last executing test programs:

6m10.372935856s ago: executing program 1 (id=597):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x80000, 0x0, 0xc8}, 0x9c)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x7dfffffd}}, 0x20000, 0xf401, 0xe457, 0x0, 0x4c, 0x6}, 0x9c)

6m10.022111164s ago: executing program 1 (id=608):
r0 = gettid()
tkill(r0, 0x12)
mkdirat(0xffffffffffffff9c, 0x0, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
lseek(0xffffffffffffffff, 0x2000, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
r4 = epoll_create(0xb398)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
r5 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0xb, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000)
stat(0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="240000000104050000000000000000000500000106000640000700000517010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x84)
fstat(0xffffffffffffffff, &(0x7f0000000340))
mount$fuseblk(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c400, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)

6m5.633203313s ago: executing program 1 (id=616):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"})
r2 = syz_open_pts(r1, 0x141601)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x100000, 0x3, 0x19, "680c1acfa4a5000000070000faffffff000800"})
close_range(r0, 0xffffffffffffffff, 0x0)

6m4.809116772s ago: executing program 1 (id=619):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f00000004c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '/+>', 0xd4b, 0x11, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x1c}, {[], {0x4e23, 0x4e23, 0xd4b, 0x0, @opaque="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"}}}}}}, 0x0)

6m4.503537349s ago: executing program 1 (id=622):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x22)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

6m3.974180531s ago: executing program 1 (id=624):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0xf000, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

5m48.854755543s ago: executing program 32 (id=624):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0xf000, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

20.307551841s ago: executing program 0 (id=1490):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913)
getsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

20.306733121s ago: executing program 2 (id=1491):
socket(0x40000000015, 0x5, 0x0)
openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, <r5=>r3, 0x2})
r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7})
close_range(r2, 0xffffffffffffffff, 0x0)

18.442470114s ago: executing program 2 (id=1494):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6(0xa, 0x800000000000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xc, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x526f, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xac8b, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x2, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x5, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi3\x00', 0x0, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000080)={0x1, 0x800007f})
ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x2007, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x1, 0x8, 0x1, 0x100, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x86, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]})
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r6, 0x22052000)
ioctl$sock_bt_hci(r1, 0x800448d2, 0xfffffffffffffffe)
setsockopt$sock_int(r0, 0x1, 0x31, 0x0, 0x0)

18.361647895s ago: executing program 0 (id=1495):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
chdir(&(0x7f0000000240)='./file0\x00')
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0), 0x26, 0x75d, &(0x7f0000000bc0)="$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")
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf}, 0x20)
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
pidfd_getfd(r6, r7, 0x0)
setresuid(0x0, 0xee00, 0x0)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb)

16.663712853s ago: executing program 3 (id=1497):
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x3, 0x73)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000380)={[{@pquota}, {@discard}, {@nolargeio}, {@nouuid}, {@nogrpid}, {@qnoenforce}, {@quota}, {@nolazytime}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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")
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
write$binfmt_aout(r5, 0x0, 0x29f)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a001b0c2bbd7000fbdb8ae0fabf000000000014080001"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804)

15.200158757s ago: executing program 2 (id=1500):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}})
pipe2$watch_queue(&(0x7f0000000080), 0x80)
socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9, 0x70bd29}, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
syslog(0x4, &(0x7f0000000340)=""/176, 0xb0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)

15.014560581s ago: executing program 0 (id=1501):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bf2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd70000000000004"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@mpls_delroute={0xb0, 0x19, 0x10, 0x70bd26, 0x25dfdbff, {0x1c, 0x0, 0x0, 0x11, 0xff, 0x2, 0xc8, 0x0, 0xfc30983352c79b2a}, [@RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0xc8}, {0x1c00, 0x0, 0x1}, {0x63, 0x0, 0x1}, {0x1}, {0xff, 0x0, 0x1}, {0x9}, {}, {0x7, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0xb4}, {0x8}, {0xf8b6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7}, {0x4, 0x0, 0x1}, {0x4}, {0xf, 0x0, 0x1}, {0x3}, {0x5, 0x0, 0x1}, {0x2}, {0x9}, {0x0, 0x0, 0x1}, {0x3}, {0x943, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x1}, {0x8}, {0x1, 0x0, 0x1}, {0x5}, {0x5, 0x0, 0x1}, {0x6}]}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, {0x81, 0x0, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000880)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1)
r5 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000400)=[{&(0x7f0000000300)="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", 0xfb}], 0x1, 0x0)
r6 = syz_open_dev$mtd(&(0x7f0000000500), 0x0, 0x2000)
ioctl$MTDFILEMODE(r6, 0x4d13, 0x0)
ioctl$OTPGETREGIONINFO(r6, 0x400c4d0f, &(0x7f00000000c0))
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000040)={0x4, <r9=>0xffffffffffffffff})
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r10, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x7, 0x9, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

13.575407334s ago: executing program 3 (id=1504):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
close(0xffffffffffffffff)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8)
lseek(r2, 0xc, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40)
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xdb2, 0x7, 0x7})
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x80)
fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x39, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x9af, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x20}}}, &(0x7f0000000440))
fcntl$getownex(r2, 0x10, &(0x7f0000000480)={0x0, <r8=>0x0})
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f00000004c0)={r7, 0xffff, 0x0, 0x0, r8})
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r6, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x5})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0, 0x6}}, 0x6, 0x2, 0x400, 0x2005, 0x2da, 0x94, 0xfe}, 0x9c)

13.320199679s ago: executing program 4 (id=1505):
socket(0x40000000015, 0x5, 0x0)
openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, <r5=>r3, 0x2})
r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7})
close_range(r2, 0xffffffffffffffff, 0x0)

13.29023932s ago: executing program 5 (id=1506):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913)
getsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

13.069237525s ago: executing program 2 (id=1507):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x200000, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
modify_ldt$write2(0x11, &(0x7f0000002880)={0x3, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e6062, &(0x7f0000000000)={[{}]})
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket(0x1d, 0x2, 0x6)
epoll_create(0x80f04)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0x1}}, 0x18)
sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)}}], 0x1, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xffff, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498)
preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/42, 0x2a}], 0x3, 0x7ff, 0x3)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0)

13.036276246s ago: executing program 4 (id=1508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x1, 0x0)
syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$nl_route(r3, 0x0, 0x4000000)
r4 = socket$key(0xf, 0x3, 0x2)
fcntl$getflags(r4, 0x40a)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x6})
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe)
fcntl$setstatus(r5, 0x4, 0x2000)
ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f0000000040))
shutdown(r5, 0x1)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000180)={0x2000004, {{0xa, 0x4e22, 0x6f0, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x8, @empty, 0x492}}}, 0x108)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x909, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x70, 0x4, "", [{{0x9, 0x4, 0x0, 0x15, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0xfff, 0xbb, 0x1, {0x22, 0x7af}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x9c, 0xc7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0x1f, 0xb}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xc, 0x3, 0x4, 0xef, 0x4}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x4, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "6850f4a30f96f8d5ab2cb86a1d90d07c"}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc01}}, {0xd1, &(0x7f0000000100)=@string={0xd1, 0x3, "c9c6ae2ce251a38383a20d72fca298981115cd8049900665a08295056c70aa93266696ede54a7dad6613191db65b4f0321571ac8b33f109be8b5a7f17bbc732be71f50b9eb8ba05791e5160cb18bc24cbc1db8baf3c616f03d9de395802ec283a78877fcf3f43e5862ee0366c631cf151d13fe79d8b9d1247f9a7f3a55be0be2268c2f0a028cad84eff7c3ef53793e4478ce2dd7f984572c857c6255cb3a081c7aa03a6b4c2cecd358499aef0185f23675459c69281b4eaa96a5287cc38a70c1f838626c49fddf9f9a2b2b97b1e950"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41e}}, {0x93, &(0x7f0000000280)=@string={0x93, 0x3, "50cdaf6daf12d30854956e4e1750d243fc2c6f3829ab84eb8df1b7dce6df7963941a74c486c63d39b2202d759d28482ed9ec6adc645854b8aa4994033130027b984f3369e7528f39cc918a4d6023bc60c07cdd747f3a1cc9bd44e01dee300b0096a0c3cfcdb31f215e43ea09761c901757d4e3c0a7417f48f73d6ef5461b664cf2275d91a9083ae5ef0ec5c04057347206"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x16}}]})

8.666416134s ago: executing program 5 (id=1509):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
close(0xffffffffffffffff)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8)
lseek(r2, 0xc, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40)
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="08002cbd7000fddbdf25260000000c00990001000000510000000800a10006000000050018012e0000000a004f00ffffffffffff0000e6002a0008a6fba0cf5030dad31c0a1881567ed60094f4db79a639d15ddaa070c92b3c33dfe5a3a928f6d63b94dc437d55aebde383ba705fc9827698a6a91485b1d90098af2df710bf4719d341a882f8c34d906eedbb4b76cde79be5fac44c77c0820ab5f1ef42cf0a2f1a35d7ecab651b642eeb2da1cca8bcbcdf34f847ad5571d9d44187db2037fbbd546e571f13d39a4c0de1ba5ffaa483491bc42406cf21c315ffdad10201bd14c546dc26110507fb26f77535277dc73cad4b74c2217303010d0106608c36a4858b2d1a00030fffffff7f000000000100b0001c0000000600060000000700004200f2001effacab8687c3cd74aeb35ee2cf574f53097a03e8afaead5715c4bd3d69df637e7bab7513ef2aafa7379afe069a5c4a377f7103882be311a0a32dad649800000400d000dd002a00266d080140d013c90e62536d678db3f7379b836bbdcc6f4c81873cdf4e94758c69a8d792f9fed97ffbe35274ed3dfedb55a2b66412f55f628a7caab3686fc412b4a42147b39258967ab60109366c40825e11e55ed538fbd7be38ccd28dd77289273ab3f96efabfb8826f674f0ee93abd06ffffffffffff3760090277c559ffa44aab894ebdfb0b3ec4f53ae7226ecf073297abe3724b2a551786fb9aab35830f5338574662c1b35ee76b34878d2c3e7ca42103b5a7a08d62a036d34d4dc53e7a63fc0388a6320d757f525d030224a3d9dbd572f363f37b11d20000000800420002000000"], 0x254}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xdb2, 0x7, 0x7})
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac010000100000012dbd7000ffdbdf25fe800000000000000000000000000021fe8000000000000000000000000000aa4e2300004e21", @ANYRES32, @ANYBLOB="ac1e0001000000000000000000000000000004d32b000000e000000200000000000000000000000000100000000000000d00000000000000edc730070000000003000000000000000600000000000000030000000000000084000000000000000200000000000000070000000000000006000000000000000400000000000000030000000000000001000000ffffffff040000002dbd7000003500000a0004012100000000000000aa0001007467723132382d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010030000a9"], 0x1ac}, 0x1, 0x0, 0x0, 0x4814}, 0x80)
fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x39, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x9af, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x20}}}, &(0x7f0000000440))
fcntl$getownex(r2, 0x10, &(0x7f0000000480)={0x0, <r8=>0x0})
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f00000004c0)={r7, 0xffff, 0x0, 0x0, r8})
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r6, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x5})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0, 0x6}}, 0x6, 0x2, 0x400, 0x2005, 0x2da, 0x94, 0xfe}, 0x9c)

8.559057567s ago: executing program 0 (id=1510):
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x29, @remote, 0x1}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000240)="e5", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x206, 0x3, 0x80000001, 0xa00, 0x401}, 0x14)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0xa, 0xf, 0x106)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000180)=0x33)

7.799509874s ago: executing program 2 (id=1511):
ioprio_set$pid(0x2, 0x0, 0x6000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x6, 0x36, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
fcntl$getownex(r4, 0x10, 0x0)
getpgrp(0x0)
accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)

7.606069678s ago: executing program 3 (id=1512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
keyctl$clear(0x3, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f00000001c0)=0x8001, 0x4)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x6e20, @empty}, 0x10)
syz_emit_ethernet(0x8b, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@generic={0x3, "dc4ab6920de606cf129d738462fb121453349656aab00532e0de7e320a286885eebbe239d296fcf4c942ad43cebade152d6931464cae59725240b3ca4b1756bfb6692a4f10f84cf554c9cc60d1fe581b2310aafdf800f17c9e404956a71a6b31aa5a238d680b1d9a0e37379d04f7a0e478e789e2b8852843334478a592"}}}, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="480000001500190a20ffff7fffffff560211f638a6af7d64a857030491720000de213ee23ffbf510040041feff5aff2b0000000000000700", 0x38}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2)

7.386848293s ago: executing program 5 (id=1513):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000ffffff"], 0x50)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8c0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e0138", 0x33}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d058050639", 0x99}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a", 0x1d}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5.993628765s ago: executing program 3 (id=1514):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
close(0xffffffffffffffff)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8)
lseek(r2, 0xc, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40)
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac010000100000012dbd7000ffdbdf25fe800000000000000000000000000021fe8000000000000000000000000000aa4e2300004e21", @ANYRES32, @ANYBLOB="ac1e0001000000000000000000000000000004d32b000000e000000200000000000000000000000000100000000000000d00000000000000edc730070000000003000000000000000600000000000000030000000000000084000000000000000200000000000000070000000000000006000000000000000400000000000000030000000000000001000000ffffffff040000002dbd7000003500000a0004012100000000000000aa0001007467723132382d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010030000a9"], 0x1ac}, 0x1, 0x0, 0x0, 0x4814}, 0x80)
fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x39, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x9af, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x20}}}, &(0x7f0000000440))
fcntl$getownex(r2, 0x10, &(0x7f0000000480)={0x0, <r8=>0x0})
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f00000004c0)={r7, 0xffff, 0x0, 0x0, r8})
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r6, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x5})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0, 0x6}}, 0x6, 0x2, 0x400, 0x2005, 0x2da, 0x94, 0xfe}, 0x9c)

5.929696726s ago: executing program 5 (id=1515):
syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
listen(r3, 0xa1)
shutdown(r3, 0x1)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, &(0x7f0000000100))
ioctl$KDSETLED(r4, 0x4b32, 0x8)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0xd)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
timerfd_create(0x8, 0x800)
dup(0xffffffffffffffff)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

