last executing test programs:

9m46.185740965s ago: executing program 32 (id=108):
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0)
sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

6m50.928582952s ago: executing program 4 (id=561):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
socket(0x11, 0xa, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x118)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

6m50.096450284s ago: executing program 4 (id=563):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$eJzs3U9sG1kZAPDPdpJN2izdXRDaXSS20iKVP2qcP0KbABLiBBwqISpxAamExA0lTh3FTmmiSqRw64EDAoGEOHDnwpULPVFVQpxBXDmhVlCCVFCRBnnsSZ3ETlya2Gzm95Ncz/i5/t5z8r08v3njCSC3Ljb/KURMRsQfIuJCa3f/Ey627naf3Flq3gqRJFf/Vkif19zPnpr9v/MRsRMR4xHx1S9GfKtwOG59a3t1sVqtbLT3y4219XJ9a/vyjbXFlcpK5ebM/HsLC/PTc7MLJ9bWez/8zr0rv/ny2K+e/uDRgx/97rfNak22yzrbcZJaTR+N1zseG4mIz51GsCEotdszMeyK8D9p/vw+GBHvpvl/IUrpT7M/z061ZsBpS5Ik+U/ySq/inQQ4s4rpGLhQnIqI1naxODXVGsN/KM4Vq7V641PXa5s3l1tj5dditHj9RrUy3f6s8FqMFpr7M+n28/3ZA/tzEekY+MeliXR/aqlWXR5sVwcccP5A/v+z1Mp/ICf6/8gPnDXyH/JL/kN+yX/IL/kP+SX/Ib/kP+SX/If8kv+QX535n53I9eqQ6gIM1lF//8cGWA9goL5y5UrzlmTnvy/f2tpcrd26vFypr06tbS5NLdU21qdWarWV9JydteNer1qrrc98OjZvlxuVeqNc39q+tlbbvNm4lp7Xf60yOpBWAf14/Z37fypExM5nJtJbdPzJl6twtiVJIYZ9DjIwHKVhd0DA0Dj0B/n1Ap/xe35JGPD+1uUreveMn+9Z9PlYP/aVdn/9EvUCTk/xqMJnDwdXEWDgLr3l+B/klfl/yC/z/5Bfx4zxDQ8gB46a/4/2tfy6OjT/38PTF6sPcPqOnP8HzrTJLtf/SpLke692XLtrOiI+EBF/LI2+kl3rCzgLin8ttMf/ly58bPJg6VjhX+kcwFhEfPfnV396e7HR2JhpPv73vccbP2s/PjuM+gO97Z/hy/I0y2MAIL92n9xZym6DjPv4C61FCIfjj7TnJsfTEcy53cK+tQqFE1q7sHM3It7sFr/Qvt5568jHud3SofhvtO8LrZdI6zuSXjd9MPHf6oj/0Y74b7/0uwL5cL/Z/0x3y79imtOxl3/7+5/JE1ofnfV/2ZrrzvhZ/1fq0f+902eMb//i+90O76aLvR/fjXi7a/+bxRtPYx2M36zbpT7jP/rG1z7cqyz5Zet1usXPNLfKjbX1cn1r+/KNrBbz7y0szE/PzS6U0znqcjZTfdhn3/z9g17xm+1v69H+Px9q/0S7Tp/os/3//sjDr188Iv7H3+3++/dGen/g/U+SvTp8ss/4/5j9yzd7lTXjL/d4/4vd4kdWGjHXZ/z6T77k3GEA+D9S39peXaxWKxtdNkZ7F9mwYWPQGyMxwKDH9Rw7g+mggFPzPOmHXRMAAAAAAAAAAACgX71W/94/weXEw24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZ8N8AAAD//6rz1eo=")
lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@random={0xdd, 0x6, 'abcdef'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xa, 0x9, 0x5, 0x1}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2c)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

6m48.585566033s ago: executing program 4 (id=566):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000004c0)=@framed={{}, [@alu={0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008)
socket$pppoe(0x18, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x70bd2c, 0x0, {0x7, 0x0, 0x0, 0x0, 0x10000, 0xc40a}}, 0x20}}, 0x4040014)

6m47.420056983s ago: executing program 4 (id=569):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}})
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3})
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0x3d13, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}})
socket$nl_route(0x10, 0x3, 0x0)
setns(0xc9, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

