limit=40427
[ 1029.276877][T10578] CPU: 0 UID: 0 PID: 10578 Comm: kworker/u8:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1029.276907][T10578] Tainted: [L]=SOFTLOCKUP
[ 1029.276914][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1029.276926][T10578] Workqueue: writeback wb_workfn (flush-7:4)
[ 1029.276952][T10578] Call Trace:
[ 1029.276960][T10578]  <TASK>
[ 1029.276968][T10578]  dump_stack_lvl+0xe8/0x150
[ 1029.276996][T10578]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1029.277032][T10578]  f2fs_write_end_io+0x124b/0x1710
[ 1029.277076][T10578]  __submit_merged_bio+0x258/0x6a0
[ 1029.277096][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.277119][T10578]  ? rcu_is_watching+0x15/0xb0
[ 1029.277152][T10578]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1029.277181][T10578]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1029.277214][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.277244][T10578]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1029.277300][T10578]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1029.277337][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.277358][T10578]  ? f2fs_inode_chksum_verify+0x197/0x7f0
[ 1029.277410][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.277431][T10578]  ? __lock_acquire+0x683/0x2cf0
[ 1029.277482][T10578]  ? __lock_acquire+0x683/0x2cf0
[ 1029.277519][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.277541][T10578]  ? set_raw_inline+0x28b/0x390
[ 1029.277559][T10578]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[ 1029.277587][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.277611][T10578]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1029.277636][T10578]  do_writepages+0x338/0x560
[ 1029.277668][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.277689][T10578]  ? reacquire_held_locks+0x104/0x190
[ 1029.277716][T10578]  ? writeback_sb_inodes+0x450/0x1b00
[ 1029.277746][T10578]  __writeback_single_inode+0x12e/0xf90
[ 1029.277777][T10578]  writeback_sb_inodes+0x9de/0x1b00
[ 1029.277799][T10578]  ? __lock_acquire+0x683/0x2cf0
[ 1029.277846][T10578]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1029.277907][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.277928][T10578]  ? rcu_is_watching+0x15/0xb0
[ 1029.277955][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.277976][T10578]  ? queue_io+0x2d3/0x470
[ 1029.278005][T10578]  wb_writeback+0x41c/0xad0
[ 1029.278032][T10578]  ? queue_io+0x251/0x470
[ 1029.278060][T10578]  ? __pfx_wb_writeback+0x10/0x10
[ 1029.278080][T10578]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1029.278115][T10578]  wb_workfn+0x431/0x10f0
[ 1029.278151][T10578]  ? __pfx_wb_workfn+0x10/0x10
[ 1029.278168][T10578]  ? rcu_is_watching+0x15/0xb0
[ 1029.278195][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.278216][T10578]  ? trace_hrtimer_start+0x82/0x200
[ 1029.278244][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.278265][T10578]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1029.278288][T10578]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1029.278310][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.278334][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.278362][T10578]  ? rcu_is_watching+0x15/0xb0
[ 1029.278389][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.278412][T10578]  ? process_scheduled_works+0xa20/0x14e0
[ 1029.278432][T10578]  process_scheduled_works+0xa8e/0x14e0
[ 1029.278479][T10578]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1029.278505][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.278525][T10578]  ? assign_work+0x3cf/0x5d0
[ 1029.278550][T10578]  worker_thread+0xa47/0xfb0
[ 1029.278596][T10578]  kthread+0x388/0x470
[ 1029.278622][T10578]  ? __pfx_worker_thread+0x10/0x10
[ 1029.278641][T10578]  ? __pfx_kthread+0x10/0x10
[ 1029.278668][T10578]  ret_from_fork+0x514/0xb70
[ 1029.278697][T10578]  ? __pfx_ret_from_fork+0x10/0x10
[ 1029.278722][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.278743][T10578]  ? __switch_to+0xc89/0x1420
[ 1029.278768][T10578]  ? __pfx_kthread+0x10/0x10
[ 1029.278795][T10578]  ret_from_fork_asm+0x1a/0x30
[ 1029.278837][T10578]  </TASK>
[ 1029.772164][T10578] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1029.779087][T10578] CPU: 0 UID: 0 PID: 10578 Comm: kworker/u8:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1029.779113][T10578] Tainted: [L]=SOFTLOCKUP
[ 1029.779120][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1029.779132][T10578] Workqueue: writeback wb_workfn (flush-7:4)
[ 1029.779158][T10578] Call Trace:
[ 1029.779165][T10578]  <TASK>
[ 1029.779172][T10578]  dump_stack_lvl+0xe8/0x150
[ 1029.779200][T10578]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1029.779227][T10578]  f2fs_write_end_io+0x124b/0x1710
[ 1029.779271][T10578]  __submit_merged_bio+0x258/0x6a0
[ 1029.779292][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.779313][T10578]  ? rcu_is_watching+0x15/0xb0
[ 1029.779346][T10578]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1029.779376][T10578]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1029.779409][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.779438][T10578]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1029.779495][T10578]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1029.779532][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.779554][T10578]  ? f2fs_inode_chksum_verify+0x197/0x7f0
[ 1029.779606][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.779627][T10578]  ? __lock_acquire+0x683/0x2cf0
[ 1029.779674][T10578]  ? __lock_acquire+0x683/0x2cf0
[ 1029.779711][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.779732][T10578]  ? set_raw_inline+0x28b/0x390
[ 1029.779751][T10578]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[ 1029.779779][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.779802][T10578]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1029.779828][T10578]  do_writepages+0x338/0x560
[ 1029.779860][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.779881][T10578]  ? reacquire_held_locks+0x104/0x190
[ 1029.779908][T10578]  ? writeback_sb_inodes+0x450/0x1b00
[ 1029.779938][T10578]  __writeback_single_inode+0x12e/0xf90
[ 1029.779970][T10578]  writeback_sb_inodes+0x9de/0x1b00
[ 1029.779992][T10578]  ? __lock_acquire+0x683/0x2cf0
[ 1029.780043][T10578]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1029.780107][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.780128][T10578]  ? rcu_is_watching+0x15/0xb0
[ 1029.780155][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.780176][T10578]  ? queue_io+0x2d3/0x470
[ 1029.780202][T10578]  wb_writeback+0x41c/0xad0
[ 1029.780228][T10578]  ? queue_io+0x251/0x470
[ 1029.780256][T10578]  ? __pfx_wb_writeback+0x10/0x10
[ 1029.780276][T10578]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1029.780311][T10578]  wb_workfn+0x431/0x10f0
[ 1029.780347][T10578]  ? __pfx_wb_workfn+0x10/0x10
[ 1029.780364][T10578]  ? rcu_is_watching+0x15/0xb0
[ 1029.780391][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.780413][T10578]  ? trace_hrtimer_start+0x82/0x200
[ 1029.780441][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.780462][T10578]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1029.780484][T10578]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1029.780506][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.780531][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.780559][T10578]  ? rcu_is_watching+0x15/0xb0
[ 1029.780586][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.780609][T10578]  ? process_scheduled_works+0xa20/0x14e0
[ 1029.780629][T10578]  process_scheduled_works+0xa8e/0x14e0
[ 1029.780676][T10578]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1029.780702][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.780723][T10578]  ? assign_work+0x3cf/0x5d0
[ 1029.780747][T10578]  worker_thread+0xa47/0xfb0
[ 1029.780795][T10578]  kthread+0x388/0x470
[ 1029.780821][T10578]  ? __pfx_worker_thread+0x10/0x10
[ 1029.780841][T10578]  ? __pfx_kthread+0x10/0x10
[ 1029.780867][T10578]  ret_from_fork+0x514/0xb70
[ 1029.780896][T10578]  ? __pfx_ret_from_fork+0x10/0x10
[ 1029.780922][T10578]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1029.780943][T10578]  ? __switch_to+0xc89/0x1420
[ 1029.780967][T10578]  ? __pfx_kthread+0x10/0x10
[ 1029.780994][T10578]  ret_from_fork_asm+0x1a/0x30
[ 1029.781041][T10578]  </TASK>
[ 1030.262343][T12281] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1030.272910][T12281] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1030.508588][T10578] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1030.695104][ T5759] loop4: lost filesystem error report for type 5 error -108
[ 1030.877299][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1030.898120][   T96] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.041730][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1031.181267][T12233] veth0_vlan: entered promiscuous mode
[ 1031.473418][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1031.481800][ T3289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.535837][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1031.602824][T12233] veth1_vlan: entered promiscuous mode
[ 1031.781150][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.900037][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.963'.