5.74712232s ago: executing program 4 (id=1516):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
chdir(&(0x7f0000000240)='./file0\x00')
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0), 0x26, 0x75d, &(0x7f0000000bc0)="$eJzs3M1rHGUYAPBnptmmH9GNIPhxEKGFFko3SXNpT40Xb4VCwWsNySSETLIlu6ndWDD1LNTmUkEQ9ezRgxeh1D/AmxQUvAuiNR7Ey8psNimN2XTbJN2S/H4wO+87X8/zdIe3O5B3Ajiw3i4+koiBiLgcEeX29jQiDrdaRyKW145bfXhzoliSaDav/JEUp8Vqs7xxrWRtdaj4WI6I1yPifinizMf/j1trLM2O53m20O4P1eeuDdUaS2dn5sans+lsfmT0wvD50dHzw6NPrOG1Lms9+d6Fo3d+fHdl5adv67ff6jubxFir7mjX1uVlnsrav0kpxjZtn9+LYD2U9DoBAAC6krZ/sPe1fqWW41CrBQAAAOwnzf4mAAAAsO8l0esMAAAAgL21/ncA63N792oebCe/vxMRg1vF72vNIY44EqWIOLaaPDYzIVk7DXZk+VZE3BvbfP99Xdxhyzu89vCm/uNzpA/v8OrshnvF+DO21fiTbow/scX407f+7oQd6jz+PYp/qMP4d7nLGN9/8UapY/xbEW/2bRU/2YifdIj/fpfxb698cqfTvuZXEae2/P8neSzWNu+HGJuaybd9/cD9f08/2K7+Y53iJ9vXf63L+j9c/Wu201hSxD99IiJpV7DV979V/OKe+LSdRxoRd9rror+yKcaJuZ9/2K7+yYjms3z/X3ZZ/6/f9N/o8lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSSNiIJK0stFO00ol4nhEvBrH0rxaq5+Zqi7OTxb7IgajlE7N5NlwRJTX+knRH2m1H/XPbeqPRsQrvxxdCzqTZ5WJaj7Z6+IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYcDwiBiJJKxGRRsTf5TStVCL6uji3/znkBwAAAOySwV4nAAAAAOw5z/8AAACw/z3r83+yy3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+9rlS5eKpbn68OZE0Z+83licrV4/O5nVZitzixOVierd7yrT1ep0nlUmqnNPul5erV4buRCLN4bqWa0+VGssXZ2rLs7Xr87MjU9nV7PSc6kKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApzXQWpK0EhFpq52mlUrESxExGKVkaibPhiPi5Yh4UC71F/2RXicNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqs1lmbH8zxbOKCNIy9GGhoHrPFRRLwAaWzT6PXIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAL9QaS7PjeZ4t1HqdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL2V/pZERLGcKp8c2Lz3cPJPubWOiA8+v3L3xni9vjBSbP9zY3v9s/b2c73IHwAAAA6Ei09z8Ppz+vpzPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLdqjaXZ8TzPFnbWuBiNpWbS4Zhe1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyb/wIAAP//Dh3BwA==")
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf}, 0x20)
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
pidfd_getfd(r6, r7, 0x0)
setresuid(0x0, 0xee00, 0x0)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb)

5.216914632s ago: executing program 3 (id=1517):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x10003}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8)
socketpair(0x1, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0)
ioctl$I2C_PEC(r2, 0x703, 0x60)
accept4$alg(r0, 0x0, 0x0, 0x80000)
fcntl$notify(0xffffffffffffffff, 0x402, 0x44)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='source', 0x0, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1c1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r5)
socket$kcm(0xa, 0x1, 0x106)
r6 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf909, 0x100, 0x0, 0x267}, &(0x7f0000000080), &(0x7f0000000900), 0x0)
io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000005c0)={0x4, 0xb41c123729b295ba, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/139, 0x8b}, {0x0}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000100)=""/60, 0x3c}], 0x0}, 0x20)

4.258594964s ago: executing program 4 (id=1518):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000340301000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020)
mknod$loop(&(0x7f0000000000)='./file1\x00', 0x200, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x81)
link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file2\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002", @ANYBLOB], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000340)="ee", 0x0, 0x2}, 0x20)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28)
sendto$inet6(r3, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0)

3.867990522s ago: executing program 2 (id=1519):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r4 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRES32, @ANYBLOB="00ff0f00000000000000000100000023ecd2e4f16c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$OCFS2_IOC_UNRESVSP64(r5, 0x4030582b, &(0x7f0000000040)={0x0, 0x1, 0x100000001, 0x7, 0xfffffff9, 0xffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = memfd_create(&(0x7f0000000840)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000023f800", @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf250200000008000300", @ANYRES32=r9, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
fallocate(r6, 0x0, 0xb, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)

3.072433211s ago: executing program 4 (id=1520):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913)
getsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

3.005511462s ago: executing program 0 (id=1521):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x18, 0x3)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8, @ANYBLOB="2c01f49618a1baa50f8c44df718e331f315e83cb9b8e9620e8a95c725263b962dc668d2619b96d85570f97c9ce8ecb2a0a490f5ae9c231d58bbc0d18006ae03f3b8319fe992dee5c1662f0037a054ae3f5b09189bc8c12c2c240694ef0d4289ca704b496fd3884b267c61bab7768d2b8b69f509c10", @ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYBLOB="5645f0cfc264744c409479736a299889e4449ed514c861123c2666b6aaeee3061594329ac3bc099b0c706bd2345210375e8f5db7cfef3466c583e4b178962055eb404f2c874e1432ed0cde45e720409242d61eef0e52d2aff02cd4bff9d31eaa1a34f210aa7ab2b9a7ed30113a18a32d979bf7221e6a54455e3a0bd69b38febfff6bd4d1e3cd7c819408"], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20)
truncate(&(0x7f0000000100)='./file1\x00', 0x4)
syz_io_uring_complete(0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"})

2.732276768s ago: executing program 5 (id=1522):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000000100000000000001"], 0x30}], 0x1, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xffffff7ffffffffd, 0x0, 0x6, 0x2, 0x5, 0x2, 0x5}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r8, r9, 0x7, 0x0, @val=@tcx={@void, @value=r8}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x4}, 0x5)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

143.427327ms ago: executing program 5 (id=1523):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
close(0xffffffffffffffff)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8)
lseek(r2, 0xc, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40)
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xdb2, 0x7, 0x7})
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4814}, 0x80)
fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x39, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x9af, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x20}}}, &(0x7f0000000440))
fcntl$getownex(r2, 0x10, &(0x7f0000000480)={0x0, <r8=>0x0})
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f00000004c0)={r7, 0xffff, 0x0, 0x0, r8})
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r6, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x5})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0, 0x6}}, 0x6, 0x2, 0x400, 0x2005, 0x2da, 0x94, 0xfe}, 0x9c)

105.803558ms ago: executing program 3 (id=1524):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xa000, 0xeeee0000, 0x3, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80, 0x4}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x58001, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0x1, 0xf, 0x3, 0x16, 0x7, 0x3, 0x8, 0x9, 0x6, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0x8, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0xeeee0000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x8, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0xffff1000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]})
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@cgroup=r5, r4, 0x2f, 0x2008, 0x4}, 0x20)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

63.777118ms ago: executing program 0 (id=1525):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in=@local}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014)
r4 = socket$netlink(0x10, 0x3, 0x4)
unshare(0x20000400)
ioprio_set$pid(0x2, 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c)
ioctl$UI_SET_RELBIT(r7, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1)
ioctl$UI_DEV_CREATE(r7, 0x5501)
lseek(r7, 0x5, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=1526):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000ffffff"], 0x50)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8c0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e0138", 0x33}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d058050639", 0x99}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a", 0x1d}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

