last executing test programs:

11m54.468983345s ago: executing program 1 (id=224):
inotify_init()
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
openat$kvm(0x0, 0x0, 0x0, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002000)={0x0, 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x38, r2, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x1d, 0x7f, 0x400, 0x6}}, @val={0x6, 0x2, 0x7}, @void, @void, @void}, 0x32)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
syz_open_procfs(r6, &(0x7f00000000c0)='pagemap\x00')

11m47.61234269s ago: executing program 1 (id=234):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$eJzs3c9rHGUfAPDv7GbTJM37pn15FVsUAx5akKZJLVa92NaDPRQs2IOIh4YmqaHbHzQp2FowBQ8KCiJeRXrxH/Auxas3EdSbZ6GKRBRUujK7s+km2U3WNLubZD4f2Ow8zzO7z/PdyZN5ZibPTgC5NZr+KETsi7h/LokYaSgbjlrhaLbe4q+VrKRSefWXJJJq3q3z9fWT7Hl3lhiIiG9ORvyvuLreuRs3L06WKzXvRByev3T18NyNm4dmL01emL4wfXniyHNHj40/P3F0YlPi3J09nzr9yuMfvvvmszPflg8lcTzOlt6eihVxbJbRGI37WYiN+X0RcSxdaPK5bDc7IIRcK2a/j6WIeDRGolhN1YzE7Ac9bRzQUZViujdvy0C7KwLbRbLBbr1rsxsCdFl9HJAe/9Yf648aznZ4VNI9907UDoBWx99XOzcSA9Vjo6HFpOHIqHZuY88m1J/W8fet/Z+mj1h2HuKPpa3Ttwn1tLJwOyIeaxZ/Um3bnmqk/TG0WFjWjiQixqsltfa99BBtSBqWO3EeZi31+Eur6m+MP1bFX4iI49lzmn9yg/WPrkh3O34A8unuiWxHvpCmlvb/X8XSvqm+/1s+/hlusu/aiF7v/1qP/+r7+4HqOfLCinFYOmY50/wtSyszfnz/1Met6m8c/6WPtP76WLAb7t2O2L8i/vfSYLPxTxp/0mT7p6ucO95eHS9/9/OpVmW9jr9yJ+JA0+OfB6PSdGmN65OHZ2bL0+O1n03r+PLrNz5vVX+v40+3/1CL+Bu2f2Hl69LP5GqbdXxx5s6lVmXD68Zf+Kk/qR1v9mc5b03Oz1+biOhPTmerNOQfWbst9XXq75HGf/Cp5v1/2e//7eXvM1j/k9mGq69dXGxVtpHt33Ax+X6lzTa0ksY/tf72X9X/07yP2qzj99evP9GqbK34Bx8mMAAAAAAAAMihQvUabFIYW1ouFMbGavNl/x9DhfKVufmnZ65cvzwVcbD6/5ClQv1K90gtnaTpiez/YevpIyvSz0TE3oj4pDhYTY+dv1Ke6nXwAAAAAAAAAAAAAAAAAAAAsEXszub/1+9T/VuxNv8fyIlO3mAO2Nr0f8ivav9fdYsnIA/s/yG/9H/IL/0f8kv/h/zS/yG/9H/IL/0f8kv/BwAAAIAdae+Td39IImLhhcHqI9WflZkRBDtbqdcNAHqm2OsGAD2zdOnfYB9yp63x/5/ZlwN2vjlADyTNMquDg8ranf9u01cCAAAAAAAAAAAAAB1wYF/r+f/mBsPOZtof5NdDzP/31QGwzfnqf8gvx/jAerP4B1oVmP8PAAAAAAAAAAAAAF0zXH0khbFsLvBwFApjYxH/iYg9UUpmZsvT4xHx34j4vljalaYnet1oAAAAAAAAAAAAAAAAAAAA2GHmbty8OFkuT19rXPhrVc7WWyiut84j0fYb1u+C2oXGvxj/8lWRdP/jHYyIrbGVO7HQ15CTRCykW35LNOzaXGyNZlQXevyHCQAAAAAAAAAAAAAAAAAAcqhh7nFz+z/rcosAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoPse3P+/cwu9jhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7+CQAA//8kbTKq")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$set_reqkey_keyring(0xe, 0x7)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2)
ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r4})
listen(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0)

11m45.092525054s ago: executing program 1 (id=238):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)

11m43.047262146s ago: executing program 1 (id=243):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = dup(r1)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r2}, 0x18)
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000006c0), &(0x7f0000000140)=0xc)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x10000000, 0xffffffff, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x4, [0xe303, 0x3]}]}}}}})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x161002, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x2)
ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f000011dd40)={0x1, &(0x7f000011dc00)=[{0x8000001, 0x0, 0x0, 0x2, 0x6}]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0)

11m39.697441051s ago: executing program 1 (id=245):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="2e0000000100", 0x6)

11m36.712797367s ago: executing program 1 (id=259):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0xffffffffffffff9e)
close_range(r3, 0xffffffffffffffff, 0x0)

11m20.589505797s ago: executing program 32 (id=259):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0xffffffffffffff9e)
close_range(r3, 0xffffffffffffffff, 0x0)

8m41.324380846s ago: executing program 0 (id=484):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
getpgrp(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)

8m33.470079906s ago: executing program 3 (id=494):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x5e84920, 0x3ff}, 0x1c)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r5, 0x80079a3)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0)
lseek(r5, 0x80000, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000680)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@i_version, 0x0}, {@noload}, {@usrquota}, {@grpquota}, {@noinit_itable}, {@acl}, {@nolazytime}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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")

8m30.452980732s ago: executing program 0 (id=496):
socket$inet6(0xa, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r9, 0x21eae}}, 0x20}}, 0x0)

8m29.775321449s ago: executing program 3 (id=497):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
execve(0x0, 0x0, 0x0)
semget(0x1, 0x2, 0x210)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x1000c1d, &(0x7f000000a580)=ANY=[@ANYRES32=r4, @ANYRESHEX, @ANYBLOB="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", @ANYRES16, @ANYRESOCT, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRES32], 0xff, 0x1fd, &(0x7f000000a380)="$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")

8m29.114623046s ago: executing program 0 (id=499):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getxattr(0x0, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4000, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf8}, 0x94)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
readv(r0, 0x0, 0x0)

8m27.941157236s ago: executing program 0 (id=500):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)

8m26.858541904s ago: executing program 3 (id=502):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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")
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x2000100}, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r2=>0x0}, &(0x7f0000000280)=0xc)
fcntl$setown(r0, 0x8, r2)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3e)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(0x0)
getdents(r0, &(0x7f00000006c0)=""/138, 0x8a)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x503, 0x0, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x92f}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

8m26.767178056s ago: executing program 0 (id=503):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0xffffffffffffff9e)
close_range(r3, 0xffffffffffffffff, 0x0)

8m21.678699595s ago: executing program 0 (id=510):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
execve(0x0, 0x0, 0x0)
semget(0x1, 0x2, 0x210)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x1000c1d, &(0x7f000000a580)=ANY=[@ANYRES32=r4, @ANYRESHEX, @ANYBLOB="9cf45332f216e72f1916be622afc444f62ea0b68c42a77b352fe0afddfb1cc8ff9c0f9e899ea9ae7c30f5a192b0b16000080dfa20a2768950b186e295805038569d0c9f57f41da86410da421701f524e99d5bea9716fa0990dd3611859be346c36edb30828401d5122a1bad83ae10d49e288b3950ae045ad2a04ddc191fcc6abf55e98491049b415163b7e3a99c0a4544190c2011be3a25a85ceab73485f64f25ad6d435b24f2f400d9bef712f399339d02bfd26bf20324b098b673189cd82a5cbf5c5a53fbda881d47d43e25919884a8cd525436c46d28d7c4173aabcc00da4ac21514eb67e0eb9849548fe217ab6bb03ac5d203f8427c8402b016b5b9e83d16cb759a42b6a7f7115433776b3eb8091edf8030f522ae488d96280e59d5b0ddc36f441dfff7700000000000000000000000000000000000000000000000000000000000000000000002c14da6155698f83a9e5d32830f3dc68cfff8cf5b7e936b51590ec6fc503b6ca46a5aa1b35163c0081ae2491391194d483d35de250e75d7d6ae7901b6c9663ddcbecd4bc17a043808b280000000000000000000000000000c8f455465cbebc162473fbee10d24b1e5aded77bc959e4d72cb67a00491fd4696da9de540e0d9ecefa00648305f1ea375309bb41460389068a12930587eef76c7e0359b64a2153d2c1e1a07b0125808f1805beb49929003354aab5fe9f966009e4f90fc66cc885c9406c532a40ec0b76a3757cf11d9e907a44cbc32dbb10", @ANYRES16, @ANYRESOCT, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRES32], 0xff, 0x1fd, &(0x7f000000a380)="$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")

8m12.408100471s ago: executing program 3 (id=518):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e058166"], 0x8)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x10000, 0x13a)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f00000002c0)={0x0, &(0x7f0000000200), 0x3})
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
pwrite64(r5, &(0x7f00000002c0)="06354e7aa213f75221318d1e67643e664310dee3ba19602c67929f69db3eca7169d1320f5d6b2b90ec6dc86556e70dff8c8bc3de20866cebf95edbf9dc6aa55e8df7967cc800c4e6eefe408bc3a8cbbbbecee1b74b100d6537e11a8c25d15190f8166fee123f0f4b07fdeabceb38107dd049eaf56d17303b5e64a42a7d867809ffaf7b1e34898d34120f1afd1a13e47f6cb6b9bb7860fa7c7e0b5bfa71e94ec567e28e1cddd8bdd6", 0xfcee, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, r5, 0x8000002, 0x6f1f, 0x4, 0x80000001})
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")

8m8.585910228s ago: executing program 3 (id=521):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000680)=ANY=[@ANYBLOB="757466383d302c757466383d302c757466383d312c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c757466383d312c008c66543f5d9819a000d4e83c546404a071cad2145d3fb8a62515f51f30c9e8ee65d81f17556db1fbd9bba8311ff6c51e26fbc301f624c68ff373cb5fde2e2938a0247b42fa7b274ded"], 0x1, 0x35e, &(0x7f0000000240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)='./file0\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, 0x0, 0x0, 0x12001, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24004101)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r4, 0x10d, 0x8f, &(0x7f0000000940), &(0x7f0000000080)=0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)

8m3.82209624s ago: executing program 33 (id=510):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
execve(0x0, 0x0, 0x0)
semget(0x1, 0x2, 0x210)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x1000c1d, &(0x7f000000a580)=ANY=[@ANYRES32=r4, @ANYRESHEX, @ANYBLOB="9cf45332f216e72f1916be622afc444f62ea0b68c42a77b352fe0afddfb1cc8ff9c0f9e899ea9ae7c30f5a192b0b16000080dfa20a2768950b186e295805038569d0c9f57f41da86410da421701f524e99d5bea9716fa0990dd3611859be346c36edb30828401d5122a1bad83ae10d49e288b3950ae045ad2a04ddc191fcc6abf55e98491049b415163b7e3a99c0a4544190c2011be3a25a85ceab73485f64f25ad6d435b24f2f400d9bef712f399339d02bfd26bf20324b098b673189cd82a5cbf5c5a53fbda881d47d43e25919884a8cd525436c46d28d7c4173aabcc00da4ac21514eb67e0eb9849548fe217ab6bb03ac5d203f8427c8402b016b5b9e83d16cb759a42b6a7f7115433776b3eb8091edf8030f522ae488d96280e59d5b0ddc36f441dfff7700000000000000000000000000000000000000000000000000000000000000000000002c14da6155698f83a9e5d32830f3dc68cfff8cf5b7e936b51590ec6fc503b6ca46a5aa1b35163c0081ae2491391194d483d35de250e75d7d6ae7901b6c9663ddcbecd4bc17a043808b280000000000000000000000000000c8f455465cbebc162473fbee10d24b1e5aded77bc959e4d72cb67a00491fd4696da9de540e0d9ecefa00648305f1ea375309bb41460389068a12930587eef76c7e0359b64a2153d2c1e1a07b0125808f1805beb49929003354aab5fe9f966009e4f90fc66cc885c9406c532a40ec0b76a3757cf11d9e907a44cbc32dbb10", @ANYRES16, @ANYRESOCT, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRES32], 0xff, 0x1fd, &(0x7f000000a380)="$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")

7m56.368016399s ago: executing program 3 (id=534):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
execve(0x0, 0x0, 0x0)
r2 = semget(0x1, 0x2, 0x210)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x1000c1d, &(0x7f000000a580)=ANY=[@ANYRES32=r5, @ANYRESHEX, @ANYBLOB="9cf45332f216e72f1916be622afc444f62ea0b68c42a77b352fe0afddfb1cc8ff9c0f9e899ea9ae7c30f5a192b0b16000080dfa20a2768950b186e295805038569d0c9f57f41da86410da421701f524e99d5bea9716fa0990dd3611859be346c36edb30828401d5122a1bad83ae10d49e288b3950ae045ad2a04ddc191fcc6abf55e98491049b415163b7e3a99c0a4544190c2011be3a25a85ceab73485f64f25ad6d435b24f2f400d9bef712f399339d02bfd26bf20324b098b673189cd82a5cbf5c5a53fbda881d47d43e25919884a8cd525436c46d28d7c4173aabcc00da4ac21514eb67e0eb9849548fe217ab6bb03ac5d203f8427c8402b016b5b9e83d16cb759a42b6a7f7115433776b3eb8091edf8030f522ae488d96280e59d5b0ddc36f441dfff7700000000000000000000000000000000000000000000000000000000000000000000002c14da6155698f83a9e5d32830f3dc68cfff8cf5b7e936b51590ec6fc503b6ca46a5aa1b35163c0081ae2491391194d483d35de250e75d7d6ae7901b6c9663ddcbecd4bc17a043808b280000000000000000000000000000c8f455465cbebc162473fbee10d24b1e5aded77bc959e4d72cb67a00491fd4696da9de540e0d9ecefa00648305f1ea375309bb41460389068a12930587eef76c7e0359b64a2153d2c1e1a07b0125808f1805beb49929003354aab5fe9f966009e4f90fc66cc885c9406c532a40ec0b76a3757cf11d9e907a44cbc32dbb10", @ANYRES16, @ANYRESOCT, @ANYRES32=r4, @ANYRESDEC=0x0, @ANYRES32], 0xff, 0x1fd, &(0x7f000000a380)="$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")
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, r5, 0x8a, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

7m39.38641262s ago: executing program 34 (id=534):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
execve(0x0, 0x0, 0x0)
r2 = semget(0x1, 0x2, 0x210)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x1000c1d, &(0x7f000000a580)=ANY=[@ANYRES32=r5, @ANYRESHEX, @ANYBLOB="9cf45332f216e72f1916be622afc444f62ea0b68c42a77b352fe0afddfb1cc8ff9c0f9e899ea9ae7c30f5a192b0b16000080dfa20a2768950b186e295805038569d0c9f57f41da86410da421701f524e99d5bea9716fa0990dd3611859be346c36edb30828401d5122a1bad83ae10d49e288b3950ae045ad2a04ddc191fcc6abf55e98491049b415163b7e3a99c0a4544190c2011be3a25a85ceab73485f64f25ad6d435b24f2f400d9bef712f399339d02bfd26bf20324b098b673189cd82a5cbf5c5a53fbda881d47d43e25919884a8cd525436c46d28d7c4173aabcc00da4ac21514eb67e0eb9849548fe217ab6bb03ac5d203f8427c8402b016b5b9e83d16cb759a42b6a7f7115433776b3eb8091edf8030f522ae488d96280e59d5b0ddc36f441dfff7700000000000000000000000000000000000000000000000000000000000000000000002c14da6155698f83a9e5d32830f3dc68cfff8cf5b7e936b51590ec6fc503b6ca46a5aa1b35163c0081ae2491391194d483d35de250e75d7d6ae7901b6c9663ddcbecd4bc17a043808b280000000000000000000000000000c8f455465cbebc162473fbee10d24b1e5aded77bc959e4d72cb67a00491fd4696da9de540e0d9ecefa00648305f1ea375309bb41460389068a12930587eef76c7e0359b64a2153d2c1e1a07b0125808f1805beb49929003354aab5fe9f966009e4f90fc66cc885c9406c532a40ec0b76a3757cf11d9e907a44cbc32dbb10", @ANYRES16, @ANYRESOCT, @ANYRES32=r4, @ANYRESDEC=0x0, @ANYRES32], 0xff, 0x1fd, &(0x7f000000a380)="$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")
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, r5, 0x8a, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