[ 1031.911220][ T1315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.952636][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.963'.
[ 1032.019650][   T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1032.096311][   T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1032.719342][T12233] veth0_macvtap: entered promiscuous mode
[ 1032.725518][T10580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1032.786907][T10580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1032.837376][T12233] veth1_macvtap: entered promiscuous mode
[ 1033.363799][T12233] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1033.519776][T12233] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1033.645268][T12371] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1033.655189][T12648] loop8: detected capacity change from 0 to 64
[ 1033.889838][T12650] loop9: detected capacity change from 0 to 32768
[ 1034.054704][T12650] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1034.400554][T12663] loop2: detected capacity change from 0 to 32768
[ 1034.420487][ T1341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1034.511372][T12663] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1034.635251][T10580] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1034.666327][T12650] XFS (loop9): Ending clean mount
[ 1034.676072][T12650] XFS (loop9): Quotacheck needed: Please wait.
[ 1034.779581][T12663] XFS (loop2): Ending clean mount
[ 1034.788085][T12663] XFS (loop2): Quotacheck needed: Please wait.
[ 1035.027889][T11615] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.077687][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.8.964'.
[ 1035.182538][T12681] loop4: detected capacity change from 0 to 512
[ 1035.226999][T12650] XFS (loop9): Quotacheck: Done.
[ 1035.807406][   T31] audit: type=1800 audit(1786163096.920:305): pid=12683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.965" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=4430 res=0 errno=0
[ 1035.873397][T12663] XFS (loop2): Quotacheck: Done.
[ 1036.509220][ T1341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.862382][T12281] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1036.896512][T12681] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[ 1036.916327][T12141] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1036.997139][T12681] System zones: 0-2, 18-18, 34-35
[ 1037.145696][T12681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1037.298790][   T31] audit: type=1800 audit(1786163097.550:306): pid=12685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.863" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0
[ 1037.453997][T12681] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1037.799556][T10748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1037.928522][T10748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1038.157919][T12698] loop8: detected capacity change from 0 to 2048
[ 1038.183091][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.273659][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1038.398205][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1038.454618][T12698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1039.380792][T12706] syz.8.970 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1040.520615][T12706] ubi31: attaching mtd0
[ 1040.526549][T12706] ubi31: scanning is finished
[ 1040.713542][T10888] Bluetooth: hci5: ACL packet for unknown connection handle 0
[ 1040.941399][T12706] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1041.215470][T12126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1042.552385][T12371] veth0_vlan: entered promiscuous mode
[ 1046.595260][T12740] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1046.603090][T12740] overlayfs: failed to set xattr on upper
[ 1046.608788][T12740] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1046.615660][T12740] overlayfs: ...falling back to index=off.
[ 1046.621488][T12740] overlayfs: ...falling back to uuid=null.
[ 1046.928726][T12741] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[ 1047.023280][T12371] veth1_vlan: entered promiscuous mode
[ 1047.332092][T12730] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1047.498387][T12730] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1047.645698][T12730] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1047.742741][T12371] veth0_macvtap: entered promiscuous mode
[ 1049.983315][T12753] syzkaller0: entered promiscuous mode
[ 1050.076015][T12753] syzkaller0: entered allmulticast mode
[ 1050.142006][T12751] loop4: detected capacity change from 0 to 16
[ 1050.234599][T12751] erofs (device loop4): mounted with root inode @ nid 36.
[ 1050.660006][T12760] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1050.673729][T12760] erofs (device loop4): not enough plain data on disk @ la 4096 of nid 89
[ 1050.682916][T12760] erofs (device loop4): readahead error at folio 1 @ nid 89
[ 1050.692967][T12760] syz.4.980: attempt to access beyond end of device
[ 1050.692967][T12760] loop4: rw=524288, sector=128, nr_sectors = 256 limit=16
[ 1050.708816][T12760] syz.4.980: attempt to access beyond end of device
[ 1050.708816][T12760] loop4: rw=524288, sector=0, nr_sectors = 1024 limit=16
[ 1050.733316][T12760] erofs (device loop4): not enough plain data on disk @ la 20480 of nid 89
[ 1050.743206][T12760] erofs (device loop4): readahead error at folio 4 @ nid 89
[ 1050.752310][T12760] erofs (device loop4): not enough plain data on disk @ la 4096 of nid 89
[ 1050.760886][T12760] erofs (device loop4): not enough plain data on disk @ la 4096 of nid 89
[ 1050.769406][T12760] erofs (device loop4): read error -117 @ 1 of nid 89
[ 1050.785440][   T31] audit: type=1800 audit(1786163111.930:307): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.980" name="file2" dev="loop4" ino=89 res=0 errno=0
[ 1051.036713][T12371] veth1_macvtap: entered promiscuous mode
[ 1051.314784][T12763] loop6: detected capacity change from 0 to 2048
[ 1051.334937][T12371] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1051.404329][T12765] loop9: detected capacity change from 0 to 16
[ 1051.498100][T12371] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1051.526394][T12765] erofs (device loop9): mounted with root inode @ nid 36.
[ 1051.594651][T12763] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1051.752053][T10748] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.918964][T12773] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1051.948167][T10748] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.989014][T12763] syz.6.981: attempt to access beyond end of device
[ 1051.989014][T12763] loop6: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[ 1052.253494][ T5987] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.405225][ T5987] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.978322][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.981'.
[ 1054.747382][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.766293][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.202826][T10579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1056.288512][T10579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1056.782342][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1056.811356][T12801] loop2: detected capacity change from 0 to 512
[ 1056.932931][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1057.241109][T12801] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1057.968770][T12801] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.990: corrupted in-inode xattr: invalid ea_ino
[ 1058.179258][T12801] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1058.180135][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 1058.195698][    C0] EXT4-fs (loop2): initial error at time 1786163119: ext4_iget_extra_inode:5180: inode 15
[ 1058.205611][    C0] EXT4-fs (loop2): last error at time 1786163119: ext4_iget_extra_inode:5180: inode 15
[ 1058.241667][T12801] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.990: couldn't read orphan inode 15 (err -117)
[ 1058.558822][T12801] loop2: lost filesystem error report for type 5 error -117
[ 1058.608486][T12816] netlink: 76 bytes leftover after parsing attributes in process `syz.6.992'.