nknown em28xx chip ID (0)
[  223.872926][ T5456] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  223.892547][ T5456] em28xx 2-1:0.0: board has no eeprom
[  223.981899][ T5456] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  223.991097][ T5456] em28xx 2-1:0.0: dvb set to bulk mode.
[  224.002479][ T5456] usb 2-1: USB disconnect, device number 6
[  224.009509][   T41] em28xx 2-1:0.0: Binding DVB extension
[  224.021538][ T5456] em28xx 2-1:0.0: Disconnecting em28xx
[  224.089855][ T4353] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  224.123085][   T41] em28xx 2-1:0.0: Registering input extension
[  224.134714][ T5456] em28xx 2-1:0.0: Closing input extension
[  224.190664][ T5456] em28xx 2-1:0.0: Freeing device
[  224.259882][ T4283] Bluetooth: hci0: Opcode 0x0c3a failed: -110
[  224.267248][ T4274] Bluetooth: hci0: command 0x0c3a tx timeout
[  224.299812][ T4353] usb 4-1: Using ep0 maxpacket: 8
[  224.307659][ T4353] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  224.317265][ T4353] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  224.328922][ T4353] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  224.340702][ T4353] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  224.351579][ T4353] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  224.365670][ T4353] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  224.375411][ T4353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.601990][ T4353] usb 4-1: usb_control_msg returned -32
[  224.611327][ T4353] usbtmc 4-1:16.0: can't read capabilities
[  224.727627][ T5845] loop4: detected capacity change from 0 to 40427
[  224.759877][ T5845] F2FS-fs (loop4): invalid crc value
[  224.781607][ T5845] F2FS-fs (loop4): Found nat_bits in checkpoint
[  224.895046][ T5845] F2FS-fs (loop4): Start checkpoint disabled!
[  224.934247][ T5845] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  225.009138][   T26] audit: type=1800 audit(1783446353.101:5): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.428" name="file1" dev="loop4" ino=10 res=0 errno=0
[  225.245223][ T5735] kworker/u4:17: attempt to access beyond end of device
[  225.245223][ T5735] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  225.296300][ T5735] kworker/u4:17: attempt to access beyond end of device
[  225.296300][ T5735] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  225.395419][ T5735] Bluetooth: (null): Invalid header checksum
[  225.406250][ T5865] usbtmc 4-1:16.0: usb_control_msg returned -32
[  225.411556][ T5735] Bluetooth: (null): Invalid header checksum
[  225.501256][ T4446] Bluetooth: (null): Invalid header checksum
[  225.560103][ T4353] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  225.594559][ T5869] loop2: detected capacity change from 0 to 512
[  225.615868][ T4325] Bluetooth: (null): Invalid header checksum
[  225.624886][ T4321] usb 4-1: USB disconnect, device number 9
[  225.669463][ T5869] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.2.436: corrupted xattr block 95
[  225.701253][ T5869] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.436: bg 0: block 7: invalid block bitmap
[  225.720361][ T5735] Bluetooth: (null): Invalid header checksum
[  225.730018][ T5869] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  225.751809][ T4353] usb 1-1: config 0 has no interfaces?
[  225.758301][ T5869] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2918: inode #11: comm syz.2.436: corrupted xattr block 95
[  225.771004][ T4353] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  225.771036][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.783722][ T4353] usb 1-1: config 0 descriptor??
[  225.831716][ T4446] Bluetooth: (null): Invalid header checksum
[  225.839818][ T4323] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  225.850555][ T5869] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117)
[  225.860890][ T5869] EXT4-fs (loop2): 1 orphan inode deleted
[  225.866925][ T5869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  225.925792][   T26] audit: type=1800 audit(1783446354.021:6): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.436" name="file1" dev="loop2" ino=15 res=0 errno=0
[  225.953911][ T4433] Bluetooth: (null): Invalid header checksum
[  225.983022][   T26] audit: type=1800 audit(1783446354.061:7): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.436" name="file1" dev="loop2" ino=15 res=0 errno=0
[  226.012757][ T4353] usb 1-1: USB disconnect, device number 7
[  226.040042][ T4323] usb 2-1: Using ep0 maxpacket: 16
[  226.048779][ T4323] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  226.067066][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  226.076254][ T4323] usb 2-1: config 1 has no interface number 0
[  226.083143][ T4323] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  226.104384][   T39] wlan0: Trigger new scan to find an IBSS to join
[  226.119897][ T4323] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  226.149991][ T4323] usb 2-1: config 1 interface 105 has no altsetting 0
[  226.180155][ T4323] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  226.220640][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  226.229406][ T4323] usb 2-1: Product: syz
[  226.264541][ T4323] usb 2-1: Manufacturer: syz
[  226.269260][ T4323] usb 2-1: SerialNumber: syz
[  226.304288][ T5868] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  226.314260][ T5875] loop2: detected capacity change from 0 to 512
[  226.320287][ T5868] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  226.427882][ T5875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  227.052411][ T5868] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  227.100346][ T5868] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  227.308480][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  227.409263][ T5873] loop4: detected capacity change from 0 to 40427
[  227.438661][ T5873] F2FS-fs (loop4): invalid crc value
[  227.493187][ T5873] F2FS-fs (loop4): Found nat_bits in checkpoint
[  227.559278][ T4323] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  227.596854][ T4323] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  227.634898][ T5873] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  227.708096][ T4323] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a2:55:1e:74:13:ad
[  227.918163][ T4321] usb 2-1: USB disconnect, device number 7
[  227.927792][ T4321] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  227.950184][ T4286] syz-executor: attempt to access beyond end of device
[  227.950184][ T4286] loop4: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  228.025929][ T4321] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  228.068723][ T4321] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  228.109185][ T4321] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  228.158035][ T5898] kvm [5897]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2
[  228.314095][ T5906] fuse: root generation should be zero
[  228.707327][ T5908] kvm [5907]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[  229.140243][   T46] wlan0: Trigger new scan to find an IBSS to join
[  229.147494][   T11] wlan0: Trigger new scan to find an IBSS to join
[  229.408953][ T5914] sctp: failed to load transform for md5: -2
[  230.192145][ T4994] wlan0: Creating new IBSS network, BSSID 6a:c6:8f:4b:13:34
[  231.130506][ T5951] loop0: detected capacity change from 0 to 164
[  231.219967][ T5219] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  231.252299][ T5951] Unsupported NM flag settings (240)
[  231.345206][ T5953] loop2: detected capacity change from 0 to 128
[  231.425368][ T5953] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  231.455601][ T5219] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  231.473254][ T5953] hpfs: filesystem error: improperly stopped
[  231.495094][ T4272] Unsupported NM flag settings (240)
[  231.505713][ T5219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.516470][ T4272] Unsupported NM flag settings (240)
[  231.522384][ T5953] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  231.525072][ T5219] usb 2-1: Product: syz
[  231.534686][ T4272] Unsupported NM flag settings (240)
[  231.559901][ T5953] hpfs: You really don't want any checks? You are crazy...
[  231.567345][ T5953] hpfs: Code page index out of array
[  231.574354][ T4272] Unsupported NM flag settings (240)
[  231.596070][ T5219] usb 2-1: Manufacturer: syz
[  231.600284][ T4272] Unsupported NM flag settings (240)
[  231.607334][ T5219] usb 2-1: SerialNumber: syz
[  231.613704][ T4272] Unsupported NM flag settings (240)
[  231.634952][ T4272] Unsupported NM flag settings (240)
[  231.643027][ T5953] hpfs: code page support is disabled
[  231.671881][ T4272] Unsupported NM flag settings (240)
[  231.679897][ T5953] hpfs: hpfs_map_4sectors(): unaligned read
[  231.686804][ T5953] hpfs: hpfs_map_4sectors(): unaligned read
[  231.770461][ T5953] hpfs: filesystem error: unable to find root dir
[  231.804392][  T125] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  232.052048][  T125] usb 5-1: unable to get BOS descriptor or descriptor too short
[  232.256446][  T125] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.584068][  T125] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  232.816120][  T125] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  233.179026][ T4994] wlan0: Trigger new scan to find an IBSS to join
[  233.194200][ T4435] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  233.305318][ T5219] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  233.365629][  T125] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  233.444766][ T5219] usb 2-1: unit 3 not found!
[  233.620807][  T125] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  233.815615][  T125] usb 5-1: config 1 interface 1 has no altsetting 0
[  233.975744][  T125] usb 5-1: string descriptor 0 read error: -22
[  234.124333][  T125] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  234.237789][ T5219] usb 2-1: USB disconnect, device number 8
[  234.281367][  T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.866345][   T56] wlan0: Creating new IBSS network, BSSID 96:6f:6d:09:7c:b3
[  234.916142][  T125] usb 5-1: can't set config #1, error -71
[  234.962356][  T125] usb 5-1: USB disconnect, device number 11
[  234.989836][ T5223] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  234.999772][    C0] raw-gadget.2 gadget.0: ignoring, device is not running
[  235.070852][ T5711] udevd[5711]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.271568][ T5976] input: syz0 as /devices/virtual/input/input19
[  235.301310][ T5976] input: failed to attach handler leds to device input19, error: -6
[  236.171120][ T6001] loop2: detected capacity change from 0 to 164
[  236.257484][ T5772] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  236.369857][ T4353] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  236.559966][ T4353] usb 1-1: Using ep0 maxpacket: 32
[  236.569077][ T4353] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  236.620501][ T4353] usb 1-1: config 0 has no interface number 0
[  236.626688][ T4353] usb 1-1: config 0 interface 184 has no altsetting 0
[  236.678253][ T4353] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  236.719861][ T4353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.773728][ T4353] usb 1-1: Product: syz
[  236.781983][ T4353] usb 1-1: Manufacturer: syz
[  236.789553][ T4353] usb 1-1: SerialNumber: syz
[  236.885984][ T4353] usb 1-1: config 0 descriptor??
[  236.942978][ T4353] smsc75xx v1.0.0
[  237.915230][ T6022] loop1: detected capacity change from 0 to 4096
[  238.043446][ T6022] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  238.234264][ T6029] loop2: detected capacity change from 0 to 256
[  238.257578][ T4353] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[  238.303047][ T4353] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  238.352432][ T4353] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  238.436810][ T4353] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  238.519825][ T4353] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  238.584657][ T4353] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  238.622804][ T4353] smsc75xx: probe of 1-1:0.184 failed with error -71
[  238.678246][ T4353] usb 1-1: USB disconnect, device number 9
[  241.140314][ T4435] wlan0: Trigger new scan to find an IBSS to join
[  241.191016][ T6059] device syzkaller0 entered promiscuous mode
[  241.405775][ T5212] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  241.598002][ T6072] netlink: 68 bytes leftover after parsing attributes in process `syz.2.495'.
[  241.618379][ T6048] loop1: detected capacity change from 0 to 40427
[  241.625076][ T5212] usb 1-1: Using ep0 maxpacket: 32
[  241.644501][ T5212] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  241.657748][ T6048] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[  241.675281][ T5212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.698956][ T6048] F2FS-fs (loop1): invalid crc value
[  241.714707][ T5212] usb 1-1: Product: syz
[  241.721937][ T5212] usb 1-1: Manufacturer: syz
[  241.727387][ T5212] usb 1-1: SerialNumber: syz
[  241.731700][ T6048] F2FS-fs (loop1): Found nat_bits in checkpoint
[  241.748332][ T5212] usb 1-1: config 0 descriptor??
[  241.769349][ T5212] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  241.790040][   T41] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  241.846526][ T6048] F2FS-fs (loop1): recover fsync data on readonly fs
[  241.856023][ T6048] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  241.864162][ T6048] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  241.877178][ T6048] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  241.889077][ T5212] usb 1-1: Found UVC 0.00 device syz (0d49:7000)
[  241.912402][ T5212] usb 1-1: No valid video chain found.
[  241.985742][   T41] usb 4-1: Using ep0 maxpacket: 32
[  241.997904][   T41] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  242.042472][   T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.070220][   T41] usb 4-1: Product: syz
[  242.080028][   T41] usb 4-1: Manufacturer: syz
[  242.093489][   T41] usb 4-1: SerialNumber: syz
[  242.109041][   T41] usb 4-1: config 0 descriptor??
[  242.151097][   T41] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  242.176961][ T6079] random: crng reseeded on system resumption
[  243.563497][ T6087] overlayfs: failed to clone upperpath
[  243.664796][   T41] gspca_ov534_9: reg_r err -71
[  244.039992][   T41] gspca_ov534_9: Unknown sensor 0000
[  244.040465][   T41] ov534_9: probe of 4-1:0.0 failed with error -22
[  244.072765][   T41] usb 4-1: USB disconnect, device number 10
[  244.319378][ T4353] usb 1-1: USB disconnect, device number 10
[  245.062587][ T4340] wlan0: Trigger new scan to find an IBSS to join
[  246.310651][ T5735] wlan0: Trigger new scan to find an IBSS to join
[  247.631748][ T4435] wlan0: Creating new IBSS network, BSSID 5a:59:04:8d:f1:86
[  247.685793][ T6125] overlayfs: failed to get inode (-116)
[  247.695585][ T6125] overlayfs: failed to get inode (-116)
[  247.963077][ T6132] loop1: detected capacity change from 0 to 1024
[  247.992339][ T6132] EXT4-fs: Ignoring removed orlov option
[  248.437768][ T6132] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  249.160202][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  249.285535][   T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  249.322153][ T6154] overlayfs: failed to clone upperpath
[  250.029237][ T6160] tmpfs: Unknown parameter ''
[  251.460351][ T4334] wlan0: Trigger new scan to find an IBSS to join
[  252.516030][ T4325] wlan0: Creating new IBSS network, BSSID 4a:06:6e:b7:f3:3b
[  253.070905][   T46] wlan0: Trigger new scan to find an IBSS to join
[  255.489801][ T5222] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  255.761789][ T6192] sched: RT throttling activated
[  256.187880][ T4735] wlan0: Trigger new scan to find an IBSS to join
[  256.463195][ T5222] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  256.528379][ T5222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.561305][ T5222] usb 1-1: Product: syz
[  256.581891][ T5222] usb 1-1: Manufacturer: syz
[  256.601913][ T5222] usb 1-1: SerialNumber: syz
[  256.644383][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  257.143201][ T4340] wlan0: Creating new IBSS network, BSSID 4e:61:22:03:8e:55
[  257.272389][ T6209] fuse: Bad value for 'fd'
[  257.927005][ T5222] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  257.998350][ T5222] usb 1-1: unit 3 not found!
[  258.047209][ T6217] device syzkaller1 entered promiscuous mode
[  258.072652][ T5222] usb 1-1: USB disconnect, device number 11
[  258.121564][ T6219] KVM: debugfs: duplicate directory 6219-4
[  258.360912][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  260.222503][ T5115] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  261.062328][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  261.069903][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  263.081596][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'.
[  263.405931][ T6270] loop0: detected capacity change from 0 to 1024
[  263.439381][ T6270] EXT4-fs: Ignoring removed bh option
[  263.597810][ T6270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  263.750659][   T26] audit: type=1800 audit(1783446391.841:8): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.560" name="file1" dev="loop0" ino=15 res=0 errno=0
[  264.036743][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  264.845990][ T6297] team0: Port device syz_tun added
[  264.962555][ T6305] fuse: Bad value for 'fd'
[  264.981995][ T6305] fuse: Bad value for 'fd'
[  265.141332][ T5735] wlan0: Trigger new scan to find an IBSS to join
[  265.147985][ T6311] loop3: detected capacity change from 0 to 256
[  266.208027][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'.
[  266.736945][ T6337] overlayfs: failed to clone upperpath
[  266.748245][ T6337] overlayfs: failed to clone lowerpath
[  268.540180][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'.
[  268.784485][ T6349] loop2: detected capacity change from 0 to 32768
[  269.038475][ T6349] XFS (loop2): Mounting V5 Filesystem
[  269.171886][ T6349] XFS (loop2): Ending clean mount
[  269.279918][ T5219] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  269.469942][ T5219] usb 4-1: Using ep0 maxpacket: 32
[  269.484099][ T5219] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  269.548207][ T5219] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  269.609338][ T5219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.635346][ T5219] usb 4-1: Product: syz
[  269.656733][ T5219] usb 4-1: Manufacturer: syz
[  269.667119][ T5219] usb 4-1: SerialNumber: syz
[  269.702081][ T5219] usb 4-1: config 0 descriptor??
[  269.719387][ T6369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  269.727945][ T4275] XFS (loop2): Unmounting Filesystem
[  270.100183][ T5735] wlan0: Trigger new scan to find an IBSS to join
[  270.559146][ T5219] usb 4-1: USB disconnect, device number 11
[  270.825635][ T6387] loop0: detected capacity change from 0 to 1024
[  270.842854][ T6387] EXT4-fs: Ignoring removed orlov option
[  270.869409][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'.