3m35.148294811s ago: executing program 6 (id=890):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r4], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

3m32.886765118s ago: executing program 6 (id=892):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
sendmsg(0xffffffffffffffff, 0x0, 0x10040800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)

3m31.418988905s ago: executing program 6 (id=895):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4)
connect$inet6(r0, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000180)=0x7, 0x4)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x21, 0x6}, {@remote, 0x4e20, 0x10000, 0xffffffff, 0x2}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)

3m30.005478391s ago: executing program 6 (id=896):
setns(0xc9, 0x0)
socket(0x8, 0x5, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f00000000c0))
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x6}, 0x8)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1548, &(0x7f0000000380)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
socket(0xa, 0x3, 0x1)
getdents64(r5, &(0x7f0000000200)=""/179, 0xb3)

3m28.812765481s ago: executing program 6 (id=897):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20)
fsopen(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100)
fcntl$setlease(r4, 0x400, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)

3m26.851859431s ago: executing program 6 (id=898):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9)
add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a6c0100000b0a030000000000000000000300000458"], 0x414}, 0x1, 0x0, 0x0, 0x44}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x506, 0x3, 0xff, 0x8, 0x9, 0x1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r4, 0x8b32, &(0x7f0000000040))
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)

3m10.440092738s ago: executing program 35 (id=898):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9)
add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a6c0100000b0a030000000000000000000300000458"], 0x414}, 0x1, 0x0, 0x0, 0x44}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x506, 0x3, 0xff, 0x8, 0x9, 0x1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r4, 0x8b32, &(0x7f0000000040))
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)

24.031281959s ago: executing program 2 (id=1142):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014})
r4 = socket$phonet(0x23, 0x2, 0x1)
getpeername(r4, 0x0, 0x0)
r5 = open_tree(0xffffffffffffff9c, 0x0, 0x81000)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r5, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'})

21.004243836s ago: executing program 2 (id=1147):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
unshare(0x6020400)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x5)
syz_emit_ethernet(0x4c, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000963aff20010000000000000000000000000001ff02000000000000000000000000000187009078fc0000000000000000000000000000000000c9e5e550c93e6d26c601f9b98c2531c3fcb17262555f519bdced11ebb0e761ddd41be321184ec4b3aa40fa02a7e2b0ae353620ec995800fe3e920c09fd14ffc5db9a3d81776099a7569b7e13a1323a2b23b49d9ae94b89fc02007daa51f0409d78a581ffca974b47766f"], 0x0)
fsopen(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, 0x0, 0x72b, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000)

19.103943765s ago: executing program 5 (id=1149):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(0x0, 0x2)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
close_range(r6, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

18.327773824s ago: executing program 2 (id=1153):
socket$unix(0x1, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x60a01, 0x0)
close(0xffffffffffffffff)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fstat(0xffffffffffffffff, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)

17.132971295s ago: executing program 5 (id=1154):
syz_usb_connect$uac1(0x2, 0xb8, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101, 0x0)
io_setup(0x81, &(0x7f0000001440)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x800, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000e00)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2(0x0, 0x800)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9b2, 0xf)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

16.474941822s ago: executing program 2 (id=1157):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x200000, &(0x7f0000000080)=ANY=[], 0x1, 0xb07, &(0x7f0000001380)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='./file3\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000040))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x70b}, 0x14}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0800180003000400fdff1400000046890020006900006002907800000000ffffffff44045b1014f3305280f125e6"], 0x2e)

14.703823097s ago: executing program 4 (id=1158):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = getpgid(0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peekuser(0x3, r2, 0x110)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000003c0)={&(0x7f0000000380)})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="5cf0b67aa16bf1dcc2f1ae5aa14e42cb6db77c270b99b1c640ab27453b4a089d9ad367f0f0dd7ab38ddbaeb047ef74d0a1f9aa080b894ea2f067824e2331f63e32eca6dd1196239a33e3ff58a8c40a9c120cca1666ab88492ec25f2ee144dc6b0d2e21651eea22bd79d45e406676df1e1ae9f937ff483c77a3c16a52c736c022b2829500081c0d6159780f114f713eb8364ba6d5b6c9f64f43326bc2219741e92de26f4342bcc6d691ff5f36c990af86750adc5b945e27ee8d6b65cd12841c9b110bad0f2c9a2d2e73410f0cb58d43c433459b820ed4314723626946aa6697e045c1edce001ffe549ae2a44b4377da7d4f3d2857e45c3f25ea44797577256b587f7420a30745a6e373c058200d42edc02b42d028e4cab8d6fe09d677ccd453784f3deb8724be00842dc857e2efe2a752a32b3dcd252d6ccb6ede45cfab2830c0b5947a4b9c9f68705d9e669d8f1e6d60a32812825252a46beadd87ecc1344c9924cffb26c2effcf25244b1f7b717b0e4b3f30b8c136b2385aeb52364d199e97c455117c390d3d3f0524bb4159b15a1803be4d289ee4524a36d70a47f56b1dcb865c40452f9851860601d929a4237c3ff9522ce238fb12761a11b0eeffa5156d5f8f8e8782dd61e291cd691dfebf673c04622ab3d0f41386eaa02f05a9d4f0b83c796ba1a3115ce0132030cd11f4cc797a20e5388ca45936c27282f7c28ae8312654c9f34b28f1c59894449dcc1c993929cff02280f7688100ac4ccba6e534cd44e6cefa6cf2c64fa66f8e3d59b0b851fbbdbbe81d57c44a5eee6a7d96ca176ad33240a703cff52de4fd70ea2d4330f4efc17c55aa688ed5daa1646e50ffc07c95059a2b3ee442f665c9838293b0400b951a1f706bf73b63d9d7a8aed42c0b54bb81be4fc698e1eb0605d656a5446698b76ef5a224cde75c457d49ad7479153d36ce1c2e32011e058866cc94d44604eefc42fdb6bfd82cf4722bf4c73df1ea2d02eb787ec0eb26ea13532a77465da7070bff12fe8c1694ec2eb87285915ab182543db23b45a1ca291e7b9133fccdc0742ce6e6b71e3286412339dc52d696136f47912519545911c246c875ff80dd734f81c41a73493da7da9c4ee125c60dd65a49d490e2fc33ca5fc511ad18148b1177f19eaeffe7a0174875dd03e8e3b32ebcae0a8aabea0d4d1de879332ea50471fc6eb5b7cefcc7b243c22c84d85c73f8c8fc31cbbcd9f4c6b601e02375428fdbd320c2182877da71a2d70330f05fd8e7c50f73c291bc4bff8e306f55c79cfea125876f6e9092ad5598d8fa62d119385061f1ff13bf7c2b44fd363be7229f6b4f2f6fb7f641535c47cca350e598b8290fa73bfc0559e5bfa74228bd4b7048b8f0356c43a439b5731381d575997780e4f57b5c2d6b5bfbb955aa10e9f9cc46eb62b530a156511fa7e0c001f24396af1a9946d07d3c065f7fb88c430c63807652c60cb174735e1466df3bd407a765a4a63ad2cf004bad50ab2049a7f56cdfd53d39eabc749871e70fbab4ffe42756ed05335df15d40420134902a68b69a15dda03c98ed9333174043441f807b70f5a98d35984128a902e7ee8d5ae806ca40e4f5ad2288ec645ca43275c7625eabda5a774d10c9efcc852b4e2a181255308ab1082ad382bb5bdff980865e7caadcec81b4697457d816625097cb4a9659d480145a3d40237e54be17faf12fae9a9a48226fd7e43509e325359642bd8626e37958f83494b15b6c615121238129c15c1fac440dabc71a836ac2976e1987abdc3ecbe78dacda51cf9019e3159b276a877e355c18a9835cdf98522dad7467dcbd97dca4098599ce33ebee7c742ab847d39172608fd8f829e344393b50f29f0e7efdc35bad46c1e20ed7c3f5874f021a8afe3a96cf9e186eafee13b138d92091282414ad896034d8146e849785b364450970abe11f743a12ac977062059ad7f67b01d32cdcc75c6babe2309fc929a9d92c805ecb4ff70719df50807e824ae90f66b0557bff4ebf78dfa43532869ff5164e144defc4d8ee1d6745ed369e7ed7afc981f0f3a0c82a1f97032a12eb8d672b2231040d132971ff2b2ea2eeb0f30fc21fdcd80e32f8a64d325b0fa74919c0b727335230cd340883ed28bd50af63e07f98f91e5d69851b25ab260828303713fa7ce5671c598fabee013bbb6ed04bc70e8d16d9748b885179ae22e4a9ea40d55d6565b0dc5b35719f28199b95ce9ce7f3c81c5a62a5ec1c9c63a8c74cbd26682875ffd2b8c709643d4dfa81199f9828fbe6c1e99d5c003f7ebfbf860fb238f1e427c74eadf459ed60ee73de4d13c8cfc7c58fc371fdd0e8bd70b10e4f9de9928f5c1fa81dffabc7a818fc8d50d9611f06b901bd88a5fc6b9f8bc6503b23822f105653b598c9f0abffbae0d8c56cff568f2c2bc47a88b26c2124a78921462efa4895730f369bf1f0d3227ef1b76dd394317c1726a13f9c15d65bcf6128b61351abac6a54151efcd872d25d9929cf5b7ef141e84b8d145fff6453d6a943af1c0ebd6c2aad77c1cadd21880bcdc362c690e88a914f946c8cfe00ac1936ac8e7ee66156bf76a158b09244aee3c937677067b8d6ce6de5711c80ee00893acf16e86e44037450581e6d06aff72630356644d2345741e76065a15b23cd57ed96a4b702b07a1c2df236ef5d1f0711ed23742a05bf7c047b48338e28115cdce04277cc10936937f0434ae60adbf1a9fc6f422ce8017d1f7b5554c19dc67fdce214afdb8b9a04e3987d16ce5b0b8d9f779914441357347af13f08fec8b05e4f786e88d1346fffd81cd3feb2c518c8a5199ebc2e15754a789febfde86dacb5530ebad117acc0b1cad2669836b5e536dc3df3739f22b85bf1d64353ce65b81707902fc9b471bd159fc80065f26d56aa310d47c276bbd83f5d2e5e4ffbe0e424b21eb940d9e1b3198eae52cdde8c193f4f07e7af9e40f64e2ebdb9aa0f0dc49fae9b024128379eec28ff2b2989907e16bdd9ea22f767f73d21c1c9ed2992b1c5ff5e606c7a3f5f29ce6e30e0118f5c6f88c6bdd27bc58fc74390a97a98590b31fbcbd76449777b253ce0c68da51d402ae862beef5fbfd8afb3aaa62f57826e74c8f6b985aa456e015fd8325eb8fedbc0f0e681bcd8d7626bee70e48d563d1acb03af39d206384b1e8328e588e66fb7243c8c9c2748a8f9efb34a0ab4e76035d9c6e4a7784ead7194f2868f97c580769942b3e81bf02e55c27f43885303d641ab9717618592bf790c119a9033ffce20a8ffcd0d1f1043add8da1a40b2d223920e33625366ccbf515b4e83ba5030df036316798c8cd50b5dca303fddfed3b4d7e89077be0af139ed509243dca68271d02238c85a6dc019897727b6137b18fdf444cff1790631b4c411daa9939b4a4b1abd93b2b1370d62c9e07962cacdde123b75a625553cc8dd2c4f4df4f96a1cdd07fefb232347dbf24e39831251d30e931dc965b789975d93c35d001bb90335f77984b4fe6cfe67eeacbfe8b03dd3b9eccc33ae979b38bf89417e89e0b7c3da65443cb8371353e7b5a44f99db5c73a0f7bc84147ef45847dc0231e00684f0bfb361efc62636c460501a910047db41258c00538b6763b3a79a23395afc6a46be1f53d123202bb598f9e3f40d50939f0cb01c70215e55de53703375e5be090387eaec3717d22e718c31f9d9eb2a81a2bddd846671d14aa42995cd18aca6c804b4b8eba42693eb4d2db995ef26e5a7ab1c4a98d7c268821edf7d2f193f381c15e87fa8355207c3efb209e4214038e99f7c3e7fdcdc4d038b18b08c488edc20a949f7417a7d8dd4e37dbf1b4afcf79ef867d17ca68a0d744b8f6aee7738be4beb737ca9dba34fda810f44c0f51ec9f8e295e7cd78e3256ae73db7186b1e29a04f63065c44fa6c7a16fe4f50851f336b402ce5a73ff88f9b5cdb52ead12060590180f112a4f6c36e5418207bc5dc8635ec831e383ae67fbbe119de517a6932a69440015d014a1d143c8b09f611aa4f79b083c8ea67806cf221ede408771cf2d979feb3e448fcbd859e875d6ff6cff062e073bdb4b32bcf5", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

13.77650144s ago: executing program 2 (id=1159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
r2 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3})
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
r4 = fsmount(r2, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)

13.173633516s ago: executing program 5 (id=1161):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
gettid()
prlimit64(0x0, 0x3, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = memfd_create(0x0, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
close(0x3)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x26, 0x0, @val=@iter={&(0x7f00000000c0), 0x10}}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close_range(r3, 0xffffffffffffffff, 0x0)

11.00840223s ago: executing program 5 (id=1163):
socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x60a01, 0x0)
close(0xffffffffffffffff)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fstat(0xffffffffffffffff, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)

10.22153345s ago: executing program 5 (id=1164):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
syz_open_dev$sndpcmp(0x0, 0x0, 0x28002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
capget(&(0x7f0000002680)={0x20080522}, &(0x7f00000026c0)={0x3ff, 0x0, 0x4, 0x100, 0x5, 0x2})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0xc02, 0x0)
dup3(r5, r0, 0x0)

8.347964298s ago: executing program 5 (id=1166):
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x58000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@any, 0x2})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "48646f28cdaf44df819deb26c008fd78c6b135c07633d7454ae3864a972a8e0672f12e5c063f9643eab677b240fa26a1d9b9f033c13195e8b6efc79ea04aae27", 0x26}, 0x48, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r1, 0x8000000000000000)
pipe2$watch_queue(&(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x80)
add_key$user(&(0x7f00000000c0), 0x0, &(0x7f00000003c0)="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", 0xff0, r1)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x50172, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x39, &(0x7f00000002c0)={@local, @multicast, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@generic={0x8906, "4b960ce0917fb17544969f0350f9f36c654dbf64c800190cbd9f77f6c2e43451ce2868d7e31c7e"}}}, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x92)
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f)
keyctl$revoke(0x3, r3)
keyctl$revoke(0x3, r3)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0)

8.323262399s ago: executing program 7 (id=1167):
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
symlink(0x0, &(0x7f0000000100)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000029f000/0x4000)=nil)
r3 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200"], 0x2c2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)

7.134717209s ago: executing program 7 (id=1168):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000000)="ea", 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8)
close(r4)