[ 1058.642272][   T10] IPVS: starting estimator thread 0...
[ 1058.668691][T12801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1058.852333][T12818] IPVS: using max 34 ests per chain, 81600 per kthread
[ 1062.690490][T12828] loop9: detected capacity change from 0 to 64
[ 1062.729578][T12281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1063.013319][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.013319][T12826] loop9: rw=8390657, sector=159, nr_sectors = 1 limit=64
[ 1063.029086][T12826] buffer_io_error: 5 callbacks suppressed
[ 1063.029098][T12826] Buffer I/O error on dev loop9, logical block 159, lost async page write
[ 1063.043559][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.043559][T12826] loop9: rw=8390657, sector=160, nr_sectors = 1 limit=64
[ 1063.057599][T12826] Buffer I/O error on dev loop9, logical block 160, lost async page write
[ 1063.066148][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.066148][T12826] loop9: rw=8390657, sector=161, nr_sectors = 1 limit=64
[ 1063.079630][T12826] Buffer I/O error on dev loop9, logical block 161, lost async page write
[ 1063.088368][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.088368][T12826] loop9: rw=8390657, sector=162, nr_sectors = 1 limit=64
[ 1063.102157][T12826] Buffer I/O error on dev loop9, logical block 162, lost async page write
[ 1063.111035][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.111035][T12826] loop9: rw=8390657, sector=163, nr_sectors = 1 limit=64
[ 1063.124563][T12826] Buffer I/O error on dev loop9, logical block 163, lost async page write
[ 1063.135175][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.135175][T12826] loop9: rw=8390657, sector=167, nr_sectors = 1 limit=64
[ 1063.148656][T12826] Buffer I/O error on dev loop9, logical block 167, lost async page write
[ 1063.157176][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.157176][T12826] loop9: rw=8390657, sector=169, nr_sectors = 1 limit=64
[ 1063.170679][T12826] Buffer I/O error on dev loop9, logical block 169, lost async page write
[ 1063.179161][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.179161][T12826] loop9: rw=8390657, sector=171, nr_sectors = 1 limit=64
[ 1063.192634][T12826] Buffer I/O error on dev loop9, logical block 171, lost async page write
[ 1063.201229][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.201229][T12826] loop9: rw=8390657, sector=172, nr_sectors = 1 limit=64
[ 1063.214721][T12826] Buffer I/O error on dev loop9, logical block 172, lost async page write
[ 1063.223254][T12826] syz.9.997: attempt to access beyond end of device
[ 1063.223254][T12826] loop9: rw=8390657, sector=173, nr_sectors = 1 limit=64
[ 1063.238753][T12826] Buffer I/O error on dev loop9, logical block 173, lost async page write
[ 1063.316656][T12833] netlink: 'syz.6.998': attribute type 11 has an invalid length.
[ 1063.658699][T12833] netlink: 148 bytes leftover after parsing attributes in process `syz.6.998'.
[ 1064.143908][T11404] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1064.440741][T11404] usb 9-1: too many configurations: 151, using maximum allowed: 8
[ 1064.480829][T12844] Bluetooth: hci3: unexpected event for opcode 0x080e
[ 1064.512867][T12846] loop9: detected capacity change from 0 to 256
[ 1064.643877][T11404] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[ 1064.954415][T11404] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[ 1065.087750][T11404] usb 9-1: Product: syz
[ 1065.140195][T12856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1065.151056][T12856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1065.179297][T12856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1065.188870][T12856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1065.200324][T12856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1065.224440][T11404] usb 9-1: Manufacturer: syz
[ 1065.343753][T11404] usb 9-1: SerialNumber: syz
[ 1066.167032][T11404] usb 9-1: config 0 descriptor??
[ 1067.320254][T10888] Bluetooth: hci4: command tx timeout
[ 1067.956796][T11404] usb 9-1: can't set config #0, error -71
[ 1068.074526][T11404] usb 9-1: USB disconnect, device number 2
[ 1068.219431][T12141] ffs_data_put(): freeing
[ 1069.400208][T10888] Bluetooth: hci4: command tx timeout
[ 1069.884915][T10888] Bluetooth: hci6: command 0x206a tx timeout
[ 1069.909304][T12844] Bluetooth: hci6: Opcode 0x206a failed: -110
[ 1070.316705][T12878] loop8: detected capacity change from 0 to 64
[ 1070.893701][T12876] bio_check_eod: 5 callbacks suppressed
[ 1070.893716][T12876] syz.8.1008: attempt to access beyond end of device
[ 1070.893716][T12876] loop8: rw=8390657, sector=159, nr_sectors = 1 limit=64
[ 1070.915122][T12876] buffer_io_error: 5 callbacks suppressed
[ 1070.915135][T12876] Buffer I/O error on dev loop8, logical block 159, lost async page write
[ 1070.929451][T12876] syz.8.1008: attempt to access beyond end of device
[ 1070.929451][T12876] loop8: rw=8390657, sector=160, nr_sectors = 1 limit=64
[ 1070.943212][T12876] Buffer I/O error on dev loop8, logical block 160, lost async page write
[ 1070.951741][T12876] syz.8.1008: attempt to access beyond end of device
[ 1070.951741][T12876] loop8: rw=8390657, sector=161, nr_sectors = 1 limit=64
[ 1070.965328][T12876] Buffer I/O error on dev loop8, logical block 161, lost async page write
[ 1070.973885][T12876] syz.8.1008: attempt to access beyond end of device
[ 1070.973885][T12876] loop8: rw=8390657, sector=162, nr_sectors = 1 limit=64
[ 1070.987488][T12876] Buffer I/O error on dev loop8, logical block 162, lost async page write
[ 1070.996018][T12876] syz.8.1008: attempt to access beyond end of device
[ 1070.996018][T12876] loop8: rw=8390657, sector=163, nr_sectors = 1 limit=64
[ 1071.009615][T12876] Buffer I/O error on dev loop8, logical block 163, lost async page write
[ 1071.020252][T12876] syz.8.1008: attempt to access beyond end of device
[ 1071.020252][T12876] loop8: rw=8390657, sector=167, nr_sectors = 1 limit=64
[ 1071.033854][T12876] Buffer I/O error on dev loop8, logical block 167, lost async page write
[ 1071.042409][T12876] syz.8.1008: attempt to access beyond end of device
[ 1071.042409][T12876] loop8: rw=8390657, sector=169, nr_sectors = 1 limit=64
[ 1071.056003][T12876] Buffer I/O error on dev loop8, logical block 169, lost async page write
[ 1071.064538][T12876] syz.8.1008: attempt to access beyond end of device
[ 1071.064538][T12876] loop8: rw=8390657, sector=171, nr_sectors = 1 limit=64
[ 1071.078085][T12876] Buffer I/O error on dev loop8, logical block 171, lost async page write
[ 1071.087239][T12876] syz.8.1008: attempt to access beyond end of device
[ 1071.087239][T12876] loop8: rw=8390657, sector=172, nr_sectors = 1 limit=64
[ 1071.100827][T12876] Buffer I/O error on dev loop8, logical block 172, lost async page write
[ 1071.109312][T12876] syz.8.1008: attempt to access beyond end of device
[ 1071.109312][T12876] loop8: rw=8390657, sector=173, nr_sectors = 1 limit=64
[ 1071.125244][T12876] Buffer I/O error on dev loop8, logical block 173, lost async page write
[ 1071.290283][T11301] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1071.481463][T12844] Bluetooth: hci4: command tx timeout
[ 1071.551410][T11301] usb 7-1: Using ep0 maxpacket: 8
[ 1071.661668][T11301] usb 7-1: device descriptor read/all, error -71
[ 1071.735413][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1072.012446][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1072.091531][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.277080][   T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1072.386203][   T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1073.560222][T12844] Bluetooth: hci4: command tx timeout
[ 1073.566248][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[ 1074.614676][T12896] loop8: detected capacity change from 0 to 64
[ 1074.728926][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.916174][   T10] usb 3-1: Product: syz
[ 1074.990016][   T10] usb 3-1: Manufacturer: syz
[ 1075.088023][   T10] usb 3-1: SerialNumber: syz
[ 1075.193033][T12891] kexec: Could not allocate control_code_buffer
[ 1075.280649][   T10] usb 3-1: can't set config #1, error -71
[ 1075.374309][   T10] usb 3-1: USB disconnect, device number 2
[ 1075.436497][T12902] netlink: 'syz.2.1016': attribute type 11 has an invalid length.