[  270.996721][ T6387] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  271.029376][ T6244] wlan0: Creating new IBSS network, BSSID aa:0f:22:60:65:19
[  271.510256][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  271.788787][ T6403] loop3: detected capacity change from 0 to 512
[  271.847588][ T6403] EXT4-fs: Ignoring removed orlov option
[  271.883643][ T6403] EXT4-fs: Ignoring removed mblk_io_submit option
[  271.965089][ T6403] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.604: corrupted in-inode xattr
[  272.058390][ T6403] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.604: couldn't read orphan inode 15 (err -117)
[  272.151302][ T6403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  272.526980][ T6416] netlink: 2 bytes leftover after parsing attributes in process `syz.0.609'.
[  272.602212][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  272.846074][ T6420] tmpfs: Unknown parameter 'quota'
[  274.765650][ T4353] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  274.965368][ T4353] usb 4-1: Using ep0 maxpacket: 8
[  274.991923][ T4353] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  275.031219][ T4353] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  275.091671][ T4353] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  275.135217][ T4353] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  275.183066][ T4353] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  275.221339][ T4353] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  275.242433][ T4353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.588933][ T4353] usb 4-1: usb_control_msg returned -32
[  275.595372][ T4353] usbtmc 4-1:16.0: can't read capabilities
[  276.254580][ T6450] loop1: detected capacity change from 0 to 128
[  276.262160][ T6451] loop0: detected capacity change from 0 to 64
[  276.341712][ T6450] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  276.394820][ T6450] hpfs: filesystem error: improperly stopped
[  276.431386][ T6450] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  276.470446][ T6450] hpfs: You really don't want any checks? You are crazy...
[  276.498609][ T6450] hpfs: Code page index out of array
[  276.525167][ T6454] netlink: 'syz.2.623': attribute type 1 has an invalid length.
[  276.540339][ T6450] hpfs: code page support is disabled
[  276.548457][ T6450] hpfs: hpfs_map_4sectors(): unaligned read
[  276.578457][ T6450] hpfs: hpfs_map_4sectors(): unaligned read
[  276.588887][ T6450] hpfs: filesystem error: unable to find root dir
[  276.594491][ T6454] device bond1 entered promiscuous mode
[  276.653040][ T6454] 8021q: adding VLAN 0 to HW filter on device bond1
[  276.781731][ T6458] usbtmc 4-1:16.0: usb_control_msg returned -32
[  276.913971][ T6457] 8021q: adding VLAN 0 to HW filter on device bond1
[  276.925647][ T4323] usb 4-1: USB disconnect, device number 12
[  276.970609][ T6457] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  276.998922][ T6457] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  277.018082][ T6457] bond1: (slave ip6gre1): making interface the new active one
[  277.026631][ T6457] device ip6gre1 entered promiscuous mode
[  277.091023][ T6457] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  277.124751][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  278.101048][   T46] wlan0: Trigger new scan to find an IBSS to join
[  278.287113][ T6481] overlayfs: failed to clone upperpath
[  279.179990][ T5212] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  279.359789][ T5212] usb 3-1: Using ep0 maxpacket: 8
[  279.374062][ T5212] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  279.390471][ T5212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.407475][ T5212] usb 3-1: Product: syz
[  279.425026][ T5212] usb 3-1: Manufacturer: syz
[  279.451524][ T5212] usb 3-1: SerialNumber: syz
[  279.470848][ T5212] usb 3-1: config 0 descriptor??
[  279.683246][ T5212] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  279.977380][ T6513] loop3: detected capacity change from 0 to 4096
[  280.009647][ T6513] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  280.095237][ T6513] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  280.120439][ T5212] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  280.146347][ T5212] usb 3-1: USB disconnect, device number 10
[  282.100203][ T4433] wlan0: Trigger new scan to find an IBSS to join
[  282.324305][ T6537] loop0: detected capacity change from 0 to 512
[  282.563992][ T4432] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  282.660887][ T6537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  282.755800][ T6537] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  283.139879][ T4340] wlan0: Trigger new scan to find an IBSS to join
[  283.729646][ T6537] Quota error (device loop0): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[  283.836157][ T6537] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  283.953764][ T6537] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.654: Failed to acquire dquot type 0
[  284.124995][ T6543] loop2: detected capacity change from 0 to 256
[  284.159207][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  284.175716][ T6543] FAT-fs (loop2): Directory bread(block 64) failed
[  284.203687][ T6543] FAT-fs (loop2): Directory bread(block 65) failed
[  284.211680][ T6543] FAT-fs (loop2): Directory bread(block 66) failed
[  284.219063][ T6543] FAT-fs (loop2): Directory bread(block 67) failed
[  284.238428][ T6543] FAT-fs (loop2): Directory bread(block 68) failed
[  284.260658][ T6543] FAT-fs (loop2): Directory bread(block 69) failed
[  284.267365][ T6543] FAT-fs (loop2): Directory bread(block 70) failed
[  284.301601][ T6543] FAT-fs (loop2): Directory bread(block 71) failed
[  284.328750][ T6543] FAT-fs (loop2): Directory bread(block 72) failed
[  284.375540][ T6543] FAT-fs (loop2): Directory bread(block 73) failed
[  284.503039][ T6543] syz.2.655: attempt to access beyond end of device
[  284.503039][ T6543] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  284.527866][ T6543] syz.2.655: attempt to access beyond end of device
[  284.527866][ T6543] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256
[  284.551928][   T26] audit: type=1800 audit(1783446412.651:9): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.655" name="file0" dev="loop2" ino=1048602 res=0 errno=0
[  285.993722][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'.
[  286.050622][   T26] audit: type=1326 audit(1783446414.141:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.2.665" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f690119de59 code=0x0
[  286.581332][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'.
[  287.663165][ T6602] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer.
[  287.725653][ T6607] loop2: detected capacity change from 0 to 512
[  287.752199][ T6607] EXT4-fs: Ignoring removed i_version option
[  287.793804][ T6607] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  287.915628][ T6607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  287.926469][ T6607] ext4 filesystem being mounted at /139/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.014323][ T6607] EXT4-fs error (device loop2): ext4_dx_csum_verify:502: inode #2: comm syz.2.679: dir seems corrupt?  Run e2fsck -D.
[  288.049040][ T6607] EXT4-fs (loop2): Remounting filesystem read-only
[  288.056271][ T6607] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.679: Directory index failed checksum
[  288.069767][ T6607] EXT4-fs (loop2): Remounting filesystem read-only
[  288.100491][ T4735] wlan0: Trigger new scan to find an IBSS to join
[  288.147111][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  288.980373][ T5456] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  289.036839][ T4735] wlan0: Creating new IBSS network, BSSID 22:81:4b:25:dd:a0
[  289.177276][ T5456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.211078][ T5456] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  289.234992][ T5456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.274631][ T5456] usb 3-1: config 0 descriptor??
[  289.510665][ T5456] usbhid 3-1:0.0: can't add hid device: -71
[  289.516872][ T5456] usbhid: probe of 3-1:0.0 failed with error -71
[  289.544531][ T5456] usb 3-1: USB disconnect, device number 11
[  290.179971][ T5456] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  290.319844][ T4353] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  290.391731][ T5456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.403561][ T5456] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  290.414473][ T5456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.427096][ T5456] usb 3-1: config 0 descriptor??
[  290.499933][ T4353] usb 1-1: Using ep0 maxpacket: 8
[  290.509116][ T4353] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  290.517885][ T4353] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  290.533129][ T4353] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  290.545124][ T4353] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  290.555727][ T4353] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.569232][ T4353] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  290.578675][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.796677][ T4353] usb 1-1: usb_control_msg returned -32
[  290.810499][ T4353] usbtmc 1-1:16.0: can't read capabilities
[  291.140187][ T4429] wlan0: Trigger new scan to find an IBSS to join
[  291.266538][ T5456] aiptek 3-1:0.0: Aiptek using 400 ms programming speed
[  291.317704][ T6667] tmpfs: Unknown parameter 'quota'
[  291.330141][ T5456] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20
[  291.373942][ T6662] loop3: detected capacity change from 0 to 40427
[  291.420092][ T6662] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  291.456044][ T6662] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  291.481516][ T6662] F2FS-fs (loop3): invalid crc value
[  291.513269][ T6662] F2FS-fs (loop3): Found nat_bits in checkpoint
[  291.681953][ T4353] usb 3-1: USB disconnect, device number 12
[  291.687952][    C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  291.843352][ T6662] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  291.852406][ T6662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  291.990336][ T6676] usbtmc 1-1:16.0: usb_control_msg returned -32
[  292.117585][ T6662] syz.3.702: attempt to access beyond end of device
[  292.117585][ T6662] loop3: rw=34817, sector=77824, nr_sectors = 4096 limit=40427
[  292.135126][ T5212] usb 1-1: USB disconnect, device number 12
[  292.683736][ T4271] syz-executor: attempt to access beyond end of device
[  292.683736][ T4271] loop3: rw=2051, sector=77824, nr_sectors = 4096 limit=40427
[  292.737681][ T4271] F2FS-fs (loop3): Issue discard(9728, 9728, 512) failed, ret: -5
[  292.796695][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.819870][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.828835][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  292.838996][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  292.846815][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  292.858931][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  293.195165][ T6244] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  293.225762][ T4432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.422342][ T4432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.593879][ T6704] tmpfs: Unknown parameter 'quota'
[  293.626288][ T4432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.776872][ T4432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.815481][  T953] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  294.005858][ T6687] chnl_net:caif_netlink_parms(): no params data found
[  294.034383][  T953] usb 3-1: Using ep0 maxpacket: 32
[  294.047404][  T953] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  294.100120][ T6244] wlan0: Trigger new scan to find an IBSS to join
[  294.114640][  T953] usb 3-1: config 0 has no interface number 0
[  294.127206][  T953] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  294.138700][  T953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.153313][  T953] usb 3-1: Product: syz
[  294.157813][  T953] usb 3-1: Manufacturer: syz
[  294.164428][  T953] usb 3-1: SerialNumber: syz
[  294.171863][  T953] usb 3-1: config 0 descriptor??
[  294.222034][  T953] smsc95xx v2.0.0
[  294.409325][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.476234][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.520892][ T6687] device bridge_slave_0 entered promiscuous mode
[  294.634777][  T953] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  294.675074][  T953] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  294.795863][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.807003][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.828806][ T6687] device bridge_slave_1 entered promiscuous mode
[  294.899856][ T4283] Bluetooth: hci3: command 0x0409 tx timeout
[  295.028568][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.116910][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.275456][ T6687] team0: Port device team_slave_0 added
[  295.405114][ T6687] team0: Port device team_slave_1 added
[  295.495201][  T953] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  295.543508][ T6755] tmpfs: Unknown parameter 'quota'
[  296.291707][  T953] smsc95xx: probe of 3-1:0.67 failed with error -71
[  296.394338][  T953] usb 3-1: USB disconnect, device number 13
[  296.407001][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.439914][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.537895][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.850782][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.883950][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.980347][ T4283] Bluetooth: hci3: command 0x041b tx timeout
[  297.072298][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.141704][ T6244] wlan0: Trigger new scan to find an IBSS to join
[  297.504012][ T6777] loop0: detected capacity change from 0 to 256
[  299.059986][ T4283] Bluetooth: hci3: command 0x040f tx timeout
[  299.086849][ T4429] wlan0: Creating new IBSS network, BSSID 7e:2a:a9:ae:d7:4f
[  299.160560][ T6788] fuse: Bad value for 'fd'
[  299.232308][ T6687] device hsr_slave_0 entered promiscuous mode
[  299.280941][ T6687] device hsr_slave_1 entered promiscuous mode
[  299.325283][ T6687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  299.405687][ T6687] Cannot create hsr debugfs directory
[  299.818658][ T6803] tmpfs: Unknown parameter 'quota'
[  300.721151][ T4432] device hsr_slave_0 left promiscuous mode
[  300.755752][ T4432] device hsr_slave_1 left promiscuous mode
[  300.813874][ T4432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.826190][ T4432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.850572][ T4432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.867626][ T4432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.907846][ T4432] device bond1 left promiscuous mode
[  300.943365][ T4432] bridge0: port 3(bond1) entered disabled state
[  300.987952][ T4432] device bridge_slave_1 left promiscuous mode
[  301.008024][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.037724][ T4432] device bridge_slave_0 left promiscuous mode
[  301.048790][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.062339][ T4735] wlan0: Trigger new scan to find an IBSS to join
[  301.139917][ T4283] Bluetooth: hci3: command 0x0419 tx timeout
[  301.192502][ T4432] device veth1_macvtap left promiscuous mode
[  301.228431][ T4432] device veth0_macvtap left promiscuous mode
[  301.235521][ T6826] loop2: detected capacity change from 0 to 16
[  301.249170][ T4432] device veth1_vlan left promiscuous mode
[  301.266836][ T4432] device veth0_vlan left promiscuous mode
[  301.297779][ T6826] erofs: (device loop2): mounted with root inode @ nid 36.
[  301.475292][ T6827] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  302.414330][ T4432] bond1 (unregistering): Released all slaves
[  302.751164][ T6854] loop5: detected capacity change from 0 to 7
[  302.766647][ T5772]  loop5:
[  302.780519][ T5772] loop5: partition table partially beyond EOD, truncated
[  302.823142][ T6854]  loop5:
[  302.826216][ T6854] loop5: partition table partially beyond EOD, truncated
[  303.279751][ T4323] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  303.516293][ T4323] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4
[  303.530048][ T4323] usb 1-1: config 0 interface 0 has no altsetting 0
[  303.569791][ T4323] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  303.595846][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  303.605197][ T4323] usb 1-1: Product: syz
[  303.609831][ T4323] usb 1-1: Manufacturer: syz
[  303.614516][ T4323] usb 1-1: SerialNumber: syz
[  303.629838][ T4323] usb 1-1: config 0 descriptor??
[  303.643307][ T4323] usb 1-1: selecting invalid altsetting 0
[  303.809251][ T4432] team0 (unregistering): Port device team_slave_1 removed
[  303.905340][ T4432] team0 (unregistering): Port device team_slave_0 removed
[  303.996854][ T4323] usb 1-1: USB disconnect, device number 13
[  303.996892][    C0] usb 1-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs
[  304.015425][    C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  304.100651][ T4432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.113654][   T46] wlan0: Trigger new scan to find an IBSS to join
[  304.212703][ T4432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.825971][ T6859] process 'syz.0.757' launched '/dev/fd/7' with NULL argv: empty string added
[  304.903312][ T4432] bond0 (unregistering): Released all slaves
[  305.042581][ T5735] wlan0: Creating new IBSS network, BSSID a6:e3:d5:db:1e:ce
[  306.217767][ T6687] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  306.278166][ T6687] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  306.326390][ T6687] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  306.404804][ T6687] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  307.507720][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.577751][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  307.596198][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  307.647035][ T6893] loop2: detected capacity change from 0 to 128
[  307.661220][ T6687] 8021q: adding VLAN 0 to HW filter on device team0
[  307.689317][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  307.703941][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  307.733994][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.741317][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.781644][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  307.824886][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  307.857103][   T26] audit: type=1800 audit(1783446435.951:11): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.767" name="bus" dev="loop2" ino=1048606 res=0 errno=0
[  307.888467][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  307.916902][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.924309][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.068753][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  308.084816][ T6900] syz.2.767: attempt to access beyond end of device
[  308.084816][ T6900] loop2: rw=2049, sector=497, nr_sectors = 544 limit=128