7.044370871s ago: executing program 4 (id=1169):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_emit_ethernet(0xf7e, &(0x7f0000001180)=ANY=[], 0x0)
getsockname(r3, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r4, &(0x7f0000000180)}, 0x20)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x400, 0x2, 0x14a, 0x0, r6}, &(0x7f0000000180), 0x0, &(0x7f0000000140))

5.947349599s ago: executing program 7 (id=1170):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000300)=0x20, 0x4)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
write$binfmt_misc(r4, &(0x7f0000000300), 0x6)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

5.9065134s ago: executing program 4 (id=1171):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r1=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x9)
connect$inet(r5, 0x0, 0x0)
close(r5)
timer_settime(r1, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c000000020601000600000600000000000a00000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000)
sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x14}, 0x40050)

4.626993973s ago: executing program 4 (id=1172):
socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x60a01, 0x0)
close(0xffffffffffffffff)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fstat(0xffffffffffffffff, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)

4.399901509s ago: executing program 7 (id=1173):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0})

3.104953371s ago: executing program 7 (id=1174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, @void}, 0x3)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
pread64(r4, &(0x7f0000002240)=""/236, 0xec, 0x4eb)

1.665253218s ago: executing program 7 (id=1175):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7dd256967c7126}]}}}]}, 0x70}}, 0x4000080)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
getpeername(r4, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180fffffffd0800f1d7fffffffd0800034000000003090002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)

1.437384504s ago: executing program 4 (id=1176):
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB])
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0xc}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = getpid()
rt_tgsigqueueinfo(r4, 0x0, 0xb, &(0x7f0000000000)={0x2a, 0x0, 0x3})
r5 = syz_open_dev$vim2m(0x0, 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f009, 0x3})

91.821908ms ago: executing program 4 (id=1177):
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080), 0x1)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = getpid()
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x2}})

0s ago: executing program 2 (id=1178):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0x17b3', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000000280), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='AC', 0x2)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc)
close(r5)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @mcast1={0xff, 0x5}, 0x0, 0x4, 0x0, 0x600, 0xfc8, 0x20c200a2})

kernel console output (not intermixed with test programs):