[ 1075.522086][T12902] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1016'.
[ 1075.855871][T10580] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.167636][T12910] loop7: detected capacity change from 0 to 256
[ 1076.437770][T10580] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.515442][T12913] 9p: Bad value for 'rfdno'
[ 1076.875605][T12923] loop2: detected capacity change from 0 to 256
[ 1078.335302][T12910] ffs_data_put(): freeing
[ 1078.433284][T12928] 9p: Bad value for 'rfdno'
[ 1078.463689][T10580] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.224697][T12856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1079.249836][T12856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1079.263629][T12856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1079.286167][T12856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1079.294006][T12856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1079.528485][T12856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1079.543834][T12856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1079.562222][T12856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1079.580355][T12856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1079.591691][T12856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1079.854962][T12922] loop6: detected capacity change from 0 to 764
[ 1079.862029][T12922] iso9660: Unknown parameter '0xffffffffffffffff'
[ 1079.882844][T12856] Bluetooth: hci4: command 0x0405 tx timeout
[ 1080.030837][T12281] ffs_data_put(): freeing
[ 1080.549607][T10580] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.622974][T12940] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1081.224838][T12959] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 1081.235417][T12959] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1026'.
[ 1081.400458][T12856] Bluetooth: hci1: command tx timeout
[ 1081.720630][T12856] Bluetooth: hci2: command tx timeout
[ 1082.526990][T12856] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1082.537174][T12856] Bluetooth: hci5: Injecting HCI hardware error event
[ 1082.547467][T12856] Bluetooth: hci5: hardware error 0x00
[ 1082.725639][T10580] bridge_slave_1: left allmulticast mode
[ 1082.759136][T10580] bridge_slave_1: left promiscuous mode
[ 1082.810286][T10580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1082.854431][T10580] bridge_slave_0: left allmulticast mode
[ 1083.185279][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1083.480329][T12844] Bluetooth: hci1: command tx timeout
[ 1083.800190][T12844] Bluetooth: hci2: command tx timeout
[ 1084.450374][T10580] bridge_slave_0: left promiscuous mode
[ 1084.680192][T12856] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1084.700877][T12985] loop8: detected capacity change from 0 to 64
[ 1084.962445][T10580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.068357][T12984] bio_check_eod: 20 callbacks suppressed
[ 1085.068372][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.068372][T12984] loop8: rw=8390657, sector=159, nr_sectors = 1 limit=64
[ 1085.087681][T12984] buffer_io_error: 20 callbacks suppressed
[ 1085.087693][T12984] Buffer I/O error on dev loop8, logical block 159, lost async page write
[ 1085.102132][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.102132][T12984] loop8: rw=8390657, sector=160, nr_sectors = 1 limit=64
[ 1085.115713][T12984] Buffer I/O error on dev loop8, logical block 160, lost async page write
[ 1085.124262][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.124262][T12984] loop8: rw=8390657, sector=161, nr_sectors = 1 limit=64
[ 1085.138184][T12984] Buffer I/O error on dev loop8, logical block 161, lost async page write
[ 1085.148906][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.148906][T12984] loop8: rw=8390657, sector=162, nr_sectors = 1 limit=64
[ 1085.166253][T12984] Buffer I/O error on dev loop8, logical block 162, lost async page write
[ 1085.174787][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.174787][T12984] loop8: rw=8390657, sector=163, nr_sectors = 1 limit=64
[ 1085.188364][T12984] Buffer I/O error on dev loop8, logical block 163, lost async page write
[ 1085.196912][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.196912][T12984] loop8: rw=8390657, sector=167, nr_sectors = 1 limit=64
[ 1085.210482][T12984] Buffer I/O error on dev loop8, logical block 167, lost async page write
[ 1085.218986][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.218986][T12984] loop8: rw=8390657, sector=169, nr_sectors = 1 limit=64
[ 1085.232591][T12984] Buffer I/O error on dev loop8, logical block 169, lost async page write
[ 1085.241209][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.241209][T12984] loop8: rw=8390657, sector=171, nr_sectors = 1 limit=64
[ 1085.256824][T12984] Buffer I/O error on dev loop8, logical block 171, lost async page write
[ 1085.265391][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.265391][T12984] loop8: rw=8390657, sector=172, nr_sectors = 1 limit=64
[ 1085.278964][T12984] Buffer I/O error on dev loop8, logical block 172, lost async page write
[ 1085.287493][T12984] syz.8.1029: attempt to access beyond end of device
[ 1085.287493][T12984] loop8: rw=8390657, sector=173, nr_sectors = 1 limit=64
[ 1085.301071][T12984] Buffer I/O error on dev loop8, logical block 173, lost async page write
[ 1085.564219][T12856] Bluetooth: hci1: command tx timeout
[ 1085.747023][T12844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1085.765333][T12844] Bluetooth: hci6: unexpected cc 0x2035 length: 45 > 1
[ 1085.772424][T10888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1085.780200][T12844] Bluetooth: hci6: unexpected event for opcode 0x2035
[ 1085.791062][T10888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1085.805157][T10888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1085.813447][T10888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1085.882923][T10888] Bluetooth: hci2: command tx timeout
[ 1085.896492][T12994] netlink: 'syz.8.1030': attribute type 11 has an invalid length.
[ 1085.949853][T12994] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1030'.
[ 1086.178240][T12999] netlink: 'syz.6.1032': attribute type 11 has an invalid length.
[ 1086.247043][T12999] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1032'.