[  308.109029][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  308.125761][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  308.158695][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  308.259640][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  308.285234][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  308.325641][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  308.398096][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  308.425983][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  308.465714][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  308.500586][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  308.516143][ T6886] loop3: detected capacity change from 0 to 32768
[  308.596669][   T26] audit: type=1800 audit(1783446436.691:12): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.763" name="file1" dev="loop3" ino=4 res=0 errno=0
[  309.142585][ T5735] wlan0: Trigger new scan to find an IBSS to join
[  309.230799][ T6927] random: crng reseeded on system resumption
[  309.666255][ T6932] overlayfs: conflicting lowerdir path
[  309.930109][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  309.938094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  310.015571][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.098811][ T6947] tmpfs: Unknown parameter 'quota'
[  310.287315][ T6920] loop2: detected capacity change from 0 to 32768
[  310.658517][ T6963] tmpfs: Unknown parameter 'quota'
[  312.000191][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.789'.
[  312.093610][ T6991] loop2: detected capacity change from 0 to 256
[  312.102680][ T4432] wlan0: Trigger new scan to find an IBSS to join
[  312.132169][ T6991] exfat: Deprecated parameter 'namecase'
[  312.171199][ T6991] exfat: Deprecated parameter 'utf8'
[  312.264639][ T6991] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  312.470651][ T5735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  312.490870][ T5735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  312.555920][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  312.571779][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  312.606108][ T6687] device veth0_vlan entered promiscuous mode
[  312.623709][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  312.651806][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  312.678130][ T6687] device veth1_vlan entered promiscuous mode
[  312.855174][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  312.880330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  312.945013][ T7010] tmpfs: Unknown parameter 'quota'
[  313.129892][ T5223] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  313.706064][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  313.796460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  313.821671][ T6687] device veth0_macvtap entered promiscuous mode
[  314.042321][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.069238][ T5223] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  314.131128][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.512371][ T6687] device veth1_macvtap entered promiscuous mode
[  314.516484][ T5223] usb 4-1: config 0 descriptor??
[  314.730194][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.752062][ T5223] usbhid 4-1:0.0: can't add hid device: -71
[  314.758140][ T5223] usbhid: probe of 4-1:0.0 failed with error -71
[  314.791988][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.798328][ T5223] usb 4-1: USB disconnect, device number 13
[  314.816823][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.854138][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.915996][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.955833][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.976160][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.998405][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.044042][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.068546][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  315.092358][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  315.120344][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.134389][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.151883][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.163960][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.176493][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.187483][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.197890][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.220300][   T26] audit: type=1326 audit(1783446443.321:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f690119de59 code=0x0
[  315.246136][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.258868][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.268445][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  315.285612][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  315.318409][ T6687] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.333109][ T6687] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.342836][ T6687] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.355493][ T6687] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.479870][ T5081] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  315.588552][ T4735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.614869][ T4735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.664693][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  315.709783][ T5081] usb 4-1: Using ep0 maxpacket: 32
[  315.720040][ T5081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.755283][ T4735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.766989][ T4735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.786387][ T5081] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  315.808409][ T5081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.834821][ T5735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  315.859511][ T5081] usb 4-1: config 0 descriptor??
[  315.898679][ T5081] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  315.980213][ T5081] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  316.404595][ T5081] usb 4-1: USB disconnect, device number 14
[  316.434677][ T5081] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  316.995522][ T7061] syz.0.810 sent an empty control message without MSG_MORE.
[  317.148849][ T4429] wlan0: Trigger new scan to find an IBSS to join
[  319.841780][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'.
[  321.081300][ T7112] loop2: detected capacity change from 0 to 7
[  321.126140][ T5772]  loop2:
[  321.130181][ T5772] loop2: partition table partially beyond EOD, truncated
[  321.171782][ T7112]  loop2:
[  321.175097][ T7112] loop2: partition table partially beyond EOD, truncated
[  322.099949][ T6244] wlan0: Trigger new scan to find an IBSS to join
[  322.603029][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  322.804431][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  323.122443][ T4433] wlan0: Creating new IBSS network, BSSID 86:b0:51:65:24:9f
[  325.060713][    T9] wlan0: Trigger new scan to find an IBSS to join
[  326.349042][ T7202] kvm: emulating exchange as write
[  326.827367][ T5212] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96
[  328.550954][ T7266] loop0: detected capacity change from 0 to 512
[  328.683755][ T7266] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.863: Unrecognised inode hash code 4
[  328.697275][ T7266] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.863: Corrupt directory, running e2fsck is recommended
[  328.713809][ T7266] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  328.724353][ T7266] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.863: corrupted in-inode xattr
[  328.737932][ T7266] EXT4-fs (loop0): Remounting filesystem read-only
[  328.745261][ T7266] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.863: couldn't read orphan inode 15 (err -117)
[  328.760631][ T7266] EXT4-fs (loop0): Remounting filesystem read-only
[  328.767433][ T7266] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  328.816824][ T7266] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.863: Unrecognised inode hash code 4
[  328.859541][ T7266] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.863: Corrupt directory, running e2fsck is recommended
[  328.905468][ T7266] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.863: Unrecognised inode hash code 4
[  328.918854][ T7266] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.863: Corrupt directory, running e2fsck is recommended
[  328.946553][ T7266] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.863: Unrecognised inode hash code 4
[  329.012140][ T7266] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.863: Corrupt directory, running e2fsck is recommended
[  329.048223][ T7277] loop2: detected capacity change from 0 to 1024
[  329.050868][ T7278] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.863: Unrecognised inode hash code 4
[  329.074750][ T7277] EXT4-fs: Ignoring removed bh option
[  329.092445][ T7278] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.863: Corrupt directory, running e2fsck is recommended
[  329.125700][ T7266] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.863: Unrecognised inode hash code 4
[  329.137979][ T6244] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  329.152515][ T7277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  329.172790][ T7266] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.863: Corrupt directory, running e2fsck is recommended
[  329.306191][ T7277] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz.2.866: path /168/control/file0: bad entry in directory: rec_len is too small for name_len - offset=60, inode=14, rec_len=40, size=60 fake=0
[  329.364034][ T7277] EXT4-fs (loop2): Remounting filesystem read-only
[  329.491707][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  329.511411][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  329.959802][  T953] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  330.105197][ T6244] wlan0: Trigger new scan to find an IBSS to join
[  330.711810][  T953] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10
[  330.733266][  T953] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64
[  330.779319][  T953] usb 4-1: config 0 interface 0 has no altsetting 0
[  330.811065][  T953] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  330.835869][  T953] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  330.856331][  T953] usb 4-1: Product: syz
[  330.872890][  T953] usb 4-1: Manufacturer: syz
[  330.885431][  T953] usb 4-1: SerialNumber: syz
[  330.901858][  T953] usb 4-1: config 0 descriptor??
[  330.925832][ T7290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  330.953293][  T953] usb 4-1: selecting invalid altsetting 0
[  331.090007][ T4318] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  331.111050][ T4429] wlan0: Creating new IBSS network, BSSID 22:87:f7:43:f0:64
[  331.172763][ T7290] usb 4-1: BOGUS urb xfer, pipe 0 != type 1
[  331.281928][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.354034][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.383270][ T4318] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  331.402038][ T4318] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  331.416705][ T4318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.455828][ T4318] usb 6-1: config 0 descriptor??
[  331.902339][ T4318] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  331.981471][ T4318] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  332.444321][ T5212] usb 6-1: USB disconnect, device number 2
[  332.593037][ T7318] fido_id[7318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  332.812345][ T4318] usb 4-1: USB disconnect, device number 15
[  333.060164][ T4334] wlan0: Trigger new scan to find an IBSS to join
[  334.943035][ T7323] loop0: detected capacity change from 0 to 32768
[  335.261375][ T7323] XFS (loop0): Mounting V5 Filesystem
[  336.100607][ T6181] wlan0: Trigger new scan to find an IBSS to join
[  337.008053][ T7323] XFS (loop0): Ending clean mount
[  337.263763][ T7323] XFS (loop0): Quotacheck needed: Please wait.
[  337.458230][ T7369] loop2: detected capacity change from 0 to 4096
[  337.524915][ T7369] EXT4-fs (loop2): DAX unsupported by block device.
[  337.545272][ T7323] XFS (loop0): Quotacheck: Done.
[  337.667934][ T4272] XFS (loop0): Unmounting Filesystem
[  337.887042][ T7379] block device autoloading is deprecated and will be removed.
[  338.106567][ T4735] wlan0: Trigger new scan to find an IBSS to join
[  339.059994][    T9] wlan0: Trigger new scan to find an IBSS to join
[  339.076778][ T6244] wlan0: Creating new IBSS network, BSSID 4e:27:4d:dd:e4:15
[  339.366936][ T7409] loop5: detected capacity change from 0 to 64
[  340.056905][   T26] audit: type=1800 audit(1783446468.151:14): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.892" name="file1" dev="fuse" ino=3 res=0 errno=0
[  341.848307][ T7443] printk: syz.2.901 (7443): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[  342.100212][ T4438] wlan0: Trigger new scan to find an IBSS to join
[  342.257987][ T7451] kvm: pic: non byte read
[  342.263734][ T7451] kvm: pic: level sensitive irq not supported
[  342.263891][ T7451] kvm: pic: non byte read
[  342.276076][ T7451] kvm: pic: level sensitive irq not supported
[  342.276153][ T7451] kvm: pic: non byte read
[  342.300984][ T7451] kvm: pic: level sensitive irq not supported
[  342.301058][ T7451] kvm: pic: non byte read
[  342.321764][ T7451] kvm: pic: level sensitive irq not supported
[  342.321841][ T7451] kvm: pic: non byte read
[  342.335566][ T7451] kvm: pic: level sensitive irq not supported
[  342.335637][ T7451] kvm: pic: non byte read
[  342.348113][ T7451] kvm: pic: level sensitive irq not supported
[  342.348191][ T7451] kvm: pic: non byte read
[  343.048482][ T6244] wlan0: Creating new IBSS network, BSSID 82:34:2a:0f:f2:78
[  344.433274][ T7465] loop2: detected capacity change from 0 to 256
[  345.037582][ T7427] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  345.067983][ T7427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  345.657883][ T7487] serio: Serial port ptm0
[  346.248735][ T7498] netlink: 64 bytes leftover after parsing attributes in process `syz.2.916'.
[  346.325836][ T7498] device syzkaller1 entered promiscuous mode
[  346.997695][ T7514] overlayfs: failed to set xattr on upper
[  347.058663][ T7514] overlayfs: ...falling back to index=off,metacopy=off.
[  347.108971][ T7514] overlayfs: failed to resolve './file1/file0': -2
[  347.905044][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.923'.
[  348.930519][ T7553] loop3: detected capacity change from 0 to 4096
[  349.030088][ T7553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  349.108597][ T7553] fs-verity: sha256 using implementation "sha256-avx2"
[  349.420901][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  349.431804][ T7570] overlayfs: failed to set xattr on upper
[  349.447475][ T7570] overlayfs: ...falling back to index=off,metacopy=off.
[  349.460573][ T7572] random: crng reseeded on system resumption
[  349.521381][ T7570] overlayfs: failed to resolve './file1/file0': -2
[  349.976377][ T7584] vivid-001: =================  START STATUS  =================
[  350.033765][ T7584] vivid-001: Radio HW Seek Mode: Bounded
[  350.080708][ T7584] vivid-001: Radio Programmable HW Seek: false
[  350.098644][ T7584] vivid-001: RDS Rx I/O Mode: Block I/O
[  350.105279][ T4735] wlan0: Trigger new scan to find an IBSS to join
[  350.133131][ T7584] vivid-001: Generate RBDS Instead of RDS: false
[  350.190280][ T7584] vivid-001: RDS Reception: true
[  350.224953][ T7584] vivid-001: RDS Program Type: 0 inactive
[  350.299384][ T7584] vivid-001: RDS PS Name:  inactive
[  350.307005][ T7584] vivid-001: RDS Radio Text:  inactive
[  350.346462][ T7584] vivid-001: RDS Traffic Announcement: false inactive
[  350.359137][ T7584] vivid-001: RDS Traffic Program: false inactive
[  350.366233][ T7584] vivid-001: RDS Music: false inactive
[  350.373331][ T7584] vivid-001: ==================  END STATUS  ==================
[  350.745520][   T26] audit: type=1326 audit(1783446478.841:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.2.940" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f690119de59 code=0x0
[  351.267679][ T7620] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  351.674628][ T7633] vivid-000: =================  START STATUS  =================
[  351.725758][ T7633] vivid-000: Radio HW Seek Mode: Bounded
[  351.734404][ T7633] vivid-000: Radio Programmable HW Seek: false
[  351.768740][ T7633] vivid-000: RDS Rx I/O Mode: Block I/O
[  351.799461][ T7633] vivid-000: Generate RBDS Instead of RDS: false
[  351.814158][ T7633] vivid-000: RDS Reception: true
[  351.842672][ T7633] vivid-000: RDS Program Type: 0 inactive
[  351.853865][ T7633] vivid-000: RDS PS Name:  inactive
[  351.884083][ T7633] vivid-000: RDS Radio Text:  inactive
[  351.928986][ T7633] vivid-000: RDS Traffic Announcement: false inactive
[  351.978560][ T7633] vivid-000: RDS Traffic Program: false inactive
[  352.005528][ T7633] vivid-000: RDS Music: false inactive
[  352.044983][ T7633] vivid-000: ==================  END STATUS  ==================
[  352.068795][ T7646] loop3: detected capacity change from 0 to 128
[  352.247823][ T7646] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  352.470016][ T5331] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  352.731091][ T5331] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  352.867731][ T5331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.965873][ T7652] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  352.973481][ T7652] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  352.984048][ T5331] usb 3-1: Product: syz
[  352.988321][ T5331] usb 3-1: Manufacturer: syz
[  353.007249][ T7646] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  353.032072][ T5331] usb 3-1: SerialNumber: syz
[  353.038256][ T7646] FAT-fs (loop3): Filesystem has been set read-only
[  353.080666][ T7646] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  353.116757][ T7646] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  353.153734][ T7646] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  353.351696][ T4271] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  355.060022][ T4334] wlan0: Trigger new scan to find an IBSS to join
[  355.089230][ T5331] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  355.103558][ T5331] usb 3-1: unit 3 not found!
[  355.127724][ T5331] usb 3-1: USB disconnect, device number 14
[  355.351711][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  356.058032][ T4438] wlan0: Creating new IBSS network, BSSID 72:28:55:12:c0:47
[  356.642845][ T7704] vivid-004: =================  START STATUS  =================
[  356.685374][ T7704] vivid-004: Radio HW Seek Mode: Bounded
[  356.705997][ T7704] vivid-004: Radio Programmable HW Seek: false
[  356.755545][ T7704] vivid-004: RDS Rx I/O Mode: Block I/O
[  356.781920][ T7704] vivid-004: Generate RBDS Instead of RDS: 
[  356.842833][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.978'.
[  356.870601][ T7704] false
[  357.040136][ T7704] vivid-004: RDS Reception: true