dler #02!!!
[  288.999336][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  290.032706][  T790] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110)
[  290.049926][  T790] sq905: probe of 3-1:0.0 failed with error -110
[  290.100189][  T790] usb 3-1: USB disconnect, device number 5
[  292.317043][   T28] IPVS: starting estimator thread 0...
[  292.461752][ T6927] IPVS: using max 28 ests per chain, 67200 per kthread
[  292.719185][ T6931] netlink: 'syz.3.265': attribute type 10 has an invalid length.
[  292.727041][ T6931] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  292.747617][ T6931] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  297.597348][ T5825] IPVS: starting estimator thread 0...
[  297.744911][ T6960] IPVS: using max 20 ests per chain, 48000 per kthread
[  300.568523][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.595898][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.603879][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.612145][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.630585][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  300.647771][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  302.417853][ T6972] chnl_net:caif_netlink_parms(): no params data found
[  302.804649][ T5087] Bluetooth: hci2: unexpected event for opcode 0x0000
[  303.033571][ T6985] loop3: detected capacity change from 0 to 2048
[  303.051917][ T5087] Bluetooth: hci4: command tx timeout
[  303.680771][ T6985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  304.228138][   T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.242338][ T6991] IPVS: ip_vs_add_dest(): server weight less than zero
[  304.266021][ T6991] IPVS: sh: FWM 3 0x00000003 - no destination available
[  304.349103][   T27] audit: type=1800 audit(1785769506.758:28): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.280" name="file0" dev="overlay" ino=392 res=0 errno=0
[  305.189032][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.198257][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.210308][ T6972] bridge_slave_0: entered allmulticast mode
[  305.245821][ T6972] bridge_slave_0: entered promiscuous mode
[  305.317078][ T5087] Bluetooth: hci4: command tx timeout
[  305.396824][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.404750][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.412001][ T6972] bridge_slave_1: entered allmulticast mode
[  305.420394][ T6972] bridge_slave_1: entered promiscuous mode
[  307.166864][ T5087] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  307.175871][ T5087] Bluetooth: hci2: Injecting HCI hardware error event
[  307.186705][ T5087] Bluetooth: hci2: hardware error 0x00
[  307.431653][   T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.597796][ T5786] Bluetooth: hci4: command tx timeout
[  307.842952][ T7004] loop3: detected capacity change from 0 to 2048
[  307.973986][ T7004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.921834][ T6972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.671320][ T5786] Bluetooth: hci4: command tx timeout
[  310.676910][ T5087] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  310.835745][   T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.901822][ T6972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.189457][ T5087] Bluetooth: hci3: unexpected event for opcode 0x0000
[  311.671848][ T7017] loop2: detected capacity change from 0 to 2048
[  311.715575][ T7017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.722800][   T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.769566][ T6972] team0: Port device team_slave_0 added
[  311.784379][ T6972] team0: Port device team_slave_1 added
[  311.978055][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.017329][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.081462][ T6972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.149212][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.186726][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.834042][ T6972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.644543][ T6972] hsr_slave_0: entered promiscuous mode
[  314.707059][ T6972] hsr_slave_1: entered promiscuous mode
[  314.767152][ T6972] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.825018][ T6972] Cannot create hsr debugfs directory
[  315.512125][ T5087] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  315.521634][ T5087] Bluetooth: hci3: Injecting HCI hardware error event
[  315.534680][ T5786] Bluetooth: hci3: hardware error 0x00
[  318.227024][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  318.551758][ T6972] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  318.803740][ T6972] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  318.888939][ T6972] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  319.676804][ T6972] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  320.233099][   T59] bond0: (slave wlan1): Releasing backup interface
[  320.376381][ T7070] loop2: detected capacity change from 0 to 2048
[  320.481712][ T7070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  321.204767][ T6972] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.364655][ T7080] netlink: 'syz.2.297': attribute type 10 has an invalid length.
[  321.382626][ T7080] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  322.534965][ T7075] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  322.552287][ T6972] 8021q: adding VLAN 0 to HW filter on device team0
[  322.793130][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0066
[  322.838424][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.846471][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.032395][ T7089] loop0: detected capacity change from 0 to 2048
[  323.115344][ T7089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.325157][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.333390][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.739060][   T59] hsr_slave_0: left promiscuous mode
[  324.769208][   T59] hsr_slave_1: left promiscuous mode
[  324.842092][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.849848][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.903129][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.926126][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.934801][   T59] bridge_slave_1: left allmulticast mode
[  324.947391][   T59] bridge_slave_1: left promiscuous mode
[  324.953404][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.022898][   T59] bridge_slave_0: left allmulticast mode
[  325.028632][   T59] bridge_slave_0: left promiscuous mode
[  325.059633][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.159978][   T59] veth1_macvtap: left promiscuous mode
[  325.172606][   T59] veth0_macvtap: left promiscuous mode
[  325.178340][   T59] veth1_vlan: left promiscuous mode
[  325.194142][   T59] veth0_vlan: left promiscuous mode
[  327.295688][ T7113] loop2: detected capacity change from 0 to 2048
[  328.299933][ T7113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.091515][ T7118] IPVS: ip_vs_add_dest(): server weight less than zero
[  329.831529][ T7124] loop2: detected capacity change from 0 to 2048
[  331.232807][ T7124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  331.759837][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  331.770904][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  332.663249][   T59] team0 (unregistering): Port device team_slave_1 removed
[  332.672250][ T7132] IPVS: ip_vs_add_dest(): server weight less than zero
[  335.999293][   T59] team0 (unregistering): Port device team_slave_0 removed
[  336.173801][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.916074][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  337.164579][ T7146] IPVS: ip_vs_add_dest(): server weight less than zero
[  339.066356][ T7156] loop2: detected capacity change from 0 to 16
[  339.087823][ T7157] loop0: detected capacity change from 0 to 2048
[  339.110055][ T7157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  339.123831][ T7156] erofs: (device loop2): mounted with root inode @ nid 36.
[  339.884218][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0000
[  340.376361][ T7163] loop0: detected capacity change from 0 to 2048
[  340.383103][ T7162] loop2: detected capacity change from 0 to 2048
[  340.398653][ T7163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  340.416316][ T7162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  343.823782][ T7183] IPVS: ip_vs_add_dest(): server weight less than zero
[  343.878327][   T59] bond0 (unregistering): Released all slaves
[  344.200099][ T7185] loop2: detected capacity change from 0 to 32768
[  344.285837][ T7185] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  344.430623][ T7185] XFS (loop2): Ending clean mount
[  344.444127][ T7185] XFS (loop2): Quotacheck needed: Please wait.
[  344.519537][ T7185] XFS (loop2): Quotacheck: Done.
[  345.287239][ T7175] netlink: 'syz.0.319': attribute type 10 has an invalid length.
[  345.360961][ T7175] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  345.399373][ T7176] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  345.545606][ T6972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  345.699467][ T6972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  345.754570][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  347.294456][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0000
[  347.538769][ T7220] loop0: detected capacity change from 0 to 2048
[  347.598072][ T7220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  349.742726][ T6972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.017964][   T59] IPVS: stop unused estimator thread 0...
[  351.042086][ T7234] IPVS: ip_vs_add_dest(): server weight less than zero
[  353.107280][ T6972] veth0_vlan: entered promiscuous mode
[  353.162713][ T6972] veth1_vlan: entered promiscuous mode
[  353.347385][ T6972] veth0_macvtap: entered promiscuous mode
[  353.370792][ T6972] veth1_macvtap: entered promiscuous mode
[  353.493170][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.532326][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.542206][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.607133][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.617207][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.692779][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.728194][ T6972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.783033][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.810232][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.841968][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.869244][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.916194][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.114068][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.158400][ T6972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.258917][ T6972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.299074][ T6972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.359201][ T6972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.402736][ T6972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.702160][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.710089][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.832916][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.852209][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.255330][   T27] audit: type=1804 audit(1785769555.504:29): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.332" name="/newroot/93/file0/file1" dev="overlay" ino=590 res=1 errno=0
[  359.114052][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  359.476579][ T7289] IPVS: ip_vs_add_dest(): server weight less than zero
[  359.659025][ T7292] netlink: 'syz.2.333': attribute type 10 has an invalid length.
[  359.844343][ T7292] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  360.563395][ T7299] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  362.134055][ T7315] loop3: detected capacity change from 0 to 16
[  362.332985][ T7315] erofs: (device loop3): mounted with root inode @ nid 36.
[  366.234061][ T7331] loop2: detected capacity change from 0 to 2048
[  366.742307][ T7331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  367.019199][ T7335] IPVS: ip_vs_add_dest(): server weight less than zero
[  369.106096][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0066
[  369.342195][ T7345] loop0: detected capacity change from 0 to 2048
[  369.991936][ T7345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  370.056991][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  370.768274][ T7352] loop0: detected capacity change from 0 to 16
[  370.799066][ T7352] erofs: (device loop0): mounted with root inode @ nid 36.
[  373.861618][ T7367] IPVS: rr: FWM 3 0x00000003 - no destination available
[  373.871877][ T5825] IPVS: starting estimator thread 0...
[  373.979189][ T7369] IPVS: using max 19 ests per chain, 45600 per kthread
[  374.064519][ T7371] loop2: detected capacity change from 0 to 256
[  374.386924][ T7377] netlink: 'syz.3.349': attribute type 10 has an invalid length.
[  374.387006][ T7377] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  374.388616][ T7377] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  379.395293][ T7410] loop2: detected capacity change from 0 to 2048
[  379.854892][ T7410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  380.455147][ T7420] loop0: detected capacity change from 0 to 256
[  381.359056][ T7420] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d)
[  381.436072][   T27] audit: type=1800 audit(1785769578.889:30): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.363" name="file1" dev="loop0" ino=1048609 res=0 errno=0
[  381.476490][ T7418] syz.0.363: attempt to access beyond end of device
[  381.476490][ T7418] loop0: rw=0, sector=184, nr_sectors = 11103 limit=256
[  381.578003][ T7418] syz.0.363: attempt to access beyond end of device
[  381.578003][ T7418] loop0: rw=0, sector=11287, nr_sectors = 18080 limit=256
[  381.606767][ T7418] syz.0.363: attempt to access beyond end of device
[  381.606767][ T7418] loop0: rw=0, sector=29367, nr_sectors = 3576 limit=256
[  382.107838][ T7429] netlink: 'syz.0.365': attribute type 10 has an invalid length.
[  382.121325][ T7429] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  382.328172][ T7429] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  382.845100][ T7435] IPVS: ip_vs_add_dest(): server weight less than zero
[  385.019980][ T7449] loop0: detected capacity change from 0 to 16
[  385.152359][ T7449] erofs: (device loop0): mounted with root inode @ nid 36.
[  386.024225][ T7462] loop3: detected capacity change from 0 to 2048
[  386.086205][ T7462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  388.869141][ T7474] IPVS: ip_vs_add_dest(): server weight less than zero
[  389.084911][ T7477] netlink: 'syz.4.375': attribute type 10 has an invalid length.
[  389.205013][ T7477] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  389.300074][ T7479] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  389.523219][ T7483] IPVS: ip_vs_add_dest(): server weight less than zero
[  389.763071][ T7489] loop4: detected capacity change from 0 to 16
[  389.790323][ T7489] erofs: (device loop4): mounted with root inode @ nid 36.
[  393.025206][ T7507] loop2: detected capacity change from 0 to 16
[  393.782409][ T7507] erofs: (device loop2): mounted with root inode @ nid 36.
[  393.886419][ T7511] input: syz1 as /devices/virtual/input/input5
[  396.374406][ T7526] loop2: detected capacity change from 0 to 16
[  396.557166][ T7529] loop4: detected capacity change from 0 to 2048
[  397.219656][ T7526] erofs: (device loop2): mounted with root inode @ nid 36.
[  397.267021][ T7529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  397.582883][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  397.589272][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  398.358979][ T7544] loop4: detected capacity change from 0 to 16
[  398.393551][ T7544] erofs: (device loop4): mounted with root inode @ nid 36.
[  400.750360][ T7561] loop3: detected capacity change from 0 to 16
[  400.872830][ T7561] erofs: (device loop3): mounted with root inode @ nid 36.
[  400.917296][ T7563] loop2: detected capacity change from 0 to 16
[  400.958776][ T7563] erofs: (device loop2): mounted with root inode @ nid 36.
[  401.045880][ T7566] IPVS: ip_vs_add_dest(): server weight less than zero
[  401.102983][ T7566] IPVS: rr: FWM 3 0x00000003 - no destination available
[  401.274423][ T7570] sctp: [Deprecated]: syz.0.395 (pid 7570) Use of int in max_burst socket option deprecated.
[  401.274423][ T7570] Use struct sctp_assoc_value instead
[  402.500465][ T7581] loop4: detected capacity change from 0 to 2048
[  402.882465][ T7581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  402.991330][ T7584] netlink: 'syz.3.396': attribute type 1 has an invalid length.
[  403.302716][ T7588] IPVS: ip_vs_add_dest(): server weight less than zero
[  403.383731][ T7584] 8021q: adding VLAN 0 to HW filter on device bond1
[  403.864536][ T7601] loop4: detected capacity change from 0 to 16
[  403.908103][ T7601] erofs: (device loop4): mounted with root inode @ nid 36.
[  404.564917][ T7590] bond1: (slave geneve2): making interface the new active one
[  404.656823][ T7590] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  404.975277][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.031769][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.262199][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.061376][ T7616] IPVS: rr: FWM 3 0x00000003 - no destination available
[  406.091435][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.370493][ T7625] IPVS: ip_vs_add_dest(): server weight less than zero
[  406.388517][ T7625] IPVS: rr: FWM 3 0x00000003 - no destination available
[  406.797912][ T7631] loop2: detected capacity change from 0 to 16
[  406.860317][ T7631] erofs: (device loop2): mounted with root inode @ nid 36.
[  407.431797][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0066
[  407.659551][ T7638] loop0: detected capacity change from 0 to 2048
[  408.370742][ T7638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  408.943752][ T7643] loop4: detected capacity change from 0 to 16
[  409.165127][ T7643] erofs: (device loop4): mounted with root inode @ nid 36.
[  410.497695][ T7647] IPVS: ip_vs_add_dest(): server weight less than zero
[  413.153976][ T7663] capability: warning: `syz.0.417' uses 32-bit capabilities (legacy support in use)
[  413.695607][ T7675] loop3: detected capacity change from 0 to 16
[  413.742436][ T7675] erofs: (device loop3): mounted with root inode @ nid 36.
[  415.161231][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0066
[  415.387838][ T7701] loop0: detected capacity change from 0 to 2048
[  415.603224][ T7701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.364159][ T7705] loop3: detected capacity change from 0 to 16
[  416.584753][ T7705] erofs: (device loop3): mounted with root inode @ nid 36.
[  418.621311][ T7713] IPVS: ip_vs_add_dest(): server weight less than zero
[  418.654699][ T7714] IPVS: ip_vs_add_dest(): server weight less than zero
[  418.680385][ T7714] IPVS: rr: FWM 3 0x00000003 - no destination available
[  420.480094][ T7725] IPVS: ip_vs_add_dest(): server weight less than zero
[  420.490219][ T7725] IPVS: rr: FWM 3 0x00000003 - no destination available
[  420.579736][ T7726] IPVS: ip_vs_add_dest(): server weight less than zero
[  421.534747][ T7740] loop2: detected capacity change from 0 to 2048
[  421.911191][ T7740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  421.922044][ T7738] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  422.651103][ T7745] loop2: detected capacity change from 0 to 16
[  423.618556][ T7745] erofs: (device loop2): mounted with root inode @ nid 36.
[  424.096935][ T7756] loop2: detected capacity change from 0 to 256
[  424.185331][ T7759] IPVS: ip_vs_add_dest(): server weight less than zero
[  424.217788][ T7759] IPVS: rr: FWM 3 0x00000003 - no destination available
[  424.235290][ T7756] FAT-fs (loop2): Directory bread(block 64) failed
[  424.265641][ T7756] FAT-fs (loop2): Directory bread(block 65) failed
[  424.272419][ T7756] FAT-fs (loop2): Directory bread(block 66) failed
[  424.301623][ T7756] FAT-fs (loop2): Directory bread(block 67) failed
[  424.319599][ T7756] FAT-fs (loop2): Directory bread(block 68) failed
[  424.360151][ T7756] FAT-fs (loop2): Directory bread(block 69) failed
[  424.367545][ T7756] FAT-fs (loop2): Directory bread(block 70) failed
[  424.416236][ T7756] FAT-fs (loop2): Directory bread(block 71) failed
[  424.422992][ T7756] FAT-fs (loop2): Directory bread(block 72) failed
[  424.456673][ T7756] FAT-fs (loop2): Directory bread(block 73) failed
[  424.641981][ T7756] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  424.734266][ T7767] IPVS: ip_vs_add_dest(): server weight less than zero
[  424.777003][ T7767] IPVS: rr: FWM 3 0x00000003 - no destination available
[  426.123005][ T7782] IPVS: ip_vs_add_dest(): server weight less than zero
[  427.579055][ T7792] loop4: detected capacity change from 0 to 2048
[  428.374768][ T7792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.018778][ T7799] loop0: detected capacity change from 0 to 16
[  430.104502][ T7799] erofs: (device loop0): mounted with root inode @ nid 36.
[  430.250037][ T7808] IPVS: ip_vs_add_dest(): server weight less than zero
[  430.944686][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  431.423144][   T23] usb 5-1: Using ep0 maxpacket: 8
[  431.586728][   T23] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  431.711469][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  431.742032][   T23] usb 5-1: Product: syz
[  431.776778][   T23] usb 5-1: Manufacturer: syz
[  431.781477][   T23] usb 5-1: SerialNumber: syz
[  431.834921][   T23] usb 5-1: config 0 descriptor??
[  431.854796][   T23] gspca_main: sq905-2.14.0 probing 2770:9120
[  432.056578][ T7830] IPVS: ip_vs_add_dest(): server weight less than zero
[  432.481592][ T5087] Bluetooth: hci4: command 0x0406 tx timeout
[  432.945223][   T23] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110)
[  433.027868][   T23] sq905: probe of 5-1:0.0 failed with error -110
[  433.110356][ T5825] usb 5-1: USB disconnect, device number 2
[  433.291411][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0066
[  433.529325][ T7842] loop0: detected capacity change from 0 to 2048
[  433.578767][ T7842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  434.766810][ T7847] loop2: detected capacity change from 0 to 2048