[ 1086.417300][T13008] binder: 13006:13008 ioctl c0306201 0 returned -14
[ 1086.807543][T13020] loop8: detected capacity change from 0 to 512
[ 1086.851091][T13020] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1086.894627][T10580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1086.929380][T13020] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.1034: corrupted in-inode xattr: invalid ea_ino
[ 1086.963652][T10580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1087.004633][T13020] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1087.005085][T13020] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1034: couldn't read orphan inode 15 (err -117)
[ 1087.014283][    C0] EXT4-fs (loop8): error count since last fsck: 1
[ 1087.014299][    C0] EXT4-fs (loop8): initial error at time 1786163148: ext4_iget_extra_inode:5180: inode 15
[ 1087.014328][    C0] EXT4-fs (loop8): last error at time 1786163148: ext4_iget_extra_inode:5180: inode 15
[ 1087.112392][T10580] bond0 (unregistering): Released all slaves
[ 1087.244522][T13020] loop8: lost filesystem error report for type 5 error -117
[ 1087.255730][T13020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1087.860781][T13036] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.1034: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[ 1088.557734][T10888] Bluetooth: hci1: command tx timeout
[ 1088.563191][T10888] Bluetooth: hci2: command tx timeout
[ 1088.587073][T13024] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1089.544672][T12126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1090.107359][T12855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1090.120847][T11404] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1090.149271][T12855] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.189635][T12855] bridge_slave_0: entered allmulticast mode
[ 1090.224078][T12855] bridge_slave_0: entered promiscuous mode
[ 1090.277023][T13043] syzkaller0: entered promiscuous mode
[ 1090.286263][T13043] syzkaller0: entered allmulticast mode
[ 1090.357413][T11404] usb 9-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=3b.70
[ 1090.382156][T12855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1090.394466][T11404] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.416074][T12855] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.438205][T12855] bridge_slave_1: entered allmulticast mode
[ 1090.451569][T11404] usb 9-1: config 0 descriptor??
[ 1090.481965][T12855] bridge_slave_1: entered promiscuous mode
[ 1090.575824][T10580] hsr_slave_0: left promiscuous mode
[ 1090.595526][T10580] hsr_slave_1: left promiscuous mode
[ 1090.614396][T10580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1090.646867][T10580] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1090.703867][T10580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1090.731731][T11404] usb 9-1: USB disconnect, device number 3
[ 1090.765689][T10580] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1090.798327][T12856] Bluetooth: hci6: unexpected event for opcode 0x2012
[ 1090.874815][T10580] veth1_macvtap: left promiscuous mode
[ 1090.919151][T10580] veth0_macvtap: left promiscuous mode
[ 1090.949274][T10580] veth1_vlan: left promiscuous mode
[ 1090.979171][T10580] veth0_vlan: left promiscuous mode
[ 1091.444323][T12856] Bluetooth: hci6: unexpected event for opcode 0x0405
[ 1091.506594][T13078] binder: 13076:13078 ioctl c0306201 0 returned -14
[ 1091.737438][T13080] netlink: 'syz.6.1043': attribute type 11 has an invalid length.
[ 1091.783186][T13080] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1043'.
[ 1091.796919][T13083] loop8: detected capacity change from 0 to 512
[ 1091.851827][T13083] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1091.925855][T13083] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.1044: corrupted in-inode xattr: invalid ea_ino
[ 1092.013049][T13083] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1092.016896][T13083] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1044: couldn't read orphan inode 15 (err -117)
[ 1092.026078][    C0] EXT4-fs (loop8): error count since last fsck: 1
[ 1092.026096][    C0] EXT4-fs (loop8): initial error at time 1786163153: ext4_iget_extra_inode:5180: inode 15
[ 1092.026125][    C0] EXT4-fs (loop8): last error at time 1786163153: ext4_iget_extra_inode:5180: inode 15
[ 1092.256787][T10580] team0 (unregistering): Port device team_slave_1 removed
[ 1092.274669][T13083] loop8: lost filesystem error report for type 5 error -117
[ 1092.276519][T13083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1092.379514][T10580] team0 (unregistering): Port device team_slave_0 removed
[ 1092.900871][T13097] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.1044: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[ 1094.584760][T12126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1095.717518][T12855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1095.868793][T12855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1096.068777][T13138] syzkaller0: entered promiscuous mode
[ 1096.085653][T13138] syzkaller0: entered allmulticast mode
[ 1096.287436][T12855] team0: Port device team_slave_0 added
[ 1096.381728][T12855] team0: Port device team_slave_1 added
[ 1096.508536][T13150] netlink: 'syz.8.1053': attribute type 11 has an invalid length.
[ 1096.548970][T13150] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1053'.
[ 1096.842814][T12855] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1096.850046][T12856] Bluetooth: hci6: Malformed LE Event: 0x0b
[ 1096.886327][T12855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1097.035757][T12855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1097.311788][T12855] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1097.359070][T12855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1097.469201][T12855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1097.584792][T13175] loop8: detected capacity change from 0 to 4096
[ 1097.653285][T13163] syzkaller0: entered promiscuous mode
[ 1097.658801][T13163] syzkaller0: entered allmulticast mode
[ 1097.954546][T10580] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.976806][T13175] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[ 1100.354591][T13188] loop8: detected capacity change from 0 to 64
[ 1100.387079][T13188] bio_check_eod: 5 callbacks suppressed
[ 1100.387095][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.387095][T13188] loop8: rw=8390657, sector=159, nr_sectors = 1 limit=64
[ 1100.408030][T13188] buffer_io_error: 5 callbacks suppressed
[ 1100.408042][T13188] Buffer I/O error on dev loop8, logical block 159, lost async page write
[ 1100.422297][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.422297][T13188] loop8: rw=8390657, sector=160, nr_sectors = 1 limit=64
[ 1100.435964][T13188] Buffer I/O error on dev loop8, logical block 160, lost async page write
[ 1100.444613][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.444613][T13188] loop8: rw=8390657, sector=161, nr_sectors = 1 limit=64
[ 1100.458256][T13188] Buffer I/O error on dev loop8, logical block 161, lost async page write
[ 1100.466993][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.466993][T13188] loop8: rw=8390657, sector=162, nr_sectors = 1 limit=64
[ 1100.480633][T13188] Buffer I/O error on dev loop8, logical block 162, lost async page write
[ 1100.489119][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.489119][T13188] loop8: rw=8390657, sector=163, nr_sectors = 1 limit=64
[ 1100.502683][T13188] Buffer I/O error on dev loop8, logical block 163, lost async page write
[ 1100.512863][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.512863][T13188] loop8: rw=8390657, sector=167, nr_sectors = 1 limit=64
[ 1100.527074][T13188] Buffer I/O error on dev loop8, logical block 167, lost async page write
[ 1100.535594][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.535594][T13188] loop8: rw=8390657, sector=169, nr_sectors = 1 limit=64
[ 1100.549181][T13188] Buffer I/O error on dev loop8, logical block 169, lost async page write
[ 1100.557724][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.557724][T13188] loop8: rw=8390657, sector=171, nr_sectors = 1 limit=64
[ 1100.571301][T13188] Buffer I/O error on dev loop8, logical block 171, lost async page write
[ 1100.579811][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.579811][T13188] loop8: rw=8390657, sector=172, nr_sectors = 1 limit=64
[ 1100.593406][T13188] Buffer I/O error on dev loop8, logical block 172, lost async page write
[ 1100.601993][T13188] syz.8.1060: attempt to access beyond end of device
[ 1100.601993][T13188] loop8: rw=8390657, sector=173, nr_sectors = 1 limit=64
[ 1100.617285][T13188] Buffer I/O error on dev loop8, logical block 173, lost async page write
[ 1101.029804][T13198] binder: 13197:13198 ioctl c018620c 200000000040 returned -1
[ 1101.079375][T10580] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.233102][T12855] hsr_slave_0: entered promiscuous mode
[ 1101.268100][T12855] hsr_slave_1: entered promiscuous mode
[ 1101.283496][T12855] debugfs: 'hsr0' already exists in 'hsr'
[ 1101.312513][T13202] netlink: 'syz.8.1064': attribute type 11 has an invalid length.