[  357.384088][ T7704] vivid-004: RDS Program Type: 0 inactive
[  357.604649][ T7704] vivid-004: RDS PS Name:  inactive
[  357.610079][ T7704] vivid-004: RDS Radio Text:  inactive
[  357.615747][ T7704] vivid-004: RDS Traffic Announcement: false inactive
[  357.623176][ T7704] vivid-004: RDS Traffic Program: false inactive
[  357.631375][ T7704] vivid-004: RDS Music: false inactive
[  357.637044][ T7704] vivid-004: ==================  END STATUS  ==================
[  357.693867][ T7714] loop5: detected capacity change from 0 to 2048
[  357.783198][ T7714]  loop5: p1 p3 p4
[  357.811239][ T7714] loop5: p4 size 589824 extends beyond EOD, truncated
[  358.394633][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  358.407705][ T5711] udevd[5711]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  358.428214][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  359.480521][ T7768] kvm: pic: non byte write
[  359.543989][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'.
[  359.585035][ T7773] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  359.595593][ T7773] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  359.605082][ T7773] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  359.614298][ T7773] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  359.688303][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'.
[  359.722384][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'.
[  359.854353][ T7781] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  360.046538][ T7786] binder_alloc: 7785: binder_alloc_buf size -128 failed, no address space
[  360.088760][ T7786] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192)
[  360.221547][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88801767e000: rx timeout, send abort
[  360.234990][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801767e000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  360.289958][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a11bc00: rx timeout, send abort
[  360.301210][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805a11bc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  360.447692][ T7801] loop0: detected capacity change from 0 to 1024
[  360.478372][ T7801] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  360.554984][ T7801] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  360.655790][ T7805] tipc: Started in network mode
[  360.706783][ T7805] tipc: Node identity fa87d2f34f3a, cluster identity 4711
[  360.730015][ T7805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.824492][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1001'.
[  361.852886][  T953] tipc: Node number set to 3049116403
[  362.612609][ T7805] syzkaller0: MTU too low for tipc bearer
[  362.699953][ T7805] tipc: Disabling bearer <eth:syzkaller0>
[  362.804628][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  362.849234][ T4272] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  362.908817][ T4272] EXT4-fs (loop0): Remounting filesystem read-only
[  362.938628][ T4272] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  362.959782][ T4272] EXT4-fs (loop0): Remounting filesystem read-only
[  362.974635][ T4272] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  363.035101][ T4272] EXT4-fs (loop0): Remounting filesystem read-only
[  363.057303][ T4272] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error
[  363.146054][ T4272] EXT4-fs (loop0): Remounting filesystem read-only
[  366.100119][ T4438] wlan0: Trigger new scan to find an IBSS to join
[  367.818552][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1015'.
[  369.080027][ T4429] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  369.301454][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1029'.
[  370.318174][ T4429] wlan0: Trigger new scan to find an IBSS to join
[  371.614964][ T6181] wlan0: Creating new IBSS network, BSSID 5a:6c:ef:5e:85:33
[  372.217845][ T7942] overlayfs: failed to set xattr on upper
[  372.230186][ T7942] overlayfs: ...falling back to index=off,metacopy=off.
[  373.977016][ T7965] netlink: 'syz.5.1044': attribute type 1 has an invalid length.
[  374.099981][ T5735] wlan0: Trigger new scan to find an IBSS to join
[  375.937607][ T7965] 8021q: adding VLAN 0 to HW filter on device bond1
[  376.609280][ T7971] bond1: (slave ip6gretap1): making interface the new active one
[  376.721085][ T7971] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  378.280673][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1043'.
[  378.659979][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  378.712043][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1042'.
[  379.139775][ T4433] wlan0: Trigger new scan to find an IBSS to join
[  379.340423][ T8010] device syzkaller0 entered promiscuous mode
[  380.119359][ T6244] wlan0: Creating new IBSS network, BSSID 7a:fd:a4:8d:92:eb
[  380.317199][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'.
[  380.472830][ T8045] bond2: (slave ipip0): The slave device specified does not support setting the MAC address
[  380.484878][ T8045] bond2: (slave ipip0): Error -95 calling set_mac_address
[  380.552994][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1061'.
[  380.777548][ T8050] device ip6gretap1 entered promiscuous mode
[  380.842506][ T8050] bond1: (slave ip6gretap1): no link monitoring support
[  380.868199][ T8050] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[  380.927133][ T8061] loop2: detected capacity change from 0 to 256
[  380.943848][ T8050] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  380.996566][ T8061] exfat: Bad value for 'uid'
[  381.495938][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1066'.
[  381.848606][ T8084] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1069'.
[  381.859379][ T8084] netlink: zone id is out of range
[  381.866886][ T8084] netlink: zone id is out of range
[  381.873334][ T8084] netlink: zone id is out of range
[  381.900628][ T8084] netlink: del zone limit has 4 unknown bytes
[  383.960166][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  383.966632][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  387.420330][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1066'.
[  387.441811][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1077'.
[  387.742043][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  387.755752][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  387.767581][ T8135] device bridge_slave_0 left promiscuous mode
[  387.775636][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.793874][ T8141] loop3: detected capacity change from 0 to 1024
[  387.841130][ T8135] device bridge_slave_1 left promiscuous mode
[  387.849262][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.873467][ T8135] bond0: (slave bond_slave_0): Releasing backup interface
[  387.899344][ T8135] bond0: (slave bond_slave_1): Releasing backup interface
[  387.961504][ T8135] team0: Port device team_slave_0 removed
[  388.002242][ T8135] team0: Port device team_slave_1 removed
[  388.009432][ T8135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.017964][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  388.053150][ T8135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.061019][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  388.080849][ T8135] bond1: (slave ip6gretap1): Releasing active interface
[  388.105688][ T8136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  388.148561][ T8144] team0: Mode changed to "loadbalance"
[  388.797948][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1088'.
[  390.379927][ T8174] loop3: detected capacity change from 0 to 512
[  390.400740][ T8174] EXT4-fs: Ignoring removed orlov option
[  390.419823][ T8174] ext3: Unknown parameter 'subj_role'
[  391.677649][ T8183] device syzkaller0 entered promiscuous mode
[  393.564120][ T8213] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1104'.
[  393.573508][  T125] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  393.647563][ T8212] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  393.789432][  T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  393.861025][  T125] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 15
[  393.984085][  T125] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[  395.903388][  T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.983514][  T125] usb 1-1: config 0 descriptor??
[  395.994231][ T8203] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  396.849624][    C0] hrtimer: interrupt took 36371 ns
[  397.691409][  T125] usbhid 1-1:0.0: can't add hid device: -71
[  397.697705][  T125] usbhid: probe of 1-1:0.0 failed with error -71
[  397.707237][  T125] usb 1-1: USB disconnect, device number 14
[  398.613888][ T8249] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  398.634302][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'.
[  398.651014][ T8249] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  398.683156][ T8249] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  399.911745][ T8270] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  400.008486][ T8266] loop2: detected capacity change from 0 to 1024
[  400.092967][ T5772] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  400.622358][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1125'.
[  401.584304][ T4994] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  401.613459][ T8286] binder: 8285:8286 ioctl c0306201 200000000180 returned -14
[  401.675234][ T8290] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1128'.
[  401.726031][ T8290] device syzkaller0 entered promiscuous mode
[  401.836842][ T8294] loop3: detected capacity change from 0 to 512
[  402.019436][ T8294] EXT4-fs (loop3): invalid journal inode
[  402.068119][ T8294] EXT4-fs (loop3): can't get journal size
[  403.230301][ T8294] EXT4-fs (loop3): 1 truncate cleaned up
[  403.236043][ T8294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  403.656178][ T8316] binder: 8315:8316 ioctl c0306201 200000000480 returned -14
[  403.713667][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  404.345894][ T8324] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1137'.
[  408.246167][ T8343] loop2: detected capacity change from 0 to 256
[  408.267168][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'.
[  408.288658][ T8343] FAT-fs (loop2): Directory bread(block 1285) failed
[  408.366942][ T8343] FAT-fs (loop2): Directory bread(block 1286) failed
[  408.428696][ T8343] FAT-fs (loop2): Directory bread(block 1287) failed
[  408.475422][ T8343] FAT-fs (loop2): Directory bread(block 1288) failed
[  408.505027][ T8343] FAT-fs (loop2): Directory bread(block 1285) failed
[  408.560652][ T8343] FAT-fs (loop2): Directory bread(block 1286) failed
[  408.567457][ T8343] FAT-fs (loop2): Directory bread(block 1287) failed
[  408.594465][ T8345] device syzkaller0 entered promiscuous mode
[  408.677707][ T8343] FAT-fs (loop2): Directory bread(block 1288) failed
[  408.733857][ T8346] FAT-fs (loop2): Directory bread(block 1285) failed
[  408.747920][ T8346] FAT-fs (loop2): Directory bread(block 1286) failed
[  408.792643][ T8352] device syzkaller0 entered promiscuous mode
[  409.752124][ T5222] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  409.981727][ T5222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  410.009783][ T5222] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  410.031490][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.072815][ T5222] usb 4-1: config 0 descriptor??
[  410.093157][ T5222] pwc: Askey VC010 type 2 USB webcam detected.
[  410.135109][   T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  410.190646][ T5331] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  410.513914][ T5222] pwc: recv_control_msg error -32 req 02 val 2b00
[  410.569910][ T5222] pwc: recv_control_msg error -32 req 02 val 2700
[  410.576602][ T5331] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  410.576667][ T5331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.576689][ T5331] usb 3-1: Product: syz
[  410.576705][ T5331] usb 3-1: Manufacturer: syz
[  410.576720][ T5331] usb 3-1: SerialNumber: syz
[  410.767109][ T5222] pwc: recv_control_msg error -32 req 02 val 2c00
[  410.868535][ T5222] pwc: recv_control_msg error -32 req 04 val 1000
[  410.931679][ T5222] pwc: recv_control_msg error -32 req 04 val 1300
[  411.016307][ T5222] pwc: recv_control_msg error -32 req 04 val 1400
[  411.095314][ T5222] pwc: recv_control_msg error -32 req 02 val 2000
[  411.176899][ T5222] pwc: recv_control_msg error -32 req 02 val 2100
[  411.242916][ T5222] pwc: recv_control_msg error -32 req 04 val 1500
[  411.333583][ T5222] pwc: recv_control_msg error -32 req 02 val 2500
[  411.475076][ T8382] device syzkaller0 entered promiscuous mode
[  411.518399][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  411.542854][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  411.587782][ T5222] pwc: recv_control_msg error -71 req 02 val 2600
[  413.474524][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[  413.666660][ T5222] pwc: recv_control_msg error -71 req 02 val 2900
[  413.676743][ T8383] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1157'.
[  413.684185][ T5222] pwc: recv_control_msg error -71 req 02 val 2800
[  413.705681][ T5222] pwc: recv_control_msg error -71 req 04 val 1100
[  413.724871][ T5222] pwc: recv_control_msg error -71 req 04 val 1200
[  413.776905][ T5222] pwc: Registered as video103.
[  413.791938][ T5222] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21
[  413.810457][ T5222] usb 4-1: USB disconnect, device number 16
[  415.197419][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71
[  415.239901][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71
[  415.311516][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71
[  415.365295][ T8407] loop2: detected capacity change from 0 to 1024
[  415.372206][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71
[  415.432589][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71
[  415.604383][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71
[  415.620814][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71
[  415.651320][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  415.728362][ T8413] loop5: detected capacity change from 0 to 512
[  415.736103][ T8413] EXT4-fs: Ignoring removed orlov option
[  415.806755][ T8413] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  415.841390][ T5331] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  416.260465][ T5331] lan78xx: probe of 3-1:1.0 failed with error -71
[  416.567303][ T5331] usb 3-1: USB disconnect, device number 15
[  416.982140][ T4274] Bluetooth: hci3: command 0x0406 tx timeout
[  417.168249][ T8413] EXT4-fs (loop5): failed to initialize system zone (-117)
[  417.177750][ T8413] EXT4-fs (loop5): mount failed
[  419.390007][ T8407] hfsplus: request for non-existent node 33423360 in B*Tree
[  419.409806][ T8407] hfsplus: request for non-existent node 33423360 in B*Tree
[  419.421081][ T8423] device syzkaller0 entered promiscuous mode
[  419.510208][ T8422] hfsplus: request for non-existent node 33423360 in B*Tree
[  419.531798][ T8422] hfsplus: request for non-existent node 33423360 in B*Tree
[  419.570415][ T8425] hfsplus: request for non-existent node 33423360 in B*Tree
[  419.610904][ T8425] hfsplus: request for non-existent node 33423360 in B*Tree
[  419.707426][   T26] audit: type=1800 audit(1783446547.801:16): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1164" name="file1" dev="loop2" ino=31 res=0 errno=0
[  419.728514][ T8407] hfsplus: request for non-existent node 33423360 in B*Tree
[  419.742904][ T8428] device syzkaller0 entered promiscuous mode
[  419.798967][ T8407] hfsplus: request for non-existent node 33423360 in B*Tree
[  420.351802][ T8422] hfsplus: request for non-existent node 33423360 in B*Tree
[  420.408271][ T8422] hfsplus: request for non-existent node 33423360 in B*Tree
[  421.785453][ T4433] wlan0: Trigger new scan to find an IBSS to join
[  421.849737][ T5212] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  421.911596][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1172'.
[  422.430104][ T5222] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  422.667434][ T5222] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  423.891503][ T5222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.917457][ T5222] usb 4-1: Product: syz
[  423.929670][ T5222] usb 4-1: Manufacturer: syz
[  423.940213][ T5222] usb 4-1: SerialNumber: syz
[  424.188349][ T5222] net_ratelimit: 2 callbacks suppressed
[  424.188400][ T5222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  424.242493][ T5222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  427.131836][ T4334] wlan0: Trigger new scan to find an IBSS to join
[  427.216645][ T5222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71
[  427.249033][ T5222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  427.284332][ T4446] Bluetooth: hci5: Frame reassembly failed (-84)
[  427.297124][ T5222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  427.373290][ T5222] lan78xx: probe of 4-1:1.0 failed with error -71
[  427.448703][ T5222] usb 4-1: USB disconnect, device number 17
[  428.060538][    T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  428.758664][ T4334] wlan0: Creating new IBSS network, BSSID 4a:67:31:9d:b0:26
[  428.833026][ T8490] vivid-000: disconnect
[  428.842027][ T8490] vivid-000: reconnect
[  429.096661][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'.
[  429.273143][ T8491] overlayfs: failed to clone upperpath
[  429.299858][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  429.301498][ T4274] Bluetooth: hci5: command 0x1003 tx timeout
[  434.797472][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'.
[  434.806510][ T8519] device bridge_slave_1 left promiscuous mode
[  434.815378][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.836858][ T8519] device bridge_slave_0 left promiscuous mode
[  434.843543][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.145873][ T8521] loop5: detected capacity change from 0 to 32768
[  435.299459][ T8521] XFS (loop5): Mounting V5 Filesystem
[  435.431192][ T8521] XFS (loop5): Ending clean mount
[  435.444109][ T8521] XFS (loop5): Quotacheck needed: Please wait.
[  435.584297][ T8521] XFS (loop5): Quotacheck: Done.
[  436.397476][ T8553] device syzkaller0 entered promiscuous mode
[  437.673879][ T6687] XFS (loop5): Unmounting Filesystem
[  438.965115][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1205'.
[  439.406585][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'.
[  439.444246][ T8580] device gtp1 entered promiscuous mode
[  441.090074][ T8594] device syzkaller0 entered promiscuous mode
[  442.440790][ T8606] loop3: detected capacity change from 0 to 1024
[  443.580445][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1218'.
[  445.209778][   T11] hfsplus: b-tree write err: -5, ino 25
[  445.227199][ T8626] batman_adv: batadv0: Adding interface: dummy0
[  445.244317][   T11] hfsplus: b-tree write err: -5, ino 4
[  445.273621][ T8626] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.306524][   T11] hfsplus: b-tree write err: -5, ino 2
[  445.382666][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  445.389172][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  445.392673][ T8626] batman_adv: batadv0: Interface activated: dummy0