[  434.843328][ T7847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  435.742965][ T7849] loop0: detected capacity change from 0 to 16
[  435.776929][ T7852] IPVS: ip_vs_add_dest(): server weight less than zero
[  435.831500][ T7849] erofs: (device loop0): mounted with root inode @ nid 36.
[  435.865596][ T7854] IPVS: rr: FWM 3 0x00000003 - no destination available
[  437.201267][ T7869] trusted_key: syz.3.459 sent an empty control message without MSG_MORE.
[  438.573358][ T7881] loop4: detected capacity change from 0 to 2048
[  438.913995][ T5786] Bluetooth: hci4: unexpected event for opcode 0x0066
[  439.383421][ T7881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  441.286480][ T7891] warning: `syz.4.464' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  441.426285][ T7891] bond1: option xmit_hash_policy: invalid value (6)
[  441.521911][   T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  441.565952][ T7891] bond1 (unregistering): Released all slaves
[  441.854013][   T23] usb 4-1: Using ep0 maxpacket: 8
[  442.029487][   T23] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  442.045632][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  442.054917][   T23] usb 4-1: Product: syz
[  442.059396][   T23] usb 4-1: Manufacturer: syz
[  442.064652][   T23] usb 4-1: SerialNumber: syz
[  442.124620][   T23] usb 4-1: config 0 descriptor??
[  442.172018][   T23] gspca_main: sq905-2.14.0 probing 2770:9120
[  442.685519][   T23] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  442.749077][   T23] sq905: probe of 4-1:0.0 failed with error -71
[  442.803862][   T23] usb 4-1: USB disconnect, device number 2
[  442.881996][ T7900] IPVS: ip_vs_add_dest(): server weight less than zero
[  443.237462][ T7908] loop4: detected capacity change from 0 to 16
[  443.306436][ T7908] erofs: (device loop4): mounted with root inode @ nid 36.
[  444.286783][   T27] audit: type=1326 audit(1785769637.714:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  445.981476][   T27] audit: type=1326 audit(1785769637.742:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  446.799192][   T27] audit: type=1326 audit(1785769637.742:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  446.952612][   T27] audit: type=1326 audit(1785769637.742:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  447.043627][   T27] audit: type=1326 audit(1785769637.742:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  447.122997][   T27] audit: type=1326 audit(1785769637.742:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  447.279295][   T27] audit: type=1326 audit(1785769637.742:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  447.572777][   T27] audit: type=1326 audit(1785769637.742:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  447.599688][ T7927] netlink: 'syz.3.470': attribute type 10 has an invalid length.
[  447.608496][ T7927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.470'.
[  447.972217][   T27] audit: type=1326 audit(1785769637.742:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  448.093477][   T27] audit: type=1326 audit(1785769637.742:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.0.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794919e019 code=0x7ffc0000
[  448.164968][ T7927] team0: Port device geneve0 added
[  448.951106][ T7945] loop3: detected capacity change from 0 to 2048
[  449.008313][ T7945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  449.882876][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0066
[  450.282146][ T7955] loop0: detected capacity change from 0 to 2048
[  451.293847][ T7955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  453.961405][ T7975] IPVS: ip_vs_add_dest(): server weight less than zero
[  454.423426][ T7972] loop2: detected capacity change from 0 to 16
[  454.440147][ T7977] loop4: detected capacity change from 0 to 64
[  454.523227][ T7972] erofs: (device loop2): mounted with root inode @ nid 36.
[  455.813713][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'.
[  455.852111][ T7992] loop2: detected capacity change from 0 to 2048
[  455.906936][ T7992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  456.639092][ T8003] loop2: detected capacity change from 0 to 2048
[  457.290448][ T8003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  457.970007][ T8007] loop2: detected capacity change from 0 to 32768
[  458.030985][ T8007] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  458.040286][ T8009] IPVS: ip_vs_add_dest(): server weight less than zero
[  458.062492][ T8009] IPVS: rr: FWM 3 0x00000003 - no destination available
[  458.327159][ T8007] XFS (loop2): Ending clean mount
[  458.368066][ T8007] XFS (loop2): Quotacheck needed: Please wait.
[  459.200138][ T8007] XFS (loop2): Quotacheck: Done.
[  459.455816][ T8031] loop3: detected capacity change from 0 to 16
[  459.716096][ T8031] erofs: (device loop3): mounted with root inode @ nid 36.
[  460.005265][   T27] kauditd_printk_skb: 59 callbacks suppressed
[  460.005277][   T27] audit: type=1800 audit(1785769652.060:100): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.486" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0
[  461.819362][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  462.233120][ T8039] loop3: detected capacity change from 0 to 16
[  462.268493][ T8039] erofs: (device loop3): mounted with root inode @ nid 36.
[  463.070672][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  463.078031][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  464.399192][ T8051] loop3: detected capacity change from 0 to 512
[  464.406792][ T8051] EXT4-fs: Ignoring removed i_version option
[  464.424355][ T8051] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  464.879577][ T8051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[  464.887865][ T8051] System zones: 1-12
[  464.892258][ T8051] EXT4-fs (loop3): orphan cleanup on readonly fs
[  465.638864][ T8051] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.494: invalid indirect mapped block 12 (level 1)
[  465.664891][ T8051] EXT4-fs (loop3): Remounting filesystem read-only
[  465.702199][ T8051] EXT4-fs (loop3): 1 truncate cleaned up
[  465.720687][ T8051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  467.343494][ T8060] loop2: detected capacity change from 0 to 2048
[  467.411298][ T8060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  467.871358][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  468.923758][ T8072] loop3: detected capacity change from 0 to 16
[  468.947724][ T8072] erofs: (device loop3): mounted with root inode @ nid 36.
[  468.997647][ T8074] IPVS: ip_vs_add_dest(): server weight less than zero
[  470.531257][ T8084] loop4: detected capacity change from 0 to 16
[  470.594676][ T8084] erofs: (device loop4): mounted with root inode @ nid 36.
[  472.867940][ T8093] loop4: detected capacity change from 0 to 1024
[  472.894243][ T8093] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  472.894243][ T8093] 
[  473.102520][ T7949] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  473.368622][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'.
[  473.980775][ T5786] Bluetooth: hci4: unexpected event for opcode 0x0066
[  474.124695][ T8103] loop4: detected capacity change from 0 to 2048
[  475.211955][ T8103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  475.671295][ T8108] IPVS: ip_vs_add_dest(): server weight less than zero
[  478.241565][ T8119] loop2: detected capacity change from 0 to 16
[  478.295002][ T8119] erofs: (device loop2): mounted with root inode @ nid 36.
[  481.633406][ T5786] Bluetooth: hci4: unexpected event for opcode 0x0066
[  481.776450][ T8130] loop4: detected capacity change from 0 to 2048
[  484.220102][ T8130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  487.516774][ T8148] loop0: detected capacity change from 0 to 16
[  487.580192][ T8148] erofs: (device loop0): mounted with root inode @ nid 36.
[  487.915160][ T8155] loop3: detected capacity change from 0 to 2048
[  488.285238][ T8155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  491.087897][ T8169] loop4: detected capacity change from 0 to 16
[  491.119391][ T8169] erofs: (device loop4): mounted with root inode @ nid 36.
[  494.634174][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  494.644707][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  494.654299][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  494.664532][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  494.672498][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  494.682309][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  494.704260][ T8178] loop3: detected capacity change from 0 to 256
[  496.985356][ T5087] Bluetooth: hci0: command tx timeout
[  497.142391][ T8175] chnl_net:caif_netlink_parms(): no params data found
[  497.697704][ T8178] FAT-fs (loop3): Directory bread(block 64) failed
[  497.704383][ T8178] FAT-fs (loop3): Directory bread(block 65) failed
[  497.765050][ T8195] IPVS: ip_vs_add_dest(): server weight less than zero
[  497.768565][ T8178] FAT-fs (loop3): Directory bread(block 66) failed
[  497.816856][ T8178] FAT-fs (loop3): Directory bread(block 67) failed
[  497.823587][ T8178] FAT-fs (loop3): Directory bread(block 68) failed
[  497.830262][ T8178] FAT-fs (loop3): Directory bread(block 69) failed
[  497.836961][ T8178] FAT-fs (loop3): Directory bread(block 70) failed
[  497.843525][ T8178] FAT-fs (loop3): Directory bread(block 71) failed
[  497.850255][ T8178] FAT-fs (loop3): Directory bread(block 72) failed
[  497.857328][ T8178] FAT-fs (loop3): Directory bread(block 73) failed
[  497.876856][ T8178] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  497.974544][ T8202] loop4: detected capacity change from 0 to 256
[  498.141199][ T8202] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d)
[  498.845883][ T8202] syz.4.530: attempt to access beyond end of device
[  498.845883][ T8202] loop4: rw=0, sector=184, nr_sectors = 32759 limit=256
[  498.863827][   T27] audit: type=1800 audit(1785769688.191:101): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.530" name="file1" dev="loop4" ino=1048610 res=0 errno=0
[  498.937099][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.120998][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.149003][ T5087] Bluetooth: hci0: command tx timeout
[  499.343558][ T8175] bridge_slave_0: entered allmulticast mode
[  499.365083][ T8175] bridge_slave_0: entered promiscuous mode
[  499.486211][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.960196][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.123521][ T8175] bridge_slave_1: entered allmulticast mode
[  500.240035][ T8175] bridge_slave_1: entered promiscuous mode
[  500.344269][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  500.485879][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.449593][ T5087] Bluetooth: hci0: command tx timeout
[  502.256079][ T8175] team0: Port device team_slave_0 added
[  502.285874][ T8175] team0: Port device team_slave_1 added
[  502.765741][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.772724][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.799098][ T8175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.811361][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.850282][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.909743][ T8175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.462012][ T8175] hsr_slave_0: entered promiscuous mode
[  503.703691][ T5087] Bluetooth: hci0: command tx timeout
[  504.266937][ T8175] hsr_slave_1: entered promiscuous mode
[  504.301986][ T8175] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  504.310160][ T8175] Cannot create hsr debugfs directory
[  506.176167][ T8233] Bluetooth: MGMT ver 1.22
[  507.399700][ T8235] IPVS: ip_vs_add_dest(): server weight less than zero
[  507.433512][ T8235] IPVS: rr: FWM 3 0x00000003 - no destination available
[  507.775623][ T8175] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  508.342220][ T8175] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  508.377283][ T8175] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  508.400694][ T8175] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  509.643539][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.213232][ T8175] 8021q: adding VLAN 0 to HW filter on device team0
[  510.460565][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.467787][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.694801][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.702164][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.925249][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.264651][ T8264] loop3: detected capacity change from 0 to 16
[  512.301332][ T8264] erofs: (device loop3): mounted with root inode @ nid 36.
[  513.052272][ T8175] veth0_vlan: entered promiscuous mode
[  513.072872][ T8175] veth1_vlan: entered promiscuous mode
[  513.110223][ T8175] veth0_macvtap: entered promiscuous mode
[  513.123736][ T8175] veth1_macvtap: entered promiscuous mode
[  513.145694][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.163944][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.175787][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.196097][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.209067][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.223939][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.237494][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.286841][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.306779][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.318549][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.332539][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.351132][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.372681][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.413142][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.442355][ T8175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.505102][ T8175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.515430][ T8175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.534511][ T8175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.699696][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.714286][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.735789][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.756455][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.888932][ T8274] loop2: detected capacity change from 0 to 512
[  513.937984][ T8274] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  516.290066][   T27] audit: type=1326 audit(1785769703.042:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  517.574153][   T27] audit: type=1326 audit(1785769703.042:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  517.598742][   T27] audit: type=1326 audit(1785769703.042:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  517.622850][   T27] audit: type=1326 audit(1785769703.042:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  517.659428][   T27] audit: type=1326 audit(1785769703.042:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  517.759110][   T27] audit: type=1326 audit(1785769703.042:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  517.835757][   T27] audit: type=1326 audit(1785769703.042:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  517.899227][   T27] audit: type=1326 audit(1785769703.051:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  517.950250][   T27] audit: type=1326 audit(1785769703.051:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  518.030216][   T27] audit: type=1326 audit(1785769703.051:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.4.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c299e019 code=0x7ffc0000
[  521.119062][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  521.128554][    T8] IPVS: starting estimator thread 0...
[  521.137588][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  521.146511][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  521.154846][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  521.163534][ T5786] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  521.176807][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  521.197492][ T8291] IPVS: ip_vs_add_dest(): server weight less than zero
[  521.222634][ T8291] IPVS: rr: FWM 3 0x00000003 - no destination available
[  521.345638][ T8294] IPVS: using max 23 ests per chain, 55200 per kthread
[  522.730977][ T8292] chnl_net:caif_netlink_parms(): no params data found
[  523.013750][ T8292] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.020884][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.028802][ T8292] bridge_slave_0: entered allmulticast mode
[  523.036176][ T8292] bridge_slave_0: entered promiscuous mode
[  523.044352][ T8292] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.051930][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.108931][ T8292] bridge_slave_1: entered allmulticast mode
[  523.142841][ T8292] bridge_slave_1: entered promiscuous mode
[  523.365365][ T8292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.378406][ T8292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.495267][ T5786] Bluetooth: hci5: command tx timeout
[  524.682616][ T8312] loop5: detected capacity change from 0 to 2048
[  524.733209][ T8312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  525.418095][ T8292] team0: Port device team_slave_0 added
[  525.426204][ T8292] team0: Port device team_slave_1 added
[  525.563681][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.577590][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.641898][ T5786] Bluetooth: hci5: command tx timeout
[  525.653130][ T8292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.706205][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.713216][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.802178][ T8292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.965368][ T8316] IPVS: ip_vs_add_dest(): server weight less than zero
[  525.995376][ T8316] IPVS: rr: FWM 3 0x00000003 - no destination available
[  526.175591][ T8292] hsr_slave_0: entered promiscuous mode
[  526.244973][ T8292] hsr_slave_1: entered promiscuous mode
[  526.364575][ T8292] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  526.374244][ T8292] Cannot create hsr debugfs directory
[  527.757932][ T8336] IPVS: ip_vs_add_dest(): server weight less than zero
[  527.765297][ T8336] IPVS: rr: FWM 3 0x00000003 - no destination available
[  527.864460][ T5786] Bluetooth: hci5: command tx timeout
[  528.723754][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  529.008124][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  529.324185][ T5786] Bluetooth: hci4: unexpected event for opcode 0x0066
[  529.556888][ T8352] loop4: detected capacity change from 0 to 2048
[  530.159454][ T5786] Bluetooth: hci5: command tx timeout
[  530.180648][ T8351] loop5: detected capacity change from 0 to 1024
[  530.201808][ T8352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  530.613945][ T8357] 9pnet_virtio: no channels available for device syz
[  531.460621][   T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.514796][ T8292] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  531.543814][ T8361] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  531.655698][ T8368] IPVS: ip_vs_add_dest(): server weight less than zero
[  531.668278][   T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.683537][ T8368] IPVS: rr: FWM 3 0x00000003 - no destination available
[  531.695132][ T8292] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  531.709958][ T8292] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  531.728092][ T8292] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  531.765593][   T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.555437][ T8372] loop2: detected capacity change from 0 to 64
[  533.751896][ T8383] loop5: detected capacity change from 0 to 2048
[  533.777114][ T8382] syz.4.570 (8382): drop_caches: 2
[  533.860926][ T8383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  534.177361][   T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.246733][ T8292] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.530734][ T8292] 8021q: adding VLAN 0 to HW filter on device team0
[  535.602161][   T48] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.709605][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.716799][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.758545][ T8399] sctp: [Deprecated]: syz.2.576 (pid 8399) Use of int in max_burst socket option deprecated.
[  535.758545][ T8399] Use struct sctp_assoc_value instead
[  535.945380][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.952594][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.533601][ T8292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  537.598426][ T8292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  537.685095][ T8410] IPVS: ip_vs_add_dest(): server weight less than zero
[  537.754744][ T8410] IPVS: rr: FWM 3 0x00000003 - no destination available
[  538.807905][ T8421] loop5: detected capacity change from 0 to 64
[  540.633143][ T8431] loop2: detected capacity change from 0 to 2048
[  540.955800][ T8431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  540.992228][ T8433] loop5: detected capacity change from 0 to 2048
[  541.010728][ T8433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  543.355339][ T8443] IPVS: ip_vs_add_dest(): server weight less than zero
[  543.423833][ T8447] IPVS: rr: FWM 3 0x00000003 - no destination available
[  543.589040][ T8292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  547.777091][ T8292] veth0_vlan: entered promiscuous mode
[  550.107840][ T8292] veth1_vlan: entered promiscuous mode
[  550.514126][   T48] bond0: (slave wlan1): Releasing backup interface
[  551.761629][ T8493] vivid-000: kernel_thread() failed
[  552.162886][ T5786] Bluetooth: hci4: unexpected event for opcode 0x0066
[  552.403903][ T8501] loop4: detected capacity change from 0 to 2048
[  553.140406][ T8501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  553.584867][ T8507] loop2: detected capacity change from 0 to 2048
[  554.246079][ T8507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  555.986123][ T8292] veth0_macvtap: entered promiscuous mode
[  557.266830][ T8292] veth1_macvtap: entered promiscuous mode
[  557.529733][   T48] hsr_slave_0: left promiscuous mode
[  557.542082][   T48] hsr_slave_1: left promiscuous mode
[  557.594362][   T48] bridge_slave_1: left allmulticast mode
[  557.600085][   T48] bridge_slave_1: left promiscuous mode
[  557.627246][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.754431][   T48] bridge_slave_0: left allmulticast mode