[ 1101.327919][T12855] Cannot create hsr debugfs directory
[ 1101.347631][T13202] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1064'.
[ 1101.365265][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1101.689264][T10580] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.109036][T13221] loop6: detected capacity change from 0 to 64
[ 1104.432756][T10580] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.612233][T13232] netlink: 'syz.8.1074': attribute type 11 has an invalid length.
[ 1104.643634][T13232] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1074'.
[ 1104.680800][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1075'.
[ 1104.841739][T12936] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1104.897451][T12936] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1104.940005][T12936] bridge_slave_0: entered allmulticast mode
[ 1104.963088][T13239] loop6: detected capacity change from 0 to 2048
[ 1104.976997][T12936] bridge_slave_0: entered promiscuous mode
[ 1105.022554][T12936] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.049220][T13239]  loop6: p1 < > p4
[ 1105.062298][T12936] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.084415][T13239] loop6: p4 size 8388608 extends beyond EOD, truncated
[ 1105.099555][T12936] bridge_slave_1: entered allmulticast mode
[ 1105.128727][T12936] bridge_slave_1: entered promiscuous mode
[ 1105.207862][T13243] loop8: detected capacity change from 0 to 2048
[ 1105.844272][T13245] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present
[ 1106.075416][T12680] udevd[12680]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[ 1106.089527][T12676] udevd[12676]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[ 1106.108708][T12932] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1106.124947][T12932] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.152674][T12932] bridge_slave_0: entered allmulticast mode
[ 1106.178883][T12932] bridge_slave_0: entered promiscuous mode
[ 1107.086797][T12856] Bluetooth: hci6: command 0x206a tx timeout
[ 1107.538061][T12932] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.396133][T13254] loop6: detected capacity change from 0 to 64
[ 1108.403423][T12932] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.421395][T12932] bridge_slave_1: entered allmulticast mode
[ 1108.452101][T13252] bio_check_eod: 20 callbacks suppressed
[ 1108.452117][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.452117][T13252] loop6: rw=8390657, sector=159, nr_sectors = 1 limit=64
[ 1108.471585][T13252] buffer_io_error: 20 callbacks suppressed
[ 1108.471599][T13252] Buffer I/O error on dev loop6, logical block 159, lost async page write
[ 1108.485889][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.485889][T13252] loop6: rw=8390657, sector=160, nr_sectors = 1 limit=64
[ 1108.500385][T13252] Buffer I/O error on dev loop6, logical block 160, lost async page write
[ 1108.508879][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.508879][T13252] loop6: rw=8390657, sector=161, nr_sectors = 1 limit=64
[ 1108.523179][T13252] Buffer I/O error on dev loop6, logical block 161, lost async page write
[ 1108.531811][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.531811][T13252] loop6: rw=8390657, sector=162, nr_sectors = 1 limit=64
[ 1108.545491][T13252] Buffer I/O error on dev loop6, logical block 162, lost async page write
[ 1108.554012][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.554012][T13252] loop6: rw=8390657, sector=163, nr_sectors = 1 limit=64
[ 1108.567561][T13252] Buffer I/O error on dev loop6, logical block 163, lost async page write
[ 1108.576106][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.576106][T13252] loop6: rw=8390657, sector=167, nr_sectors = 1 limit=64
[ 1108.589674][T13252] Buffer I/O error on dev loop6, logical block 167, lost async page write
[ 1108.599560][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.599560][T13252] loop6: rw=8390657, sector=169, nr_sectors = 1 limit=64
[ 1108.613741][T13252] Buffer I/O error on dev loop6, logical block 169, lost async page write
[ 1108.622265][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.622265][T13252] loop6: rw=8390657, sector=171, nr_sectors = 1 limit=64
[ 1108.635831][T13252] Buffer I/O error on dev loop6, logical block 171, lost async page write
[ 1108.644387][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.644387][T13252] loop6: rw=8390657, sector=172, nr_sectors = 1 limit=64
[ 1108.657958][T13252] Buffer I/O error on dev loop6, logical block 172, lost async page write
[ 1108.666828][T13252] syz.6.1081: attempt to access beyond end of device
[ 1108.666828][T13252] loop6: rw=8390657, sector=173, nr_sectors = 1 limit=64
[ 1108.680666][T13252] Buffer I/O error on dev loop6, logical block 173, lost async page write
[ 1108.721704][T12932] bridge_slave_1: entered promiscuous mode
[ 1108.755681][T12936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1108.782791][T12936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1109.175835][T13263] netlink: 'syz.6.1085': attribute type 11 has an invalid length.
[ 1109.190549][T13261] loop8: detected capacity change from 0 to 2048
[ 1109.201759][T13263] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1085'.
[ 1109.247820][T13261]  loop8: p1 p4
[ 1109.247820][T13261]  p1: <solaris:  cannot handle version 589825 vtoc>
[ 1109.295881][T13261] loop8: p4 size 589824 extends beyond EOD, truncated
[ 1109.446611][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1109.551349][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1109.635680][T12936] team0: Port device team_slave_0 added
[ 1109.677775][T12936] team0: Port device team_slave_1 added
[ 1109.744446][T12362] udevd[12362]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[ 1109.767326][T12676] udevd[12676]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1109.860721][T11407] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1109.938547][T13273] loop6: detected capacity change from 0 to 256
[ 1110.060426][T11407] usb 9-1: Using ep0 maxpacket: 8
[ 1110.073774][T11407] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1110.084085][T13274] 9p: Bad value for 'rfdno'
[ 1110.105017][T11407] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1110.149815][T11407] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1110.178127][T11407] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.205998][T11407] usb 9-1: Product: syz
[ 1110.217937][T11407] usb 9-1: Manufacturer: syz
[ 1110.234610][T11407] usb 9-1: SerialNumber: syz
[ 1110.259680][T11407] usb 9-1: config 0 descriptor??
[ 1110.506417][T11407] usb 9-1: USB disconnect, device number 4
[ 1110.655116][T12988] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1110.664324][T12988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1110.674045][T12988] bridge_slave_0: entered allmulticast mode
[ 1110.682363][T12988] bridge_slave_0: entered promiscuous mode
[ 1110.696636][T13278] netlink: 'syz.6.1089': attribute type 7 has an invalid length.