[  445.471107][ T8627] batadv0: mtu less than device minimum
[  445.531289][ T8627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  445.544759][ T8627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  445.557267][ T8627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  445.569791][ T8627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  445.582791][ T8627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  445.595513][ T8627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  445.608619][ T8627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  445.621474][ T8627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  445.634194][ T8627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  446.909736][ T4353] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  447.134780][ T4353] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  447.159873][ T4353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.228975][ T4353] usb 1-1: Product: syz
[  447.237268][ T4353] usb 1-1: Manufacturer: syz
[  447.244528][ T4353] usb 1-1: SerialNumber: syz
[  447.271045][ T4353] usb 1-1: config 0 descriptor??
[  447.588750][ T4353] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  448.119708][ T5222] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  448.571531][ T8670] input input22: cannot allocate more than FF_MAX_EFFECTS effects
[  449.429784][ T4353] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110
[  449.491765][ T5222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.509719][ T5222] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  449.596200][ T4353] usb 1-1: USB disconnect, device number 15
[  449.639488][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.842391][ T5222] usb 4-1: config 0 descriptor??
[  450.470961][ T5222] pwc: Askey VC010 type 2 USB webcam detected.
[  450.679143][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1235'.
[  451.117252][ T5222] pwc: send_video_command error -71
[  451.122876][ T5222] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  451.206344][ T5222] Philips webcam: probe of 4-1:0.0 failed with error -71
[  451.663989][ T5222] usb 4-1: USB disconnect, device number 18
[  453.219441][ T8718] loop0: detected capacity change from 0 to 16
[  453.893510][ T8723] loop5: detected capacity change from 0 to 512
[  453.954415][ T8723] EXT4-fs: Ignoring removed nobh option
[  453.977326][ T8546] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  454.024061][ T8723] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  454.099898][    T9] wlan0: Trigger new scan to find an IBSS to join
[  454.289796][ T4353] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  454.709480][ T8723] EXT4-fs (loop5): 1 truncate cleaned up
[  454.837868][ T8723] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  455.323651][ T4325] Bluetooth: (null): Invalid header checksum
[  455.646677][ T4325] Bluetooth: (null): Invalid header checksum
[  455.699719][ T4353] usb 1-1: Using ep0 maxpacket: 32
[  455.708448][ T6687] EXT4-fs (loop5): unmounting filesystem.
[  455.717771][ T4353] usb 1-1: unable to get BOS descriptor or descriptor too short
[  455.745244][ T4325] Bluetooth: (null): Invalid header checksum
[  455.769787][ T4353] usb 1-1: config 6 has an invalid interface number: 35 but max is 1
[  455.810092][ T4325] Bluetooth: (null): Invalid header checksum
[  455.816225][ T4325] Bluetooth: (null): Invalid header checksum
[  455.870069][ T4353] usb 1-1: config 6 has an invalid descriptor of length 163, skipping remainder of the config
[  455.893818][ T4353] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2
[  455.928763][ T4353] usb 1-1: config 6 has no interface number 0
[  456.115504][ T4353] usb 1-1: too many endpoints for config 6 interface 35 altsetting 230: 86, using maximum allowed: 30
[  456.128381][ T4353] usb 1-1: config 6 interface 35 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 86
[  456.142014][ T4353] usb 1-1: config 6 interface 35 has no altsetting 0
[  456.769881][ T4353] usb 1-1: string descriptor 0 read error: -71
[  458.139779][    T9] wlan0: Trigger new scan to find an IBSS to join
[  458.159181][ T4353] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[  459.743033][   T39] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  459.798464][ T8698] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  459.817844][ T4353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.899822][ T4353] usb 1-1: can't set config #6, error -71
[  459.930962][ T4353] usb 1-1: USB disconnect, device number 16
[  460.035467][ T8767] loop2: detected capacity change from 0 to 128
[  460.089107][ T8767] EXT4-fs (loop2): Test dummy encryption mode enabled
[  460.149236][ T8767] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  460.178045][ T8767] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  460.852075][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1251'.
[  461.128695][    T9] wlan0: Creating new IBSS network, BSSID a6:8d:25:bc:9d:27
[  461.155617][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  462.584284][ T8785] loop2: detected capacity change from 0 to 512
[  463.504996][ T8785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  463.553507][ T8785] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  463.646419][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'.
[  464.492697][ T8785] xt_hashlimit: max too large, truncated to 1048576
[  465.621105][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  465.644175][ T8815] loop5: detected capacity change from 0 to 4096
[  465.758276][ T8815] NILFS (loop5): invalid segment: Checksum error in segment payload
[  465.854437][ T8815] NILFS (loop5): trying rollback from an earlier position
[  466.362022][ T8815] NILFS (loop5): recovery complete
[  466.627589][ T8825] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  467.936547][ T8831] tipc: Started in network mode
[  467.974015][ T8831] tipc: Node identity 3665004deda8, cluster identity 4711
[  468.022477][ T8831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  468.029825][ T8835] device syzkaller0 entered promiscuous mode
[  469.149853][ T4353] tipc: Node number set to 3687645261
[  469.300323][ T8835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1269'.
[  469.420606][ T8842] tipc: Resetting bearer <eth:syzkaller0>
[  469.530460][ T8830] tipc: Resetting bearer <eth:syzkaller0>
[  470.512590][ T8830] tipc: Disabling bearer <eth:syzkaller0>
[  470.683564][ T8850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1274'.
[  474.286559][ T4433] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  475.708513][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1280'.
[  477.000599][ T8886] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1282'.
[  482.734576][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1288'.
[  483.628032][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1289'.
[  486.578938][ T8970] xt_CT: You must specify a L4 protocol and not use inversions on it
[  487.459750][ T5222] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  487.492096][ T8969] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  488.017322][ T5222] usb 6-1: unable to get BOS descriptor or descriptor too short
[  488.034546][ T5222] usb 6-1: unable to read config index 0 descriptor/start: -71
[  488.044215][ T5222] usb 6-1: can't read configurations, error -71
[  490.475033][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1302'.
[  491.136543][ T4735] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  491.237616][   T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  491.249514][ T8949] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  493.282493][   T11] wlan0: Trigger new scan to find an IBSS to join
[  493.412772][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'.
[  497.610533][ T4340] wlan0: Trigger new scan to find an IBSS to join
[  497.633440][ T9037] device syzkaller0 entered promiscuous mode
[  497.673502][ T9042] fuse: Unknown parameter '00000000000000000000'
[  497.831252][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'.
[  499.005901][ T4735] wlan0: Creating new IBSS network, BSSID ee:43:8a:a3:5a:64
[  500.106167][ T9060] loop0: detected capacity change from 0 to 512
[  500.194215][ T9060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  500.337300][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1316'.
[  500.432386][ T9060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  501.139510][ T9060] System zones: 1-2, 4-12, 8-8
[  501.231302][ T9060] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1315: iget: bad i_size value: 38620345925642
[  501.292429][ T9060] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1315: couldn't read orphan inode 15 (err -117)
[  501.320162][ T9060] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  502.101440][ T9073] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1315: bg 0: block 5: invalid block bitmap
[  502.668843][ T9068] loop5: detected capacity change from 0 to 4096
[  502.677204][ T9073] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2 with error 28
[  502.690917][ T9073] EXT4-fs (loop0): This should not happen!! Data will be lost
[  502.690917][ T9073] 
[  502.700700][ T9073] EXT4-fs (loop0): Total free blocks count 0
[  502.707497][ T9073] EXT4-fs (loop0): Free/Dirty block details
[  502.713789][ T9073] EXT4-fs (loop0): free_blocks=0
[  502.718970][ T9073] EXT4-fs (loop0): dirty_blocks=16000
[  502.724586][ T9073] EXT4-fs (loop0): Block reservation details
[  502.730657][ T9073] EXT4-fs (loop0): i_reserved_data_blocks=2
[  502.822345][ T4446] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  502.839735][ T5456] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  502.862266][ T9072] loop3: detected capacity change from 0 to 1024
[  503.016782][ T9072] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  503.102674][ T5456] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  503.131161][ T5456] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  503.159702][ T5456] usb 3-1: Product: syz
[  503.230638][ T5456] usb 3-1: config 0 descriptor??
[  503.327773][ T5456] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  503.422002][ T9081] ntfs3: loop5: failed to convert "0080" to cp869
[  503.478778][ T9081] ntfs3: loop5: failed to convert name for inode 1e.
[  503.594762][ T5456] usb 3-1: Detected FT232H
[  503.680638][ T5456] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  503.897316][ T9084] loop3: detected capacity change from 0 to 16
[  504.104383][ T9088] loop5: detected capacity change from 0 to 256
[  504.123396][ T9088] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  504.209680][ T5222] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  504.529847][ T5222] usb 4-1: Using ep0 maxpacket: 32
[  504.824961][ T5222] usb 4-1: unable to get BOS descriptor or descriptor too short
[  504.970792][ T5222] usb 4-1: config 6 has an invalid interface number: 35 but max is 1
[  505.056865][ T9071] loop2: detected capacity change from 0 to 512
[  505.077831][ T5222] usb 4-1: config 6 has an invalid descriptor of length 163, skipping remainder of the config
[  505.143568][ T5222] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 2
[  505.170216][ T9071] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  505.271905][ T9071] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1318: corrupted in-inode xattr
[  505.298308][ T5222] usb 4-1: config 6 has no interface number 0
[  505.325246][ T5222] usb 4-1: too many endpoints for config 6 interface 35 altsetting 230: 86, using maximum allowed: 30
[  505.338219][ T5456] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  505.338904][ T5222] usb 4-1: config 6 interface 35 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 86
[  505.360532][ T5222] usb 4-1: config 6 interface 35 has no altsetting 0
[  505.374391][ T9071] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1318: couldn't read orphan inode 15 (err -117)
[  505.409987][ T9071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  505.419883][ T5222] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[  505.428999][ T5222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.499690][ T5222] usb 4-1: Product: syz
[  505.503944][ T5222] usb 4-1: Manufacturer: syz
[  505.534678][ T5222] usb 4-1: SerialNumber: syz
[  506.822283][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  506.829052][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  508.889699][ T5212] usb 3-1: USB disconnect, device number 16
[  509.705571][ T5212] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  510.748080][ T5212] ftdi_sio 3-1:0.0: device disconnected
[  510.836061][ T5222] ums-jumpshot 4-1:6.35: USB Mass Storage device detected
[  511.023808][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  511.089088][ T5222] ums-jumpshot 4-1:6.35: Quirks match for vid 05dc pid 0001: 2
[  511.441208][ T5222] usb 4-1: USB disconnect, device number 19
[  511.697354][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1329'.
[  516.809858][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'.
[  516.943253][ T9141] bridge1: port 1(erspan0) entered blocking state
[  516.962208][ T9141] bridge1: port 1(erspan0) entered disabled state
[  516.980515][ T9141] device erspan0 entered promiscuous mode
[  517.021694][ T9141] bridge1: port 1(erspan0) entered blocking state
[  517.028444][ T9141] bridge1: port 1(erspan0) entered forwarding state
[  517.047667][ T9144] bridge1: port 1(erspan0) entered disabled state
[  517.156046][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.177256][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.630342][ T9143] program syz.0.1334 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  517.860681][ T9154] bridge0: port 1(vlan3) entered blocking state
[  517.886363][ T9154] bridge0: port 1(vlan3) entered disabled state
[  520.305039][ T9171] fuse: Unknown parameter '00000000000000000000'
[  520.567872][ T9172] loop2: detected capacity change from 0 to 40427
[  520.587991][ T9172] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  520.596012][ T9172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  520.611252][ T9180] futex_wake_op: syz.5.1343 tries to shift op by 144; fix this program
[  520.671985][ T9172] F2FS-fs (loop2): invalid crc value
[  521.536599][ T9172] F2FS-fs (loop2): Found nat_bits in checkpoint
[  521.780617][ T9172] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  521.787795][ T9172] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  522.198301][ T9192] syz.2.1342: attempt to access beyond end of device
[  522.198301][ T9192] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  522.333191][ T9170] [U] 
[  522.920526][ T9199] loop3: detected capacity change from 0 to 32768
[  523.739659][ T9199] XFS (loop3): Mounting V5 Filesystem
[  524.189632][ T9218] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1
[  524.200609][ T9218] hfsplus: unable to find HFS+ superblock
[  525.967479][ T9199] XFS (loop3): AIL initialisation failed: error -12
[  525.986517][ T4429] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  526.003353][ T4429] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  526.014742][ T4429] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  526.047681][ T9199] XFS (loop3): log mount failed
[  526.439773][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1356'.
[  528.518011][ T4275] syz-executor: attempt to access beyond end of device
[  528.518011][ T4275] loop2: rw=2051, sector=45096, nr_sectors = 32 limit=40427
[  528.631003][ T4275] F2FS-fs (loop2): Issue discard(5637, 5637, 4) failed, ret: -5
[  532.325561][ T9256] xt_CT: You must specify a L4 protocol and not use inversions on it
[  533.085959][   T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  536.506789][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'.
[  538.380356][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1365'.
[  539.455828][ T9291] xt_TPROXY: Can be used only with -p tcp or -p udp
[  539.926826][ T9283] bridge1: port 1(erspan0) entered blocking state
[  539.933759][ T9283] bridge1: port 1(erspan0) entered disabled state
[  539.942131][ T9283] device erspan0 entered promiscuous mode
[  540.215287][ T9293] syz.2.1370 (9293): drop_caches: 2
[  540.302558][ T9283] bridge1: port 1(erspan0) entered blocking state
[  540.309269][ T9283] bridge1: port 1(erspan0) entered forwarding state
[  540.335816][ T9287] bridge1: port 1(erspan0) entered disabled state
[  540.387853][ T8495] Bluetooth: hci0: unexpected event for opcode 0x0419
[  541.018305][ T9307] loop2: detected capacity change from 0 to 64
[  544.321097][ T9328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1377'.
[  547.291384][   T56] wlan0: Trigger new scan to find an IBSS to join
[  547.335032][ T8495] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  547.344299][ T8495] Bluetooth: hci0: Injecting HCI hardware error event
[  547.366111][ T4289] Bluetooth: hci0: hardware error 0x00
[  547.385724][ T9327] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  547.490180][ T9327] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  547.586500][ T9327] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  547.633915][ T9327] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  547.647591][ T9327] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  547.657521][ T9327] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  547.711131][ T9327] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  550.199931][ T4289] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  550.342912][ T9351] loop3: detected capacity change from 0 to 256
[  550.401500][ T9351] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  550.901920][ T4735] wlan0: Trigger new scan to find an IBSS to join
[  551.084191][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  551.114979][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  551.125663][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  551.137607][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  551.149279][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  552.069697][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'.
[  552.282788][ T9367] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  552.553848][ T9367] bridge1: port 1(erspan0) entered blocking state
[  552.589322][ T9367] bridge1: port 1(erspan0) entered disabled state
[  552.850527][ T9367] device erspan0 entered promiscuous mode
[  552.878347][ T8549] wlan0: Creating new IBSS network, BSSID a2:cc:43:3b:97:5e
[  552.887909][ T9367] bridge1: port 1(erspan0) entered blocking state
[  552.894565][ T9367] bridge1: port 1(erspan0) entered forwarding state
[  552.962197][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready
[  553.012228][ T9362] bridge1: port 1(erspan0) entered disabled state
[  553.051991][ T9366] Bluetooth: MGMT ver 1.22
[  553.160183][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.191715][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.608256][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1391'.
[  554.886719][ T5212] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  555.553313][ T9396] xt_policy: output policy not valid in PREROUTING and INPUT
[  557.602219][ T5212] usb 4-1: device descriptor read/all, error -71