[  557.760159][   T48] bridge_slave_0: left promiscuous mode
[  557.818312][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.027556][   T48] veth1_macvtap: left promiscuous mode
[  558.033243][   T48] veth0_macvtap: left promiscuous mode
[  558.038846][   T48] veth1_vlan: left promiscuous mode
[  558.065090][   T48] veth0_vlan: left promiscuous mode
[  558.896152][   T48] team0 (unregistering): Port device team_slave_1 removed
[  558.948269][   T48] team0 (unregistering): Port device team_slave_0 removed
[  559.000423][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  559.051682][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  559.422537][   T48] bond0 (unregistering): Released all slaves
[  559.577184][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  559.617469][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.635007][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  559.645711][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.666349][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  559.682303][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.692615][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  559.703798][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.721511][ T8292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  559.771791][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.795263][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.812270][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.824021][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.834143][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.844701][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.855045][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.865632][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.885504][ T8292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  559.916690][ T8292] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.930580][ T8292] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.939928][ T8292] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.950210][ T8292] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.137958][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.159779][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.172916][   T48] IPVS: stop unused estimator thread 0...
[  560.215670][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.235026][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.443381][ T8538] loop5: detected capacity change from 0 to 128
[  560.622738][ T8538] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  561.280424][ T2992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.817364][ T2992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.216011][ T8556] loop2: detected capacity change from 0 to 1024
[  563.757542][ T8562] loop6: detected capacity change from 0 to 64
[  564.223686][ T2992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.906438][ T2992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.204615][ T2992] tipc: Left network mode
[  576.734161][ T8620] IPVS: ip_vs_add_dest(): server weight less than zero
[  577.279418][ T8636] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001
[  577.293898][ T8636] comedi comedi0: 8255: I/O port conflict (0x3,4)
[  577.300998][ T8636] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  577.309512][ T8636] comedi comedi0: 8255: I/O port conflict (0x5,4)
[  577.316286][ T8636] comedi comedi0: 8255: I/O port conflict (0x4,4)
[  577.323056][ T8636] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4)
[  577.331191][ T8636] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4)
[  577.339225][ T8636] comedi comedi0: 8255: I/O port conflict (0x2,4)
[  577.353022][ T8637] netlink: 'syz.4.616': attribute type 1 has an invalid length.
[  577.361364][ T8637] netlink: 'syz.4.616': attribute type 2 has an invalid length.
[  577.375986][ T8636] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  577.384172][ T8636] comedi comedi0: 8255: I/O port conflict (0xc3,4)
[  577.391218][ T8636] comedi comedi0: 8255: I/O port conflict (0x1000007,4)
[  577.398660][ T8636] comedi comedi0: 8255: I/O port conflict (0x1,4)
[  577.405440][ T8636] comedi comedi0: 8255: I/O port conflict (0x10003,4)
[  577.414047][ T8636] comedi comedi0: 8255: I/O port conflict (0x801000,4)
[  577.421265][ T8636] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4)
[  577.428707][ T8636] comedi comedi0: 8255: I/O port conflict (0x3ff,4)
[  577.435739][ T8636] comedi comedi0: 8255: I/O port conflict (0x1001010,4)
[  577.443027][ T8636] comedi comedi0: 8255: I/O port conflict (0x1ff,4)
[  577.449889][ T8636] comedi comedi0: 8255: I/O port conflict (0x8,4)
[  577.456649][ T8636] comedi comedi0: 8255: I/O port conflict (0x3,4)
[  577.463476][ T8636] comedi comedi0: 8255: I/O port conflict (0x8001,4)
[  577.470585][ T8636] comedi comedi0: 8255: I/O port conflict (0x7,4)
[  577.477343][ T8636] comedi comedi0: 8255: I/O port conflict (0x3ff,4)
[  577.484360][ T8636] comedi comedi0: 8255: I/O port conflict (0x5,4)
[  577.491189][ T8636] comedi comedi0: 8255: I/O port conflict (0x3,4)
[  577.498038][ T8636] comedi comedi0: 8255: I/O port conflict (0xfffd,4)
[  584.815013][ T8669] 9pnet_fd: Insufficient options for proto=fd
[  584.831518][ T8669] netlink: 'syz.5.622': attribute type 10 has an invalid length.
[  584.854778][ T8669] team0: Port device netdevsim0 added
[  585.406952][ T8678] loop4: detected capacity change from 0 to 256
[  585.418774][ T8678] exfat: Deprecated parameter 'utf8'
[  585.816413][ T8678] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  586.268997][ T8677] IPVS: ip_vs_add_dest(): server weight less than zero
[  588.789432][ T8699] loop5: detected capacity change from 0 to 512
[  588.888661][ T8699] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.630: corrupted inode contents
[  588.973778][ T8694] netlink: 'syz.2.629': attribute type 2 has an invalid length.
[  588.980420][ T8699] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  589.055928][ T8699] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.630: corrupted inode contents
[  589.085995][ T8699] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.630: mark_inode_dirty error
[  589.268416][ T8699] EXT4-fs (loop5): 1 orphan inode deleted
[  589.304560][ T8699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.305999][ T2992] bond0: (slave wlan1): Releasing backup interface
[  590.780946][ T8175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.912498][ T8719] loop4: detected capacity change from 0 to 128
[  591.005938][ T8719] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  591.063989][ T8719] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  592.084646][ T6972] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  593.838064][ T8731] loop2: detected capacity change from 0 to 256
[  593.906401][ T8731] FAT-fs (loop2): Directory bread(block 64) failed
[  593.913033][ T8731] FAT-fs (loop2): Directory bread(block 65) failed
[  593.981259][ T8731] FAT-fs (loop2): Directory bread(block 66) failed
[  593.987872][ T8731] FAT-fs (loop2): Directory bread(block 67) failed
[  594.064533][ T8731] FAT-fs (loop2): Directory bread(block 68) failed
[  594.071170][ T8731] FAT-fs (loop2): Directory bread(block 69) failed
[  594.107179][ T8731] FAT-fs (loop2): Directory bread(block 70) failed
[  594.113815][ T8731] FAT-fs (loop2): Directory bread(block 71) failed
[  594.145675][ T8731] FAT-fs (loop2): Directory bread(block 72) failed
[  594.166441][ T8731] FAT-fs (loop2): Directory bread(block 73) failed
[  594.214220][ T2992] hsr_slave_0: left promiscuous mode
[  594.259714][ T2992] hsr_slave_1: left promiscuous mode
[  594.386221][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  594.393731][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  594.421863][ T8740] loop4: detected capacity change from 0 to 32768
[  594.435538][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  594.442047][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  594.537330][ T8740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.637 (8740)
[  594.590707][ T8740] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  594.602047][ T8740] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  594.610953][ T8740] BTRFS info (device loop4): use zlib compression, level 3
[  594.618236][ T8740] BTRFS info (device loop4): turning on sync discard
[  594.625059][ T8740] BTRFS info (device loop4): using free space tree
[  594.675299][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  594.818255][ T8749] syz.2.636: attempt to access beyond end of device
[  594.818255][ T8749] loop2: rw=524288, sector=1768, nr_sectors = 4 limit=256
[  594.835950][ T8749] syz.2.636: attempt to access beyond end of device
[  594.835950][ T8749] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256
[  594.856729][   T27] kauditd_printk_skb: 57 callbacks suppressed
[  594.856771][   T27] audit: type=1800 audit(1785769778.607:169): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.636" name="file1" dev="loop2" ino=1048622 res=0 errno=0
[  594.889272][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  594.920534][ T2992] bridge_slave_1: left allmulticast mode
[  595.050364][ T2992] bridge_slave_1: left promiscuous mode
[  595.111570][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.234443][ T8740] BTRFS info (device loop4): enabling ssd optimizations
[  595.265395][ T2992] bridge_slave_0: left allmulticast mode
[  595.312588][ T2992] bridge_slave_0: left promiscuous mode
[  595.358229][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.590785][ T2992] veth1_macvtap: left promiscuous mode
[  595.732128][   T27] audit: type=1800 audit(1785769779.374:170): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.637" name="file1" dev="loop4" ino=260 res=0 errno=0
[  596.256000][ T2992] veth0_macvtap: left promiscuous mode
[  596.261853][ T2992] veth1_vlan: left promiscuous mode
[  596.367050][ T2992] veth0_vlan: left promiscuous mode
[  596.752491][ T6972] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  598.056102][ T2992] bond1 (unregistering): (slave geneve2): Releasing active interface
[  599.651173][ T8781] loop5: detected capacity change from 0 to 8
[  599.772227][ T2992] bond1 (unregistering): Released all slaves
[  600.472943][ T8785] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  600.491327][ T2992] team0 (unregistering): Port device geneve0 removed
[  600.560328][ T8650] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  602.065894][ T2992] team0 (unregistering): Port device team_slave_1 removed
[  602.128988][ T2992] team0 (unregistering): Port device team_slave_0 removed
[  602.186755][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  602.246986][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  602.694791][ T2992] bond0 (unregistering): Released all slaves
[  604.224645][ T8798] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  604.408903][ T8816] wg1: entered promiscuous mode
[  604.414250][ T8816] wg1: entered allmulticast mode
[  605.528323][ T8819] IPVS: ip_vs_add_dest(): server weight less than zero
[  605.557855][ T8819] IPVS: rr: FWM 3 0x00000003 - no destination available
[  605.769514][ T8824] IPVS: ip_vs_add_dest(): server weight less than zero
[  605.788312][ T7702] IPVS: starting estimator thread 0...
[  605.810705][ T8824] IPVS: rr: FWM 3 0x00000003 - no destination available
[  605.941799][ T8827] IPVS: using max 17 ests per chain, 40800 per kthread
[  606.623724][ T8832] sctp: [Deprecated]: syz.5.651 (pid 8832) Use of int in max_burst socket option.
[  606.623724][ T8832] Use struct sctp_assoc_value instead
[  607.103647][ T2992] IPVS: stop unused estimator thread 0...
[  613.714377][ T8887] loop5: detected capacity change from 0 to 2048
[  613.859089][ T8887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  613.883083][ T8891] loop2: detected capacity change from 0 to 16
[  621.408850][ T8938] loop2: detected capacity change from 0 to 2048
[  622.547004][ T8938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  625.437325][ T8954] binder: 8950:8954 ioctl c0306201 2000000001c0 returned -14
[  625.480984][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.676'.
[  628.780991][ T8986] xt_TPROXY: Can be used only with -p tcp or -p udp
[  629.706562][ T5087] Bluetooth: hci0: command 0x0406 tx timeout
[  631.192617][ T9003] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  631.218930][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.687'.
[  631.229345][ T9011] netlink: 48 bytes leftover after parsing attributes in process `syz.5.687'.
[  631.865667][ T5853] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  632.196177][ T5853] usb 5-1: Using ep0 maxpacket: 8
[  632.223190][ T5853] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  632.262314][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  632.294765][ T5853] usb 5-1: Product: syz
[  632.299010][ T5853] usb 5-1: Manufacturer: syz
[  632.326075][ T5853] usb 5-1: SerialNumber: syz
[  632.351936][ T5853] usb 5-1: config 0 descriptor??
[  632.909010][ T5853] gspca_main: sq905-2.14.0 probing 2770:9120
[  634.107472][ T5853] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  635.909080][ T5853] sq905: probe of 5-1:0.0 failed with error -71
[  635.918490][ T5853] usb 5-1: USB disconnect, device number 3
[  637.160175][ T9077] loop4: detected capacity change from 0 to 512
[  637.310747][ T9077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.368356][ T9077] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  637.682152][ T9088] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  637.775497][ T9088] batman_adv: batadv0: Adding interface: wlan0
[  637.781856][ T9088] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.807104][    C0] vkms_vblank_simulate: vblank timer overrun
[  637.873513][ T9088] batman_adv: batadv0: Interface activated: wlan0
[  638.172680][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  638.364523][ T9071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  638.957400][ T9071] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  639.025161][ T9071] bridge0: port 3(syz_tun) entered blocking state
[  639.079568][ T9071] bridge0: port 3(syz_tun) entered disabled state
[  639.107840][ T9071] syz_tun: entered allmulticast mode
[  639.118878][ T9071] syz_tun: entered promiscuous mode
[  639.125660][ T9071] bridge0: port 3(syz_tun) entered blocking state
[  639.132740][ T9071] bridge0: port 3(syz_tun) entered forwarding state
[  639.656973][ T9107] wireguard0: entered promiscuous mode
[  640.282626][ T6972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  642.269935][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0066
[  642.296525][ T9127] IPVS: ip_vs_add_dest(): server weight less than zero
[  642.495234][ T9133] loop5: detected capacity change from 0 to 2048
[  642.641373][ T9133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  642.840904][ T9134] loop4: detected capacity change from 0 to 16
[  643.017721][ T9134] erofs: (device loop4): mounted with root inode @ nid 36.
[  643.262686][ T9136] loop2: detected capacity change from 0 to 128
[  646.213221][ T9156] netlink: 120 bytes leftover after parsing attributes in process `syz.5.714'.
[  648.103635][ T9165] netlink: 'syz.6.718': attribute type 10 has an invalid length.
[  648.281629][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0066
[  648.528058][ T9179] loop5: detected capacity change from 0 to 2048
[  648.953058][ T9179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  649.215778][ T9165] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  649.544433][ T9170] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  649.838742][ T9189] IPVS: ip_vs_add_dest(): server weight less than zero
[  650.909428][ T9197] IPVS: ip_vs_add_dest(): server weight less than zero
[  652.329131][ T9204] IPVS: ip_vs_add_dest(): server weight less than zero
[  653.305659][ T9208] xt_hashlimit: max too large, truncated to 1048576
[  656.252783][ T9232] IPVS: ip_vs_add_dest(): server weight less than zero
[  656.335685][ T9232] IPVS: rr: FWM 3 0x00000003 - no destination available
[  658.002875][ T9227] Bluetooth: hci5: command 0x0406 tx timeout
[  660.076075][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  660.082662][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  661.479025][ T9263] input: syz1 as /devices/virtual/input/input6
[  663.216726][ T9273] loop2: detected capacity change from 0 to 2048
[  663.973472][ T9273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  666.170809][ T9281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  666.178621][ T9281] IPv6: NLM_F_CREATE should be set when creating new route
[  666.185994][ T9281] IPv6: NLM_F_CREATE should be set when creating new route
[  666.193474][ T9281] IPv6: NLM_F_CREATE should be set when creating new route
[  671.873687][ T5786] Bluetooth: hci5: unexpected event 0x03 length: 12 > 11
[  672.067101][ T9321] netlink: 144 bytes leftover after parsing attributes in process `syz.6.752'.
[  672.322946][ T9321] netlink: 144 bytes leftover after parsing attributes in process `syz.6.752'.
[  672.332683][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0066
[  672.563076][ T9327] loop5: detected capacity change from 0 to 2048
[  673.220524][ T9327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  675.318733][ T9337] vlan2: entered allmulticast mode
[  675.324097][ T9337] veth0_vlan: entered allmulticast mode
[  676.603489][ T9338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  678.263872][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'.
[  679.606427][ T9353] loop5: detected capacity change from 0 to 8192
[  683.719046][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0066
[  683.952899][ T9382] loop5: detected capacity change from 0 to 2048
[  684.007664][ T9382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  685.730587][ T9396] netlink: 'syz.4.766': attribute type 10 has an invalid length.
[  685.738581][ T9396] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  685.747721][ T9396] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  688.453075][ T9418] netlink: 272 bytes leftover after parsing attributes in process `syz.2.769'.
[  690.065798][ T9429] loop4: detected capacity change from 0 to 512
[  690.494579][ T9430] loop5: detected capacity change from 0 to 1024
[  690.515178][ T9430] hfsplus: failed to load extents file
[  690.698600][ T9433] Cannot find del_set index 0 as target
[  690.859450][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'.
[  690.868920][ T9442] bridge_slave_1: left allmulticast mode
[  690.874842][ T9442] bridge_slave_1: left promiscuous mode
[  690.881417][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.938407][ T9429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  690.998082][ T9400] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  691.614293][ T9442] bridge_slave_0: left allmulticast mode
[  691.620132][ T9442] bridge_slave_0: left promiscuous mode
[  691.626763][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.083835][ T6972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.479076][ T9452] netlink: 'syz.5.778': attribute type 10 has an invalid length.
[  694.227396][ T9452] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  694.253893][ T9452] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  694.391117][ T9457] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  694.529872][ T9467] netlink: 'syz.6.780': attribute type 13 has an invalid length.
[  694.566256][ T9467] netlink: 'syz.6.780': attribute type 17 has an invalid length.
[  696.063569][ T9467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  696.152167][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'.
[  697.962789][ T9497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.787'.
[  699.055981][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0c7c
[  700.511480][ T9523] netlink: 'syz.4.791': attribute type 10 has an invalid length.
[  700.519441][ T9523] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  700.528242][ T9523] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  701.263336][ T9534] loop4: detected capacity change from 0 to 256
[  702.495146][ T9534] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  702.505932][ T9534] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  702.532996][ T9534] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  702.545701][ T9534] exFAT-fs (loop4): failed to load alloc-bitmap
[  702.552026][ T9534] exFAT-fs (loop4): failed to recognize exfat type
[  703.564396][ T8650] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  703.701404][ T9537] loop5: detected capacity change from 0 to 128
[  703.941431][ T9537] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  704.026148][ T9537] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  704.380780][ T9545] IPVS: ip_vs_add_dest(): server weight less than zero
[  705.753371][ T8175] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  706.333416][ T9570] netlink: 'syz.2.801': attribute type 10 has an invalid length.
[  706.341889][ T9570] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  707.178906][ T9580] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  710.168543][ T9595] loop5: detected capacity change from 0 to 16
[  710.208550][ T9595] erofs: (device loop5): mounted with root inode @ nid 36.
[  712.959458][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0066
[  713.284367][ T9616] loop5: detected capacity change from 0 to 2048
[  713.381716][ T9609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  715.859494][ T9616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  716.488023][ T9624] loop2: detected capacity change from 0 to 2048
[  716.609716][ T9624] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  717.355688][ T9630] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  717.384859][ T9624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  719.130378][ T9640] netlink: 72 bytes leftover after parsing attributes in process `syz.6.817'.
[  719.148366][ T9640] capability: warning: `syz.6.817' uses deprecated v2 capabilities in a way that may be insecure
[  719.754286][ T9642] netlink: 'syz.6.818': attribute type 10 has an invalid length.
[  719.762665][ T9642] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  720.085439][ T9648] loop5: detected capacity change from 0 to 16
[  720.117927][ T9648] erofs: (device loop5): mounted with root inode @ nid 36.
[  720.714908][ T9665] loop4: detected capacity change from 0 to 8192
[  720.805363][ T9665] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  722.575477][ T9665] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  722.585431][ T9665] REISERFS (device loop4): using ordered data mode