[ 1110.708325][T12932] team0: Port device team_slave_0 added
[ 1110.722614][T12936] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1110.738718][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1110.832347][T12936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1110.862901][T12936] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1110.876638][T13280] loop6: detected capacity change from 0 to 2048
[ 1110.883313][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1111.125916][T12936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1111.441243][T13281] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present
[ 1111.521569][T12988] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1111.542344][T12988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1111.574843][T12988] bridge_slave_1: entered allmulticast mode
[ 1111.595016][T12988] bridge_slave_1: entered promiscuous mode
[ 1112.131591][T12932] team0: Port device team_slave_1 added
[ 1112.425518][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1112.558859][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1112.625853][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1112.637756][T13291] Driver unsupported XDP return value 0 on prog  (id 81) dev N/A, expect packet loss!
[ 1112.666129][T12988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1112.912728][T13296] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 1112.924095][T13296] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1094'.
[ 1113.174098][T13298] netlink: 'syz.6.1095': attribute type 11 has an invalid length.
[ 1113.196936][T13298] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1095'.
[ 1113.256840][T10580] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1113.342132][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1113.359272][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1113.447512][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1113.458603][T11301] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1113.493176][T13303] loop6: detected capacity change from 0 to 256
[ 1113.504167][T12988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1113.591937][T12936] hsr_slave_0: entered promiscuous mode
[ 1113.598529][T12936] hsr_slave_1: entered promiscuous mode
[ 1113.605493][T12936] debugfs: 'hsr0' already exists in 'hsr'
[ 1113.612980][T12936] Cannot create hsr debugfs directory
[ 1113.635193][T11301] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1113.653913][T13305] 9p: Bad value for 'rfdno'
[ 1113.678492][T11301] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.692149][T11301] usb 9-1: Product: syz
[ 1113.700604][T11301] usb 9-1: Manufacturer: syz
[ 1113.714035][T11301] usb 9-1: SerialNumber: syz
[ 1113.755479][T10580] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1113.869702][   T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1114.166687][T12988] team0: Port device team_slave_0 added
[ 1114.217695][T12988] team0: Port device team_slave_1 added
[ 1114.265601][T12932] hsr_slave_0: entered promiscuous mode
[ 1115.409831][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.395704][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.773219][   T10] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 1121.732797][    C0] sched: DL replenish lagged too much
[ 1163.380380][   T10] ath9k_htc: Failed to initialize the device
[ 1176.796451][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1179.533667][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1189.678903][T10888] Bluetooth: hci4: command 0x0405 tx timeout
[ 1214.581991][T12932] hsr_slave_1: entered promiscuous mode
[ 1218.530684][ T5613] Bluetooth: hci1: command 0x0406 tx timeout
[ 1221.159338][T13310] Bluetooth: hci2: command tx timeout
[ 1238.410697][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.108406][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1279.710295][T11301] usb 9-1: USB disconnect, device number 5
[ 1280.120880][T11301] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1280.967802][T12932] debugfs: 'hsr0' already exists in 'hsr'
[ 1281.040869][   T32] INFO: task dhcpcd:5266 blocked for more than 157 seconds.
[ 1281.091345][T12932] Cannot create hsr debugfs directory
[ 1281.165446][   T32]       Tainted: G             L      syzkaller #0
[ 1281.288414][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1281.464614][   T32] task:dhcpcd          state:D stack:25016 pid:5266  tgid:5266  ppid:1      task_flags:0x400140 flags:0x00080000
[ 1281.663550][   T32] Call Trace:
[ 1281.701075][   T32]  <TASK>
[ 1281.733167][   T32]  __schedule+0x17d9/0x56c0
[ 1281.789087][   T32]  ? __lock_acquire+0x683/0x2cf0
[ 1281.851338][   T32]  ? __lock_acquire+0x683/0x2cf0
[ 1281.921555][   T32]  ? do_syscall_64+0x174/0x580
[ 1281.992202][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1282.071706][   T32]  ? __pfx___schedule+0x10/0x10
[ 1282.138443][   T32]  ? schedule+0x90/0x2b0
[ 1282.191872][   T32]  schedule+0x164/0x2b0
[ 1282.246936][   T32]  schedule_preempt_disabled+0x13/0x30
[ 1282.316146][   T32]  __mutex_lock+0x7bf/0x1550
[ 1282.375496][   T32]  ? __mutex_lock+0x5d4/0x1550
[ 1282.424108][   T32]  ? vlan_ioctl_handler+0xf0/0x630
[ 1282.469123][   T32]  ? __pfx___mutex_lock+0x10/0x10
[ 1282.512957][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1282.562373][   T32]  vlan_ioctl_handler+0xf0/0x630
[ 1282.604237][   T32]  ? __pfx___mutex_lock+0x10/0x10
[ 1282.654618][   T32]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[ 1282.708817][   T32]  ? hook_file_ioctl+0x1f0/0x5f0
[ 1282.749969][   T32]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[ 1282.796816][   T32]  sock_ioctl+0x612/0x7e0
[ 1282.834020][   T32]  ? __pfx_sock_ioctl+0x10/0x10
[ 1282.878824][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1282.923730][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1282.972557][   T32]  ? __pfx_sock_ioctl+0x10/0x10
[ 1283.017709][   T32]  __se_sys_ioctl+0xfc/0x170
[ 1283.055229][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1283.107042][   T32]  do_syscall_64+0x174/0x580
[ 1283.146423][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1283.218528][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1283.273880][   T32] RIP: 0033:0x7f5c340d5378
[ 1283.305581][   T32] RSP: 002b:00007fffe08bfeb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1283.368008][   T32] RAX: ffffffffffffffda RBX: 00005632bc2ac8a0 RCX: 00007f5c340d5378
[ 1283.446424][   T32] RDX: 00007fffe08bfec0 RSI: 0000000000008982 RDI: 000000000000000f
[ 1283.511306][   T32] RBP: 00007fffe08bfec0 R08: 0000000000000000 R09: 0000000000000000
[ 1283.601211][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1283.647729][   T32] R13: 00005632bc2a9930 R14: 00007fffe08c0910 R15: 00005632bc2ac8a0
[ 1283.719269][   T32]  </TASK>
[ 1283.745765][   T32] INFO: task syz-executor:12855 blocked for more than 154 seconds.