[  560.948111][ T9422] net_ratelimit: 10 callbacks suppressed
[  560.948119][ T9422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  561.359669][ T9426] loop2: detected capacity change from 0 to 32768
[  561.372481][ T9426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1402 (9426)
[  561.450787][ T9426] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  561.461188][ T9426] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  561.470210][ T9426] BTRFS info (device loop2): use zlib compression, level 3
[  561.477490][ T9426] BTRFS info (device loop2): turning on sync discard
[  561.484422][ T9426] BTRFS info (device loop2): using free space tree
[  561.561427][ T4438] wlan0: Trigger new scan to find an IBSS to join
[  561.572496][    T9] wlan0: Trigger new scan to find an IBSS to join
[  562.245084][ T9451] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1404'.
[  562.281712][ T9426] BTRFS info (device loop2): enabling ssd optimizations
[  563.200459][   T26] audit: type=1800 audit(1783446689.619:17): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1402" name="file1" dev="loop2" ino=260 res=0 errno=0
[  563.932188][ T9465] comedi comedi3: multiq3: I/O port conflict (0x4,16)
[  565.260525][ T4275] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  566.602231][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1408'.
[  566.942122][   T11] wlan0: Trigger new scan to find an IBSS to join
[  566.942176][ T4340] wlan0: Trigger new scan to find an IBSS to join
[  567.679471][ T9491] loop0: detected capacity change from 0 to 40427
[  567.693687][ T9491] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  567.701606][ T9491] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  567.711307][ T9491] F2FS-fs (loop0): invalid crc value
[  567.853646][ T9491] F2FS-fs (loop0): Found nat_bits in checkpoint
[  567.929084][ T9491] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  567.936558][ T9491] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  568.543531][ T4318] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  568.551542][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  568.970524][   T56] wlan0: Creating new IBSS network, BSSID 4e:a7:2c:de:98:b5
[  568.978385][ T4994] wlan0: Creating new IBSS network, BSSID 36:b3:1f:c2:04:57
[  569.120529][ T4318] usb 4-1: device descriptor read/64, error -32
[  569.409135][ T4318] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  569.604931][ T4334] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  570.277031][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  570.283496][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  572.929490][ T9532] overlayfs: failed to clone upperpath
[  573.721169][ T9527] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1420'.
[  575.522912][ T4289] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  575.534136][ T4289] Bluetooth: hci2: Injecting HCI hardware error event
[  575.546563][ T8495] Bluetooth: hci2: hardware error 0x00
[  575.813221][ T9546] loop3: detected capacity change from 0 to 64
[  575.892299][   T26] audit: type=1800 audit(1783446701.606:18): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1424" name="file1" dev="loop3" ino=5 res=0 errno=0
[  577.712365][ T8495] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  579.509097][ T9584] loop2: detected capacity change from 0 to 2048
[  580.656022][ T9085] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  584.778863][ T9605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1434'.
[  585.686493][   T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  586.739574][ T9613] loop0: detected capacity change from 0 to 64
[  586.890820][   T26] audit: type=1800 audit(1783446711.900:19): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1439" name="file1" dev="loop0" ino=5 res=0 errno=0
[  591.863524][ T4318] Process accounting resumed
[  596.568688][ T9672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'.
[  599.232286][ T9676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.419658][ T9680] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.1458'.
[  601.334889][ T8549] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  601.345414][ T4340] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  601.358281][ T9680] devpts: called with bogus options
[  601.817158][ T9697] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  603.386280][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1462'.
[  603.450830][ T9703] loop2: detected capacity change from 0 to 512
[  603.485902][ T9700] bridge1: port 1(erspan0) entered blocking state
[  603.502258][ T9703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  603.531743][ T9700] bridge1: port 1(erspan0) entered disabled state
[  603.558792][ T9700] device erspan0 entered promiscuous mode
[  603.776946][ T9700] bridge1: port 1(erspan0) entered blocking state
[  603.783608][ T9700] bridge1: port 1(erspan0) entered forwarding state
[  603.808776][    T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  603.936399][ T9706] loop5: detected capacity change from 0 to 32768
[  604.207845][ T9703] EXT4-fs (loop2): 1 truncate cleaned up
[  604.214581][ T9706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1464 (9706)
[  604.246300][ T9703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  604.499501][ T9706] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  604.511041][ T9706] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  604.520071][ T9706] BTRFS info (device loop5): force clearing of disk cache
[  604.527609][ T9706] BTRFS info (device loop5): metadata ratio 0
[  604.533756][ T9706] BTRFS info (device loop5): enabling ssd optimizations
[  604.540997][ T9706] BTRFS info (device loop5): using spread ssd allocation scheme
[  604.548826][ T9706] BTRFS info (device loop5): using free space tree
[  605.265162][ T9706] BTRFS info (device loop5): rebuilding free space tree
[  606.712806][ T9740] tipc: Started in network mode
[  606.719287][ T9740] tipc: Node identity 2003, cluster identity 4711
[  606.726260][ T9740] tipc: Node number set to 8195
[  606.765516][ T9739] 9pnet_fd: Insufficient options for proto=fd
[  606.875799][ T6687] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  606.997555][ T9745] mmap: syz.0.1469 (9745) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  607.014168][   T26] audit: type=1326 audit(1783446730.729:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.0.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdab459de59 code=0x0
[  608.306630][ T8758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (8758)
[  609.894572][ T9768] loop0: detected capacity change from 0 to 512
[  609.954755][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1468'.
[  610.272553][ T9341] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  610.707088][ T9341] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  610.745742][ T9341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.764029][ T9341] usb 6-1: Product: syz
[  610.769062][ T9341] usb 6-1: Manufacturer: syz
[  610.773768][ T9341] usb 6-1: SerialNumber: syz
[  610.831948][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  610.863599][ T9768] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1474: missing EA_INODE flag
[  611.052160][ T9768] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1474: error while reading EA inode 12 err=-117
[  611.107888][ T9768] EXT4-fs (loop0): 1 orphan inode deleted
[  611.113883][ T9768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  612.882442][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'.
[  613.179924][ T9341] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  614.183800][ T9341] usb 6-1: unit 3 not found!
[  614.289996][ T9341] usb 6-1: USB disconnect, device number 6
[  614.478617][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  615.529329][ T9085] udevd[9085]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  617.851622][ T8698] wlan0: Trigger new scan to find an IBSS to join
[  621.781123][ T8698] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  621.920583][ T9341] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  622.007471][ T8965] wlan0: Creating new IBSS network, BSSID 0e:57:38:2a:53:ed
[  622.043601][ T9848] batman_adv: batadv0: Adding interface: dummy0
[  622.059720][ T9848] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  622.087653][ T9848] batman_adv: batadv0: Interface activated: dummy0
[  622.150240][ T9341] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  622.196433][ T9341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.222375][ T9341] usb 4-1: Product: syz
[  622.259441][ T9341] usb 4-1: Manufacturer: syz
[  622.300076][ T9341] usb 4-1: SerialNumber: syz
[  623.534439][ T8961] wlan0: Trigger new scan to find an IBSS to join
[  623.847097][ T9866] loop0: detected capacity change from 0 to 2048
[  624.899470][ T9872] loop3: detected capacity change from 0 to 32768
[  624.972044][ T9341] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  625.127856][ T9341] usb 4-1: unit 3 not found!
[  625.296839][ T9341] usb 4-1: USB disconnect, device number 25
[  625.383155][ T9872] XFS (loop3): Mounting V5 Filesystem
[  625.499170][ T9886] loop5: detected capacity change from 0 to 7
[  625.514575][ T9886] Dev loop5: unable to read RDB block 7
[  625.520325][ T9886]  loop5: AHDI p1 p2 p3
[  625.525350][ T9886] loop5: partition table partially beyond EOD, truncated
[  625.533040][ T9886] loop5: p1 start 1818582900 is beyond EOD, truncated
[  625.539970][ T9886] loop5: p3 start 335544320 is beyond EOD, truncated
[  625.546181][ T9085] udevd[9085]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  625.601126][ T9872] XFS (loop3): Ending clean mount
[  625.615619][ T9872] XFS (loop3): Quotacheck needed: Please wait.
[  625.957559][ T9872] XFS (loop3): Quotacheck: Done.
[  626.524083][ T9891] [U] 
[  627.058888][ T4271] XFS (loop3): Unmounting Filesystem
[  627.177678][ T9898] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1503'.
[  627.362332][ T3638] Dev loop5: unable to read RDB block 7
[  627.367993][ T3638]  loop5: AHDI p1 p2 p3
[  627.402278][ T3638] loop5: partition table partially beyond EOD, truncated
[  627.428198][ T3638] loop5: p1 start 1818582900 is beyond EOD, truncated
[  627.442410][ T3638] loop5: p3 start 335544320 is beyond EOD, truncated
[  627.682808][ T9905] batman_adv: batadv0: Adding interface: dummy0
[  627.702707][ T9905] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.772857][ T9905] batman_adv: batadv0: Interface activated: dummy0
[  627.808978][ T4735] wlan0: Trigger new scan to find an IBSS to join
[  628.178002][ T9910] batadv0: mtu less than device minimum
[  629.166975][ T9910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  629.179536][ T9910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  629.191996][ T9910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  629.204440][ T9910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  629.216875][ T9910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  629.229510][ T9910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  629.242018][ T9910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  629.254510][ T9910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  629.267334][ T9910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  630.845469][ T9911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  630.853915][ T9911] batman_adv: batadv0: Removing interface: batadv_slave_0
[  630.878495][ T9911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  630.887096][ T9911] batman_adv: batadv0: Removing interface: batadv_slave_1
[  632.083021][ T8961] wlan0: Trigger new scan to find an IBSS to join
[  632.131688][ T9915] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  632.151553][ T9915] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  632.303147][ T9915] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  633.399384][ T9939] futex_wake_op: syz.3.1512 tries to shift op by 144; fix this program
[  633.412404][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'.
[  633.427325][ T9939] netlink: 'syz.3.1512': attribute type 2 has an invalid length.
[  633.519489][ T9939] can0: slcan on ttyS3.
[  634.593926][ T9936] lo speed is unknown, defaulting to 1000
[  634.605564][ T9934] can0 (unregistered): slcan off ttyS3.
[  634.680593][ T9936] lo speed is unknown, defaulting to 1000
[  634.774367][ T9936] lo speed is unknown, defaulting to 1000
[  634.848130][ T9936] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  635.490730][ T9936] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  635.667054][ T9936] lo speed is unknown, defaulting to 1000
[  635.946941][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  635.988003][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  636.073326][ T9936] lo speed is unknown, defaulting to 1000
[  636.361426][ T9506] libceph: connect (1)[c::]:6789 error -101
[  636.374046][ T9936] lo speed is unknown, defaulting to 1000
[  636.400880][ T9506] libceph: mon0 (1)[c::]:6789 connect error
[  636.411252][ T9936] lo speed is unknown, defaulting to 1000
[  636.417731][ T9936] lo speed is unknown, defaulting to 1000
[  637.377611][ T9506] libceph: connect (1)[c::]:6789 error -101
[  637.402497][ T9506] libceph: mon0 (1)[c::]:6789 connect error
[  637.468704][ T4325] wlan0: Trigger new scan to find an IBSS to join
[  637.714395][ T9957] ceph: No mds server is up or the cluster is laggy
[  637.741242][ T9970] net_ratelimit: 10 callbacks suppressed
[  637.741259][ T9970] batman_adv: batadv0: Local translation table size (124) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  637.953116][ T9506] libceph: connect (1)[c::]:6789 error -101
[  639.215565][ T8698] wlan0: Trigger new scan to find an IBSS to join
[  639.246650][ T9506] libceph: mon0 (1)[c::]:6789 connect error
[  639.259801][ T9975] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  640.300807][ T5735] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  642.628873][ T5115] wlan0: Creating new IBSS network, BSSID 6a:4b:3e:70:5a:ac
[  642.770956][ T5115] wlan0: Trigger new scan to find an IBSS to join
[  643.071154][ T4433] ------------[ cut here ]------------
[  643.077514][ T4433] WARNING: CPU: 1 PID: 4433 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0
[  643.087859][ T4433] Modules linked in:
[  643.091934][ T4433] CPU: 1 PID: 4433 Comm: kworker/u4:10 Not tainted syzkaller #0
[  643.099734][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  643.110048][ T4433] Workqueue: cfg80211 cfg80211_event_work
[  643.116014][ T4433] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[  643.122358][ T4433] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f
[  643.142441][ T4433] RSP: 0018:ffffc90004157ac0 EFLAGS: 00010293
[  643.149115][ T4433] RAX: ffffffff89979bd9 RBX: 1ffff9200082af5c RCX: ffff88802a849e00
[  643.157179][ T4433] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0
[  643.165229][ T4433] RBP: ffffc90004157b70 R08: ffffffff90b102a7 R09: 1ffffffff2162054
[  643.173341][ T4433] R10: dffffc0000000000 R11: fffffbfff2162055 R12: ffff8880558b35b8
[  643.181453][ T4433] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888068554c90
[  643.189512][ T4433] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  643.198556][ T4433] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  643.205187][ T4433] CR2: 000000110c24a008 CR3: 0000000073884000 CR4: 00000000003506e0
[  643.213242][ T4433] Call Trace:
[  643.216562][ T4433]  <TASK>
[  643.219570][ T4433]  ? trace_rdev_return_void+0x240/0x240
[  643.225195][ T4433]  cfg80211_process_wdev_events+0x359/0x4d0
[  643.231191][ T4433]  ? process_one_work+0x7b4/0x1160
[  643.236427][ T4433]  cfg80211_process_rdev_events+0x9d/0x110
[  643.242344][ T4433]  cfg80211_event_work+0x2b/0x40
[  643.247348][ T4433]  process_one_work+0x8ab/0x1160
[  643.252394][ T4433]  ? worker_detach_from_pool+0x240/0x240
[  643.258183][ T4433]  ? _raw_spin_lock_irq+0xb7/0xf0
[  643.263362][ T4433]  ? _raw_spin_lock_irqsave+0x100/0x100
[  643.268996][ T4433]  ? wq_worker_running+0x97/0x190
[  643.274186][ T4433]  worker_thread+0xaf5/0x12a0
[  643.278953][ T4433]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  643.285030][ T4433]  kthread+0x29d/0x330
[  643.289217][ T4433]  ? worker_clr_flags+0x1a0/0x1a0
[  643.294412][ T4433]  ? kthread_blkcg+0xd0/0xd0
[  643.299150][ T4433]  ret_from_fork+0x1f/0x30
[  643.303918][ T4433]  </TASK>
[  643.307006][ T4433] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  643.314411][ T4433] CPU: 1 PID: 4433 Comm: kworker/u4:10 Not tainted syzkaller #0
[  643.322085][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  643.332178][ T4433] Workqueue: cfg80211 cfg80211_event_work
[  643.337961][ T4433] Call Trace:
[  643.341274][ T4433]  <TASK>
[  643.344250][ T4433]  dump_stack_lvl+0x188/0x24e
[  643.349018][ T4433]  ? memcpy+0x3c/0x60
[  643.353112][ T4433]  ? show_regs_print_info+0x12/0x12
[  643.358403][ T4433]  ? load_image+0x410/0x410
[  643.363002][ T4433]  panic+0x2d3/0x710
[  643.366955][ T4433]  ? bpf_jit_dump+0xd0/0xd0
[  643.371505][ T4433]  ? ret_from_fork+0x1f/0x30
[  643.376155][ T4433]  __warn+0x2f8/0x4f0
[  643.380178][ T4433]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  643.385903][ T4433]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  643.391502][ T4433]  report_bug+0x2ba/0x4f0
[  643.395966][ T4433]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  643.401708][ T4433]  handle_bug+0x3a/0x70
[  643.405945][ T4433]  exc_invalid_op+0x16/0x40
[  643.410522][ T4433]  asm_exc_invalid_op+0x16/0x20
[  643.415427][ T4433] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[  643.421725][ T4433] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f
[  643.441380][ T4433] RSP: 0018:ffffc90004157ac0 EFLAGS: 00010293
[  643.447489][ T4433] RAX: ffffffff89979bd9 RBX: 1ffff9200082af5c RCX: ffff88802a849e00
[  643.455589][ T4433] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0
[  643.463699][ T4433] RBP: ffffc90004157b70 R08: ffffffff90b102a7 R09: 1ffffffff2162054
[  643.471710][ T4433] R10: dffffc0000000000 R11: fffffbfff2162055 R12: ffff8880558b35b8
[  643.479786][ T4433] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888068554c90
[  643.487818][ T4433]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  643.493440][ T4433]  ? trace_rdev_return_void+0x240/0x240
[  643.499058][ T4433]  cfg80211_process_wdev_events+0x359/0x4d0
[  643.505054][ T4433]  ? process_one_work+0x7b4/0x1160
[  643.510213][ T4433]  cfg80211_process_rdev_events+0x9d/0x110
[  643.516159][ T4433]  cfg80211_event_work+0x2b/0x40
[  643.521151][ T4433]  process_one_work+0x8ab/0x1160
[  643.526162][ T4433]  ? worker_detach_from_pool+0x240/0x240
[  643.531845][ T4433]  ? _raw_spin_lock_irq+0xb7/0xf0
[  643.536910][ T4433]  ? _raw_spin_lock_irqsave+0x100/0x100
[  643.542507][ T4433]  ? wq_worker_running+0x97/0x190
[  643.547589][ T4433]  worker_thread+0xaf5/0x12a0
[  643.552402][ T4433]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  643.558437][ T4433]  kthread+0x29d/0x330
[  643.562550][ T4433]  ? worker_clr_flags+0x1a0/0x1a0
[  643.567619][ T4433]  ? kthread_blkcg+0xd0/0xd0
[  643.572303][ T4433]  ret_from_fork+0x1f/0x30
[  643.576806][ T4433]  </TASK>
[  643.580457][ T4433] Kernel Offset: disabled
[  643.585017][ T4433] Rebooting in 86400 seconds..