[  722.660505][ T9665] reiserfs: using flush barriers
[  722.700006][ T9665] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  722.752225][ T9665] REISERFS (device loop4): checking transaction log (loop4)
[  723.017492][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0066
[  723.467880][ T9678] loop5: detected capacity change from 0 to 2048
[  723.486745][ T9665] REISERFS (device loop4): Using r5 hash to sort names
[  723.497160][ T9665] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  723.521267][ T9678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  724.529330][ T9686] Cannot find add_set index 0 as target
[  725.725759][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  725.732267][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  726.182632][ T9700] loop4: detected capacity change from 0 to 2048
[  726.209195][ T9700] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  726.319461][ T9700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  727.676975][ T9720] IPVS: ip_vs_add_dest(): server weight less than zero
[  728.606875][ T9726] loop5: detected capacity change from 0 to 256
[  729.204137][ T5786] Bluetooth: hci5: unexpected event for opcode 0x0066
[  729.460137][ T9726] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  729.471076][ T9726] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  730.316507][ T9726] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  730.334777][ T9726] exFAT-fs (loop5): failed to load alloc-bitmap
[  730.342306][ T9726] exFAT-fs (loop5): failed to recognize exfat type
[  731.747461][ T9740] syz.2.838 (9740): drop_caches: 2
[  732.316533][ T9753] loop2: detected capacity change from 0 to 512
[  732.325909][ T9753] EXT4-fs (loop2): can't mount with both data=journal and dax
[  733.625297][ T9761] loop2: detected capacity change from 0 to 1024
[  733.991954][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0066
[  734.074418][ T9770] netlink: 72 bytes leftover after parsing attributes in process `syz.4.846'.
[  735.085139][ T9773] 9pnet_virtio: no channels available for device syz
[  738.583051][ T9805] syz.6.851 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  738.673150][ T9807] loop4: detected capacity change from 0 to 1024
[  740.114144][ T9821] IPVS: ip_vs_add_dest(): server weight less than zero
[  740.508408][ T9827] xt_CT: You must specify a L4 protocol and not use inversions on it
[  740.814496][ T9830] loop4: detected capacity change from 0 to 16
[  741.133831][ T9830] erofs: (device loop4): mounted with root inode @ nid 36.
[  744.339579][ T9846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  744.864057][ T9844] loop5: detected capacity change from 0 to 2048
[  744.873722][ T9850] netlink: 'syz.4.861': attribute type 10 has an invalid length.
[  744.925150][ T9850] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  744.948369][ T9844] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  744.999910][ T9844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  745.048627][ T9854] IPVS: ip_vs_add_dest(): server weight less than zero
[  746.429875][ T9865] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  746.436259][ T9865] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  747.437131][ T9865] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  747.443374][ T9865] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  747.499108][ T9872] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001
[  747.516557][ T9872] netlink: 'syz.2.873': attribute type 1 has an invalid length.
[  747.525115][ T9872] netlink: 'syz.2.873': attribute type 2 has an invalid length.
[  747.902626][ T9865] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  747.908850][ T9865] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  748.359273][ T9877] IPVS: ip_vs_add_dest(): server weight less than zero
[  748.826513][ T9888] loop4: detected capacity change from 0 to 16
[  748.835768][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[  749.120405][ T9890] loop2: detected capacity change from 0 to 2048
[  749.609084][ T9888] erofs: (device loop4): mounted with root inode @ nid 36.
[  749.635644][ T9890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  749.676321][ T5786] Bluetooth: hci0: command 0x0406 tx timeout
[  750.103765][ T5786] Bluetooth: hci5: command 0x0406 tx timeout
[  750.267985][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0066
[  750.496136][ T9900] loop5: detected capacity change from 0 to 2048
[  751.034749][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[  751.911438][ T9899] IPVS: ip_vs_add_dest(): server weight less than zero
[  751.953378][ T9900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  752.286739][ T9911] loop2: detected capacity change from 0 to 128
[  752.317139][ T9227] Bluetooth: hci5: command 0x0406 tx timeout
[  752.611926][ T9911] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  753.443993][ T9910] netlink: 'syz.4.874': attribute type 10 has an invalid length.
[  753.767586][ T9227] Bluetooth: hci0: unexpected event for opcode 0x0066
[  754.003427][ T9923] loop5: detected capacity change from 0 to 2048
[  754.812731][ T9923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  757.866786][ T9939] loop5: detected capacity change from 0 to 1024
[  757.899186][ T9941] IPVS: ip_vs_add_dest(): server weight less than zero
[  758.105474][ T9227] Bluetooth: hci4: unexpected event for opcode 0x0066
[  758.333599][ T9945] loop4: detected capacity change from 0 to 2048
[  758.411573][ T9945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  761.207622][ T9227] Bluetooth: hci5: unexpected event for opcode 0x0066
[  761.758840][ T9968] loop4: detected capacity change from 0 to 64
[  762.072993][ T9961] loop5: detected capacity change from 0 to 8192
[  762.209744][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  762.219055][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'.
[  762.249985][ T9974] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  762.259481][ T9974] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  762.268229][ T9974] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  762.277806][ T9974] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  762.299649][   T27] audit: type=1800 audit(1785769935.261:171): pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.888" name="file1" dev="loop4" ino=21 res=0 errno=0
[  762.377733][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  762.386680][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'.
[  763.082641][ T9961] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  763.103413][ T9961] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  763.112751][ T9961] REISERFS (device loop5): using ordered data mode
[  763.120791][ T9961] reiserfs: using flush barriers
[  763.128358][ T9961] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  763.145494][ T9961] REISERFS (device loop5): checking transaction log (loop5)
[  763.168254][ T9961] REISERFS (device loop5): Using r5 hash to sort names
[  763.175740][ T9961] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  764.897631][ T6972] hfs: node 4:3 still has 1 user(s)!
[  765.334703][ T9990] xt_CT: You must specify a L4 protocol and not use inversions on it
[  766.139778][ T9227] Bluetooth: hci4: unexpected event for opcode 0x0066
[  766.358595][ T9998] loop4: detected capacity change from 0 to 2048
[  766.494245][ T9998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  767.038651][ T9997] IPVS: ip_vs_add_dest(): server weight less than zero
[  767.357570][T10005] loop5: detected capacity change from 0 to 1024
[  768.344398][ T5853] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  769.151581][ T5853] usb 5-1: Using ep0 maxpacket: 8
[  770.320437][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  770.331158][ T5853] usb 5-1: config 0 has no interfaces?
[  770.345307][ T5853] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  770.366095][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  770.604287][ T5853] usb 5-1: Product: syz
[  770.645435][T10021] loop2: detected capacity change from 0 to 4096
[  770.667396][ T5853] usb 5-1: Manufacturer: syz
[  770.677158][T10021] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  770.809486][ T5853] usb 5-1: SerialNumber: syz
[  770.932041][T10021] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  770.983321][T10021] ntfs3: loop2: failed to convert "c46c" to cp936
[  771.604482][ T5853] usb 5-1: config 0 descriptor??
[  771.708707][ T5853] usb 5-1: can't set config #0, error -71
[  771.788637][ T5853] usb 5-1: USB disconnect, device number 4
[  774.243867][T10036] IPVS: ip_vs_add_dest(): server weight less than zero
[  776.374516][T10053] usb_phy_generic pcspkr: dummy supplies not allowed for exclusive requests
[  784.164003][   T28] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  784.431495][   T28] usb 3-1: Using ep0 maxpacket: 8
[  786.697843][   T28] usb 3-1: device descriptor read/all, error -71
[  787.473126][T10097] IPVS: ip_vs_add_dest(): server weight less than zero
[  787.499876][T10097] IPVS: rr: FWM 3 0x00000003 - no destination available
[  787.769206][T10099] netlink: 'syz.5.916': attribute type 10 has an invalid length.
[  787.777093][T10099] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  789.383972][T10117] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  789.390216][T10117] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  789.507008][ T8518] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.823551][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  789.837620][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  789.847500][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  789.874019][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  789.883096][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  789.890922][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  789.979697][ T5766] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  790.000093][ T8518] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.853699][ T8518] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.038062][ T5766] usb 6-1: Using ep0 maxpacket: 8
[  791.108184][ T5766] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  791.138313][ T8518] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.177125][ T5766] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  791.201387][ T5766] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  791.217132][ T5766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  791.238260][ T5766] usb 6-1: Product: syz
[  791.242732][ T5766] usb 6-1: Manufacturer: syz
[  791.247365][ T5766] usb 6-1: SerialNumber: syz
[  791.263390][ T5766] usb 6-1: config 0 descriptor??
[  791.368871][T10138] loop2: detected capacity change from 0 to 16
[  791.434570][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  791.441913][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  791.443173][T10138] erofs: (device loop2): mounted with root inode @ nid 36.
[  791.573297][ T9227] Bluetooth: hci0: command 0x0406 tx timeout
[  791.580156][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[  792.091807][ T5786] Bluetooth: hci1: command tx timeout
[  792.519898][T10128] chnl_net:caif_netlink_parms(): no params data found
[  794.637118][ T5786] Bluetooth: hci1: command tx timeout
[  794.968466][T10169] loop4: detected capacity change from 0 to 16
[  795.138877][T10169] erofs: (device loop4): mounted with root inode @ nid 36.
[  795.242204][  T790] usb 6-1: USB disconnect, device number 2
[  795.966949][T10175] netlink: 'syz.5.926': attribute type 10 has an invalid length.
[  796.320007][T10128] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.327557][T10128] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.384802][T10128] bridge_slave_0: entered allmulticast mode
[  796.420632][T10128] bridge_slave_0: entered promiscuous mode
[  796.450881][T10128] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.469073][T10128] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.476394][T10128] bridge_slave_1: entered allmulticast mode
[  796.510457][T10128] bridge_slave_1: entered promiscuous mode
[  796.800304][ T5786] Bluetooth: hci1: command tx timeout
[  796.874019][T10183] syzkaller0: entered promiscuous mode
[  796.960029][T10192] xt_CT: You must specify a L4 protocol and not use inversions on it
[  797.069916][T10183] syzkaller0: entered allmulticast mode
[  798.294418][T10190] tipc: Started in network mode
[  798.300580][T10190] tipc: Node identity 7239e9094d9e, cluster identity 4711
[  798.318749][T10190] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  798.419167][T10200] xt_CT: You must specify a L4 protocol and not use inversions on it
[  799.783145][ T5786] Bluetooth: hci1: command tx timeout
[  799.870762][T10180] tipc: Resetting bearer <eth:syzkaller0>
[  800.363523][T10180] tipc: Disabling bearer <eth:syzkaller0>
[  800.645763][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  800.708728][    T9] tipc: Node number set to 1067968777
[  800.745588][T10201] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  800.751773][T10201] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  800.757922][T10201] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  800.763876][T10201] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  800.780111][T10201] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  801.103461][T10206] wg1: entered promiscuous mode
[  801.108376][T10206] wg1: entered allmulticast mode
[  801.125769][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.509861][T10211] loop2: detected capacity change from 0 to 512
[  801.526024][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0066
[  802.078636][T10211] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.933: corrupted inode contents
[  802.104079][T10218] loop5: detected capacity change from 0 to 2048
[  802.131605][T10211] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  802.149089][T10218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  802.159287][T10211] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.933: corrupted inode contents
[  802.180332][ T8518] bond0: (slave wlan1): Releasing backup interface
[  802.221342][T10211] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.933: mark_inode_dirty error
[  802.348781][T10211] EXT4-fs (loop2): 1 orphan inode deleted
[  802.375818][T10128] team0: Port device team_slave_0 added
[  802.425035][T10211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  802.449942][T10128] team0: Port device team_slave_1 added
[  802.655360][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  802.664138][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  802.723952][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.863800][ T5853] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  802.982862][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout
[  802.989369][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[  804.823760][ T8518] hsr_slave_0: left promiscuous mode
[  804.840389][ T8518] hsr_slave_1: left promiscuous mode
[  804.856351][ T8518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  804.871885][ T8518] batman_adv: batadv0: Removing interface: batadv_slave_0
[  804.871912][ T5853] usb 5-1: Using ep0 maxpacket: 8
[  804.901395][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  804.911793][ T8518] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  804.919740][ T5853] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  804.932572][ T8518] batman_adv: batadv0: Removing interface: batadv_slave_1
[  804.943428][ T5853] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  804.955598][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  804.967525][ T8518] bridge_slave_1: left allmulticast mode
[  804.973711][ T5853] usb 5-1: Product: syz
[  804.982746][ T5853] usb 5-1: Manufacturer: syz
[  804.989248][ T8518] bridge_slave_1: left promiscuous mode
[  804.994097][ T5853] usb 5-1: SerialNumber: syz
[  805.000726][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.013895][ T8518] bridge_slave_0: left allmulticast mode
[  805.019629][ T8518] bridge_slave_0: left promiscuous mode
[  805.031109][ T5853] usb 5-1: config 0 descriptor??
[  805.050381][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.133580][ T8518] veth1_macvtap: left promiscuous mode
[  805.142019][ T8518] veth0_macvtap: left promiscuous mode
[  805.147678][ T8518] veth1_vlan: left promiscuous mode
[  805.165364][ T8518] veth0_vlan: left promiscuous mode
[  805.172034][ T9227] Bluetooth: hci1: command 0x0c1a tx timeout
[  807.004789][ T9065] usb 5-1: USB disconnect, device number 5
[  807.398444][ T9227] Bluetooth: hci1: command 0x0c1a tx timeout
[  808.254165][ T8518] team0 (unregistering): Port device team_slave_1 removed
[  808.354683][ T8518] team0 (unregistering): Port device team_slave_0 removed
[  808.430023][ T8518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  808.504440][ T8518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  809.027583][ T8518] bond0 (unregistering): Released all slaves
[  809.126236][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  809.133813][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  809.160269][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  809.251322][T10128] hsr_slave_0: entered promiscuous mode
[  809.258897][T10128] hsr_slave_1: entered promiscuous mode
[  809.302363][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  809.338066][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'.
[  809.368578][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'.
[  809.390258][T10252] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  809.399499][T10252] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  809.408607][T10252] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  809.417452][T10252] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  809.448589][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'.
[  809.457415][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'.
[  810.166225][T10263] sctp: [Deprecated]: syz.4.942 (pid 10263) Use of int in max_burst socket option.
[  810.166225][T10263] Use struct sctp_assoc_value instead
[  810.986146][T10272] IPVS: ip_vs_add_dest(): server weight less than zero
[  811.010631][T10272] IPVS: rr: FWM 3 0x00000003 - no destination available
[  811.163022][T10274] IPVS: ip_vs_add_dest(): server weight less than zero
[  811.290298][ T8518] IPVS: stop unused estimator thread 0...
[  811.502047][T10280] IPVS: ip_vs_add_dest(): server weight less than zero
[  811.509917][T10280] IPVS: rr: FWM 3 0x00000003 - no destination available
[  811.682960][T10281] syzkaller0: entered promiscuous mode
[  811.688716][T10281] syzkaller0: entered allmulticast mode
[  811.731754][T10128] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  811.809346][T10128] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  811.846338][T10128] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  811.893123][T10128] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  811.952521][T10281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  811.995220][T10279] tipc: Resetting bearer <eth:syzkaller0>
[  812.077199][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  812.106104][T10279] tipc: Disabling bearer <eth:syzkaller0>
[  812.302528][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  812.354220][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  812.392397][T10128] 8021q: adding VLAN 0 to HW filter on device bond0
[  812.417966][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  812.428837][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  812.494404][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  812.767486][T10128] 8021q: adding VLAN 0 to HW filter on device team0
[  812.926211][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.933459][ T8518] bridge0: port 1(bridge_slave_0) entered forwarding state
[  813.285123][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.292396][ T8518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  813.521193][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  813.530513][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  813.538658][    T9] usb 5-1: Product: syz
[  813.543084][    T9] usb 5-1: Manufacturer: syz
[  813.565904][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  813.571243][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  813.585121][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  813.591239][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  814.402842][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  814.419689][T10316] futex_wake_op: syz.4.947 tries to shift op by 144; fix this program
[  814.457385][T10316] futex_wake_op: syz.4.947 tries to shift op by 144; fix this program
[  815.206576][T10128] veth0_vlan: entered promiscuous mode
[  815.250543][T10128] veth1_vlan: entered promiscuous mode
[  815.336259][T10128] veth0_macvtap: entered promiscuous mode
[  815.351995][T10128] veth1_macvtap: entered promiscuous mode
[  815.384545][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  815.400660][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.428021][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  815.459390][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.475912][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  815.488082][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.505317][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  815.524837][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.544008][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.555866][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.574557][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.588295][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.600605][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.624691][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  815.700580][T10128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  815.715904][T10128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  815.726149][T10128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  815.740113][T10128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  815.866010][  T790] usb 5-1: USB disconnect, device number 6
[  816.327468][T10339] loop5: detected capacity change from 0 to 32768
[  816.801607][T10128] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  816.897851][T10345] loop4: detected capacity change from 0 to 512
[  816.959168][T10339] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  816.969088][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  817.067771][T10339] XFS (loop5): Ending clean mount