[ 1283.831724][   T32]       Tainted: G             L      syzkaller #0
[ 1283.882056][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1283.952287][   T32] task:syz-executor    state:D stack:22520 pid:12855 tgid:12855 ppid:12834  task_flags:0x400140 flags:0x00080000
[ 1284.068914][   T32] Call Trace:
[ 1284.092285][   T32]  <TASK>
[ 1284.117487][   T32]  __schedule+0x17d9/0x56c0
[ 1284.157873][   T32]  ? __lock_acquire+0x683/0x2cf0
[ 1284.197265][   T32]  ? __lock_acquire+0x683/0x2cf0
[ 1284.271625][   T32]  ? __pfx___schedule+0x10/0x10
[ 1284.322823][   T32]  ? schedule+0x90/0x2b0
[ 1284.365625][   T32]  schedule+0x164/0x2b0
[ 1284.404127][   T32]  schedule_preempt_disabled+0x13/0x30
[ 1284.462281][   T32]  __mutex_lock+0x7bf/0x1550
[ 1284.501048][   T32]  ? __mutex_lock+0x5d4/0x1550
[ 1284.538128][   T32]  ? register_netdevice_notifier_net+0x1a/0xa0
[ 1284.594313][   T32]  ? __pfx___mutex_lock+0x10/0x10
[ 1284.642780][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1284.689356][   T32]  ? fast_dput+0x469/0x670
[ 1284.728305][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1284.789934][   T32]  register_netdevice_notifier_net+0x1a/0xa0
[ 1284.824301][   T32]  nsim_dev_hwstats_init+0xc6/0x400
[ 1284.860548][   T32]  ? nsim_dev_psample_init+0x48d/0x560
[ 1284.903599][   T32]  nsim_drv_probe+0x88c/0xbf0
[ 1284.941566][   T32]  ? __pfx_nsim_drv_probe+0x10/0x10
[ 1284.979297][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1285.022319][   T32]  ? kernfs_put+0x7b9/0x820
[ 1285.058087][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1285.104631][   T32]  ? sysfs_do_create_link_sd+0xe0/0x110
[ 1285.150209][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1285.191996][   T32]  ? driver_sysfs_add+0x1fe/0x210
[ 1285.231688][   T32]  ? __pfx_nsim_bus_probe+0x10/0x10
[ 1285.278339][   T32]  really_probe+0x254/0xae0
[ 1285.312220][   T32]  __driver_probe_device+0x1e8/0x360
[ 1285.351618][   T32]  driver_probe_device+0x4f/0x240
[ 1285.391612][   T32]  __device_attach_driver+0x270/0x410
[ 1285.431677][   T32]  bus_for_each_drv+0x258/0x2f0
[ 1285.466407][   T32]  ? __pfx___device_attach_driver+0x10/0x10
[ 1285.510754][   T32]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1285.554726][   T32]  __device_attach+0x2c4/0x450
[ 1285.592206][   T32]  ? __pfx___device_attach+0x10/0x10
[ 1285.635547][   T32]  ? do_raw_spin_unlock+0xf5/0x210
[ 1285.671146][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1285.713560][   T32]  ? _raw_spin_unlock+0x28/0x50
[ 1285.754325][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1285.798621][   T32]  device_initial_probe+0xa1/0xd0
[ 1285.840168][   T32]  bus_probe_device+0x12a/0x220
[ 1285.879771][   T32]  device_add+0x7d7/0xb80
[ 1285.914551][   T32]  new_device_store+0x37b/0x710
[ 1285.959750][   T32]  ? __pfx_new_device_store+0x10/0x10
[ 1286.004972][   T32]  ? sysfs_file_kobj+0x1a/0x230
[ 1286.052745][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1286.103504][   T32]  ? sysfs_file_kobj+0x1e4/0x230
[ 1286.147095][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1286.202992][   T32]  ? sysfs_kf_write+0x166/0x260
[ 1286.239761][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1286.278174][   T32]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1286.315736][   T32]  kernfs_fop_write_iter+0x3a4/0x540
[ 1286.357867][   T32]  vfs_write+0x612/0xba0
[ 1286.395780][   T32]  ? __pfx_vfs_write+0x10/0x10
[ 1286.436472][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1286.485664][   T32]  ? kmem_cache_free+0x182/0x650
[ 1286.519252][   T32]  ? fd_install+0x94/0x3d0
[ 1286.566853][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1286.609915][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1286.652690][   T32]  ksys_write+0x150/0x270
[ 1286.688596][   T32]  ? __pfx_ksys_write+0x10/0x10
[ 1286.727741][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1286.765196][T13316] loop6: detected capacity change from 0 to 512
[ 1286.788078][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1286.807409][T13316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1286.820088][T13316] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1287.081485][   T32]  do_syscall_64+0x174/0x580
[ 1288.081675][   T32]  ? trace_irq_disable+0x3b/0x140
[ 1288.838612][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1288.986454][   T32] RIP: 0033:0x7f7670b5e90e
[ 1289.017062][   T32] RSP: 002b:00007fff2d379918 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1289.095982][   T32] RAX: ffffffffffffffda RBX: 00005555927fe500 RCX: 00007f7670b5e90e
[ 1289.143582][   T32] RDX: 0000000000000003 RSI: 00007fff2d3799a0 RDI: 0000000000000005
[ 1289.188121][   T32] RBP: 00007f7670c358cb R08: 0000000000000000 R09: 0000000000000000
[ 1289.234264][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1289.261435][   T32] R13: 00007fff2d3799a0 R14: 00007f7671954620 R15: 0000000000000003
[ 1289.291645][   T32]  </TASK>
[ 1289.307354][   T32] INFO: task syz-executor:12936 blocked for more than 159 seconds.
[ 1289.438948][T12233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1289.455961][   T32]       Tainted: G             L      syzkaller #0
[ 1289.493738][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1289.563912][   T32] task:syz-executor    state:D stack:22160 pid:12936 tgid:12936 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1289.654106][   T32] Call Trace:
[ 1289.666643][   T32]  <TASK>
[ 1289.678848][   T32]  __schedule+0x17d9/0x56c0
[ 1289.711862][   T32]  ? __lock_acquire+0x683/0x2cf0
[ 1289.743725][   T32]  ? __lock_acquire+0x683/0x2cf0
[ 1289.765909][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1289.789524][   T32]  ? stack_depot_save_flags+0x33/0x800
[ 1289.823021][   T32]  ? __pfx___schedule+0x10/0x10
[ 1289.848941][   T32]  ? schedule+0x90/0x2b0
[ 1289.871008][   T32]  schedule+0x164/0x2b0
[ 1289.903189][   T32]  schedule_preempt_disabled+0x13/0x30
[ 1289.937000][   T32]  __mutex_lock+0x7bf/0x1550
[ 1289.964102][   T32]  ? __mutex_lock+0x5d4/0x1550
[ 1289.987265][   T32]  ? rtnl_newlink+0x8a3/0x1bd0
[ 1290.019479][   T32]  ? __pfx___mutex_lock+0x10/0x10
[ 1290.061185][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1290.103290][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1290.161618][   T32]  ? ns_capable+0x89/0xe0
[ 1290.196631][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1290.245775][   T32]  ? rtnl_link_get_net_capable+0xd3/0x310
[ 1290.301746][   T32]  rtnl_newlink+0x8a3/0x1bd0
[ 1290.341102][   T32]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1290.375027][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1290.411855][   T32]  ? __lock_acquire+0x683/0x2cf0
[ 1290.445805][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1290.481226][   T32]  ? __lock_acquire+0x683/0x2cf0
[ 1290.516255][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1290.533367][T10888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1290.548672][T10888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1290.556713][T10888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1290.565439][T10888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1290.574475][T10888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1290.629465][T12844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1290.643066][T12844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1290.650841][T12844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1290.671296][T12844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1290.681800][T12844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1290.734662][   T32]  ? __lock_acquire+0x683/0x2cf0
[ 1290.787170][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1290.837443][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1290.889162][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1290.948450][   T32]  ? is_bpf_text_address+0x26/0x2b0
[ 1290.998754][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1291.054228][   T32]  ? __lock_acquire+0x683/0x2cf0