[  817.076764][T10345] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.949: corrupted inode contents
[  817.102377][T10345] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  817.111689][T10345] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.949: corrupted inode contents
[  817.133353][T10339] XFS (loop5): Quotacheck needed: Please wait.
[  817.175817][T10345] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.949: mark_inode_dirty error
[  817.204910][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  817.214848][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  817.236689][T10345] EXT4-fs (loop4): 1 orphan inode deleted
[  817.267577][T10339] XFS (loop5): Quotacheck: Done.
[  817.298737][T10345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  818.052486][   T27] audit: type=1800 audit(1785769987.185:172): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.957" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0
[  818.944583][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  818.978658][ T8175] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  819.010843][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.054346][ T6972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  819.231415][T10367] sctp: [Deprecated]: syz.2.952 (pid 10367) Use of int in max_burst socket option.
[  819.231415][T10367] Use struct sctp_assoc_value instead
[  820.194284][T10370] IPVS: ip_vs_add_dest(): server weight less than zero
[  820.209459][T10370] IPVS: rr: FWM 3 0x00000003 - no destination available
[  820.460164][T10377] IPVS: ip_vs_add_dest(): server weight less than zero
[  820.473846][T10377] IPVS: rr: FWM 3 0x00000003 - no destination available
[  821.410051][ T5853] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  821.800167][T10391] loop5: detected capacity change from 0 to 16
[  821.944638][ T5853] usb 8-1: Using ep0 maxpacket: 8
[  821.967420][ T5853] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  822.003985][ T5853] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  822.024392][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  822.097151][ T8650] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  822.129216][ T5853] usb 8-1: Product: syz
[  822.133742][ T5853] usb 8-1: Manufacturer: syz
[  822.814813][ T5853] usb 8-1: SerialNumber: syz
[  822.973983][ T5853] usb 8-1: config 0 descriptor??
[  823.406437][T10409] IPVS: ip_vs_add_dest(): server weight less than zero
[  823.430866][T10406] loop4: detected capacity change from 0 to 32768
[  823.497771][T10406] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  823.603920][T10406] XFS (loop4): Ending clean mount
[  823.617610][T10406] XFS (loop4): Quotacheck needed: Please wait.
[  823.735301][T10406] XFS (loop4): Quotacheck: Done.
[  824.385707][   T27] audit: type=1800 audit(1785769993.331:173): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.962" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  824.772349][ T6972] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  825.828759][T10432] binder: 10431:10432 ioctl c0306201 2000000001c0 returned -14
[  826.110627][ T5853] usb 8-1: USB disconnect, device number 2
[  826.520778][ T5766] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  826.852023][ T5766] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  826.860898][ T5766] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  826.882297][ T5766] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  826.891909][ T5766] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  826.945580][ T5766] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  826.960629][ T5766] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  826.974266][ T5766] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  827.011999][ T5766] usb 6-1: Product: syz
[  827.022621][ T5766] usb 6-1: Manufacturer: syz
[  827.068068][ T5766] cdc_wdm 6-1:1.0: skipping garbage
[  827.073459][ T5766] cdc_wdm 6-1:1.0: skipping garbage
[  827.153432][ T5766] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  827.159422][ T5766] cdc_wdm 6-1:1.0: Unknown control protocol
[  827.785975][T10458] IPVS: ip_vs_add_dest(): server weight less than zero
[  827.814740][T10458] IPVS: rr: FWM 3 0x00000003 - no destination available
[  828.983084][T10448] futex_wake_op: syz.5.969 tries to shift op by 144; fix this program
[  828.993969][T10448] futex_wake_op: syz.5.969 tries to shift op by 144; fix this program
[  829.705274][T10482] loop2: detected capacity change from 0 to 16
[  830.138209][T10482] erofs: (device loop2): mounted with root inode @ nid 36.
[  830.252058][T10479] syzkaller0: entered promiscuous mode
[  830.257894][T10479] syzkaller0: entered allmulticast mode
[  830.622570][   T28] usb 6-1: USB disconnect, device number 3
[  830.629772][T10479] tipc: Started in network mode
[  830.634803][T10479] tipc: Node identity 423bbf1db2c8, cluster identity 4711
[  830.670591][T10479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  830.771626][T10478] tipc: Resetting bearer <eth:syzkaller0>
[  831.479792][T10505] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  831.501042][T10505] VFS: Can't find a romfs filesystem on dev nullb0.
[  831.501042][T10505] 
[  832.327168][T10478] tipc: Disabling bearer <eth:syzkaller0>
[  832.950537][ T5766] tipc: Node number set to 4042506013
[  833.649489][ T5853] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  834.357615][ T5853] usb 5-1: Using ep0 maxpacket: 8
[  834.369691][ T5853] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  834.385732][ T5853] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  834.395650][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  834.433603][ T5853] usb 5-1: Product: syz
[  834.444940][ T5853] usb 5-1: Manufacturer: syz
[  834.477694][ T5853] usb 5-1: SerialNumber: syz
[  834.524430][ T5853] usb 5-1: config 0 descriptor??
[  838.391698][    T9] usb 5-1: USB disconnect, device number 7
[  839.042491][T10539] loop4: detected capacity change from 0 to 16
[  839.417436][T10539] erofs: (device loop4): mounted with root inode @ nid 36.
[  843.604767][T10576] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  845.335706][   T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  846.314174][   T23] usb 3-1: Using ep0 maxpacket: 8
[  846.351806][   T23] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  846.361414][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  846.377700][   T23] usb 3-1: Product: syz
[  846.382026][   T23] usb 3-1: Manufacturer: syz
[  846.389813][   T23] usb 3-1: SerialNumber: syz
[  846.402740][   T23] usb 3-1: config 0 descriptor??
[  846.412882][   T23] gspca_main: sq905-2.14.0 probing 2770:9120
[  848.457535][   T23] gspca_sq905: sq905_command: usb_control_msg failed (-110)
[  848.465238][   T23] sq905: probe of 3-1:0.0 failed with error -110
[  848.563685][   T23] usb 3-1: USB disconnect, device number 8
[  849.519939][T10623] input: syz1 as /devices/virtual/input/input7
[  850.581888][T10625] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  850.590388][T10625] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  850.689016][T10630] loop4: detected capacity change from 0 to 16
[  850.720177][T10630] erofs: (device loop4): mounted with root inode @ nid 36.
[  857.090759][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  857.102019][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  861.366466][T10690] binder: 10689:10690 ioctl c0306201 2000000001c0 returned -14
[  861.394770][T10697] IPVS: ip_vs_add_dest(): server weight less than zero
[  861.753979][T10706] IPVS: ip_vs_add_dest(): server weight less than zero
[  867.113707][T10760] xt_CT: You must specify a L4 protocol and not use inversions on it
[  868.202367][ T5828] IPVS: starting estimator thread 0...
[  868.235786][T10763] IPVS: ip_vs_add_dest(): server weight less than zero
[  868.364401][T10763] IPVS: rr: FWM 3 0x00000003 - no destination available
[  868.448987][T10764] IPVS: using max 18 ests per chain, 43200 per kthread
[  873.005585][T10810] loop5: detected capacity change from 0 to 16
[  873.014837][T10808] xt_CT: You must specify a L4 protocol and not use inversions on it
[  873.081168][T10810] erofs: (device loop5): mounted with root inode @ nid 36.
[  875.036142][T10816] futex_wake_op: syz.7.1037 tries to shift op by 144; fix this program
[  875.086300][T10816] futex_wake_op: syz.7.1037 tries to shift op by 144; fix this program
[  875.845351][T10835] loop4: detected capacity change from 0 to 4096
[  876.320800][T10835] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  880.761765][T10835] ntfs3: loop4: Failed to read $UpCase (-4).
[  880.886229][T10841] IPVS: rr: FWM 3 0x00000003 - no destination available
[  881.805301][T10857] xt_CT: You must specify a L4 protocol and not use inversions on it
[  883.277088][T10865] xt_hashlimit: max too large, truncated to 1048576
[  889.573758][  T790] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  889.832653][T10926] IPVS: rr: FWM 3 0x00000003 - no destination available
[  889.907503][  T790] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  889.956110][  T790] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  890.012473][  T790] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  890.041539][  T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  890.081771][  T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  890.118363][  T790] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  890.143052][  T790] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  890.162589][  T790] usb 3-1: Product: syz
[  890.172573][  T790] usb 3-1: Manufacturer: syz
[  890.375488][T10932] IPVS: rr: FWM 3 0x00000003 - no destination available
[  890.545811][  T790] cdc_wdm 3-1:1.0: skipping garbage
[  890.553160][  T790] cdc_wdm 3-1:1.0: skipping garbage
[  890.580399][  T790] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  890.586577][  T790] cdc_wdm 3-1:1.0: Unknown control protocol
[  890.714981][T10935] SET target dimension over the limit!
[  891.681462][T10956] xt_CT: You must specify a L4 protocol and not use inversions on it
[  892.715947][T10958] futex_wake_op: syz.2.1050 tries to shift op by 144; fix this program
[  892.763934][T10958] futex_wake_op: syz.2.1050 tries to shift op by 144; fix this program
[  893.882403][T10975] IPVS: ip_vs_add_dest(): server weight less than zero
[  894.137966][ T8575] usb 3-1: USB disconnect, device number 9
[  895.102476][T10981] IPVS: rr: FWM 3 0x00000003 - no destination available
[  897.941309][T10997] xt_CT: You must specify a L4 protocol and not use inversions on it
[  899.264843][T11008] fuse: Bad value for 'fd'
[  901.415667][T11017] IPVS: ip_vs_add_dest(): server weight less than zero
[  906.532684][T11046] xt_hashlimit: max too large, truncated to 1048576
[  907.730314][T11058] SET target dimension over the limit!
[  908.585397][ T9227] Bluetooth: hci4: unexpected event for opcode 0x0066
[  908.801959][T11068] loop4: detected capacity change from 0 to 2048
[  910.599071][T11068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  910.945814][T11076] IPVS: rr: FWM 3 0x00000003 - no destination available
[  911.159531][T11084] IPVS: ip_vs_add_dest(): server weight less than zero
[  912.743567][T11101] netlink: 'syz.4.1090': attribute type 9 has an invalid length.
[  918.835571][T11132] IPVS: ip_vs_add_dest(): server weight less than zero
[  918.934651][T11135] loop0: detected capacity change from 0 to 32768
[  919.163649][T11138] loop2: detected capacity change from 0 to 32768
[  920.031751][T11138] block device autoloading is deprecated and will be removed.
[  920.058262][T11143] IPVS: ip_vs_add_dest(): server weight less than zero
[  921.492657][T11160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  921.623631][T11160] batadv_slave_1: entered promiscuous mode
[  922.775758][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  922.782237][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  926.085049][T11189] xt_CT: You must specify a L4 protocol and not use inversions on it
[  927.959874][T11203] IPVS: ip_vs_add_dest(): server weight less than zero
[  928.435204][T11208] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  930.489245][T11221] xt_CT: You must specify a L4 protocol and not use inversions on it
[  932.835431][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'.
[  939.117384][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1123'.
[  948.795452][T11351] loop5: detected capacity change from 0 to 16
[  949.033852][T11351] erofs: (device loop5): mounted with root inode @ nid 36.
[  958.252358][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1146'.
[  959.235461][ T9685] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  960.497490][ T9685] usb 5-1: Using ep0 maxpacket: 8
[  960.606138][ T9685] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  960.615673][ T9685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  960.644566][ T9685] usb 5-1: Product: syz
[  960.683469][ T9685] usb 5-1: Manufacturer: syz
[  960.726428][ T9685] usb 5-1: SerialNumber: syz
[  960.922744][ T9685] usb 5-1: config 0 descriptor??
[  960.942821][ T9685] gspca_main: sq905-2.14.0 probing 2770:9120
[  961.609082][T11439] loop2: detected capacity change from 0 to 2048
[  961.763218][T11443] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  961.781011][ T9685] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  961.809655][ T9685] sq905: probe of 5-1:0.0 failed with error -71
[  961.870914][ T9685] usb 5-1: USB disconnect, device number 8
[  962.451611][ T9227] Bluetooth: hci4: command 0x0406 tx timeout
[  962.458634][T11453] xt_TPROXY: Can be used only with -p tcp or -p udp
[  962.491972][T11453] syzkaller1: entered promiscuous mode
[  962.497997][T11453] syzkaller1: entered allmulticast mode
[  963.482464][T11443] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  963.501781][T11443] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  963.531263][T11443] Remounting filesystem read-only
[  963.564533][T10921] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  963.579804][T10921] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  963.607678][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  963.651178][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  963.695132][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  963.726342][T10921] NILFS (loop2): discard dirty page: offset=0, ino=2
[  963.744797][T10921] NILFS (loop2): discard dirty block: blocknr=18, size=1024
[  963.752174][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  963.803015][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  963.838887][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  964.119879][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1160'.
[  964.984921][T10921] NILFS (loop2): discard dirty page: offset=0, ino=3
[  965.028006][T10921] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  965.115074][T10921] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  965.190756][T10921] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  965.262356][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.061804][T10921] NILFS (loop2): discard dirty page: offset=98304, ino=3
[  966.069098][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.078070][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.087055][T10921] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  966.094300][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.103302][T10921] NILFS (loop2): discard dirty page: offset=196608, ino=3
[  966.110542][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.120352][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.130205][T10921] NILFS (loop2): discard dirty block: blocknr=49, size=1024
[  966.137548][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.147170][T10921] NILFS (loop2): discard dirty page: offset=0, ino=19
[  966.157892][T10921] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  966.165255][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.174358][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.194143][T10921] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.229297][T11480] netlink: 'syz.7.1162': attribute type 9 has an invalid length.
[  966.248601][T11480] overlayfs: failed to clone lowerpath
[  966.273396][ T5776] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  966.294323][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=6
[  966.301377][ T5776] NILFS (loop2): discard dirty block: blocknr=35, size=1024
[  966.308934][ T5776] NILFS (loop2): discard dirty block: blocknr=36, size=1024
[  966.322208][ T5776] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  966.493046][ T5776] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  966.682082][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=5
[  966.839138][ T5776] NILFS (loop2): discard dirty block: blocknr=41, size=1024
[  966.931033][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.939984][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  966.991860][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  967.038136][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=4
[  967.044914][ T5776] NILFS (loop2): discard dirty block: blocknr=40, size=1024
[  967.103149][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  967.112100][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  968.797482][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  971.686525][T11521] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  977.319143][T11572] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  977.331124][T11572] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  977.339806][T11572] CPU: 1 PID: 11572 Comm: syz.2.1178 Not tainted syzkaller #0
[  977.347316][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  977.357867][T11572] RIP: 0010:dummy_set_selfpowered+0xbb/0x150
[  977.363919][T11572] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df 8d 25 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 c6 8d 25 fb 41 be 78 12 00 00 4d
[  977.384217][T11572] RSP: 0018:ffffc900053477e0 EFLAGS: 00010246
[  977.390332][T11572] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[  977.398348][T11572] RDX: ffff88802a991e00 RSI: 0000000000000003 RDI: 0000000000000005
[  977.406362][T11572] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b
[  977.414386][T11572] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000
[  977.422406][T11572] R13: ffff8880774ba530 R14: ffff8881423f5280 R15: 0000000000000000
[  977.430598][T11572] FS:  00007fcf6245f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  977.440637][T11572] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  977.447347][T11572] CR2: 000000110c3f6d9a CR3: 000000001dbb4000 CR4: 00000000003506e0
[  977.450555][ T9685] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  977.455348][T11572] Call Trace:
[  977.466154][T11572]  <TASK>
[  977.469131][T11572]  ? dummy_wakeup+0x270/0x270
[  977.473954][T11572]  usb_gadget_set_selfpowered+0x6e/0x230
[  977.479652][T11572]  composite_dev_prepare+0x2fa/0x320
[  977.485176][T11572]  configfs_composite_bind+0xa1/0x13f0
[  977.490693][T11572]  ? kernfs_put+0x309/0x360
[  977.495251][T11572]  ? webusb_landingPage_store+0x1c0/0x1c0
[  977.501017][T11572]  gadget_bind_driver+0x2b3/0x770
[  977.506102][T11572]  ? gadget_match_driver+0x130/0x130
[  977.511440][T11572]  really_probe+0x247/0xae0
[  977.515988][T11572]  __driver_probe_device+0x1f5/0x390
[  977.521337][T11572]  driver_probe_device+0x4f/0x420
[  977.526451][T11572]  __driver_attach+0x444/0x6d0
[  977.531269][T11572]  bus_for_each_dev+0x235/0x2b0
[  977.536176][T11572]  ? driver_attach+0x50/0x50
[  977.540821][T11572]  ? bus_remove_file+0x140/0x140
[  977.545812][T11572]  ? do_raw_spin_unlock+0x121/0x230
[  977.551052][T11572]  bus_add_driver+0x340/0x630
[  977.556013][T11572]  driver_register+0x23a/0x310
[  977.560828][T11572]  usb_gadget_register_driver_owner+0xf9/0x270
[  977.567112][T11572]  gadget_dev_desc_UDC_store+0x1c7/0x2e0
[  977.572785][T11572]  configfs_write_iter+0x312/0x400
[  977.577922][T11572]  ? gadget_dev_desc_UDC_show+0x80/0x80
[  977.583752][T11572]  vfs_write+0x474/0x9a0
[  977.588030][T11572]  ? file_end_write+0x250/0x250
[  977.592923][T11572]  ? __fget_files+0x3fc/0x460
[  977.597644][T11572]  ? __fdget_pos+0x2a3/0x330
[  977.602437][T11572]  ? ksys_write+0x74/0x260
[  977.606883][T11572]  ksys_write+0x151/0x260
[  977.611250][T11572]  ? __ia32_sys_read+0x90/0x90
[  977.616050][T11572]  ? lockdep_hardirqs_on+0x98/0x150
[  977.621291][T11572]  do_syscall_64+0x55/0xb0
[  977.625799][T11572]  ? clear_bhb_loop+0x40/0x90
[  977.630522][T11572]  ? clear_bhb_loop+0x40/0x90
[  977.635257][T11572]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  977.641196][T11572] RIP: 0033:0x7fcf6159e019
[  977.645646][T11572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.665285][T11572] RSP: 002b:00007fcf6245f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  977.673723][T11572] RAX: ffffffffffffffda RBX: 00007fcf61825fa0 RCX: 00007fcf6159e019
[  977.681720][T11572] RDX: 000000000000000c RSI: 0000200000000680 RDI: 0000000000000004
[  977.689717][T11572] RBP: 00007fcf6163500c R08: 0000000000000000 R09: 0000000000000000
[  977.697713][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  977.705790][T11572] R13: 00007fcf61826038 R14: 00007fcf61825fa0 R15: 00007ffdb7cfd298
[  977.713791][T11572]  </TASK>
[  977.716840][T11572] Modules linked in:
[  977.744089][T11572] ---[ end trace 0000000000000000 ]---
[  977.751805][T11572] RIP: 0010:dummy_set_selfpowered+0xbb/0x150
[  977.763467][T11572] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df 8d 25 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 c6 8d 25 fb 41 be 78 12 00 00 4d
[  977.786460][T11572] RSP: 0018:ffffc900053477e0 EFLAGS: 00010246
[  977.793063][T11572] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[  978.008579][T11572] RDX: ffff88802a991e00 RSI: 0000000000000003 RDI: 0000000000000005
[  978.059521][T11572] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b
[  978.111415][T11572] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000
[  978.120003][T11572] R13: ffff8880774ba530 R14: ffff8881423f5280 R15: 0000000000000000
[  978.154049][T11572] FS:  00007fcf6245f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  978.201632][T11572] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  978.232862][T11572] CR2: 00007f0a5dec5a10 CR3: 000000001dbb4000 CR4: 00000000003506e0
[  978.262435][T11572] Kernel panic - not syncing: Fatal exception
[  978.268716][T11572] Kernel Offset: disabled
[  978.273063][T11572] Rebooting in 86400 seconds..