6m45.928721522s ago: executing program 4 (id=575):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000140)=ANY=[@ANYRES64=r1])
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000500)={'broute\x00', 0x0, 0x4, 0x98, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f00000005c0)=""/152}, &(0x7f0000000580)=0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16], 0x48)
tkill(0x0, 0x12)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

6m42.16150838s ago: executing program 4 (id=582):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80280, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, 0x0, &(0x7f0000000700)=r2}, 0x1c)
r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r5 = dup(r4)
read(r5, &(0x7f0000000040), 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20040801}, 0x2000619c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x8f)
read$msr(r6, &(0x7f0000032680)=""/102384, 0x18ff0)
r8 = socket(0x10, 0x803, 0x0)
write(r8, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c)
read$FUSE(r5, &(0x7f0000008180)={0x2020}, 0xfffffdfc)

6m26.036840468s ago: executing program 33 (id=582):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80280, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, 0x0, &(0x7f0000000700)=r2}, 0x1c)
r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r5 = dup(r4)
read(r5, &(0x7f0000000040), 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20040801}, 0x2000619c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x8f)
read$msr(r6, &(0x7f0000032680)=""/102384, 0x18ff0)
r8 = socket(0x10, 0x803, 0x0)
write(r8, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c)
read$FUSE(r5, &(0x7f0000008180)={0x2020}, 0xfffffdfc)

5m31.157330822s ago: executing program 5 (id=695):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='tcp', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='127.0.0.1', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='8009', 0x4)
write(0xffffffffffffffff, &(0x7f0000000400)='ipv4', 0x4)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn', 0x37)

5m30.711159553s ago: executing program 5 (id=698):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f4, 0x2a8, 0x2a8, 0x3f4, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xffffffff, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xdc, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0xa, [0x100, 0x4e22, 0x4e23, 0x4e23, 0x4e24, 0x4e20, 0x4e23, 0x4e21, 0x4e21, 0x4e24, 0x4e21, 0x4e22, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1]}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2b4)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r2=>0x0)
r3 = eventfd2(0x7, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r4})
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086201, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x2)
io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r1, &(0x7f0000000340)="d1", 0x1, 0x6, 0x0, 0x5, r3}])
io_destroy(r2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)='1199 0017\x00', 0x9)
ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f00000001c0)={0x13, 0x0, 0x2, 0x1, 0x7fff})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

5m29.229375622s ago: executing program 5 (id=702):
r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r0, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480))
syz_open_procfs(r1, &(0x7f00000000c0)='oom_score_adj\x00')
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80000001, @loopback, 0x80, 0x2}, 0x20)
r2 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000008189899a1fea9fd2d3945b80d6327bd32ac2478b7a5b9b719bccbf84270be5534512acf9bfb650ec311885", @ANYRES16=r3, @ANYBLOB="00082bbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x1)
syz_open_dev$mtd(&(0x7f0000000100), 0x2, 0x10b241)

5m28.1136005s ago: executing program 5 (id=705):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='tcp', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='127.0.0.1', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='ipv4', 0x4)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn', 0x37)

5m27.602620384s ago: executing program 5 (id=710):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}})
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3})
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0x3d13, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}})
socket$nl_route(0x10, 0x3, 0x0)
setns(0xc9, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5m25.184053947s ago: executing program 5 (id=715):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
get_robust_list(0x0, 0x0, 0x0)

5m9.550503373s ago: executing program 34 (id=715):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
get_robust_list(0x0, 0x0, 0x0)

3m49.601042683s ago: executing program 7 (id=907):
r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r0, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480))
syz_open_procfs(r1, &(0x7f00000000c0)='oom_score_adj\x00')
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80000001, @loopback, 0x80, 0x2}, 0x20)
r2 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000008189899a1fea9fd2d3945b80d6327bd32ac2478b7a5b9b719bccbf84270be5534512acf9bfb650ec311885", @ANYRES16=r3, @ANYBLOB="00082bbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x1)
syz_open_dev$mtd(&(0x7f0000000100), 0x2, 0x10b241)

3m48.867520333s ago: executing program 7 (id=909):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='tcp', 0x3)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r2, &(0x7f0000000300)='127.0.0.1', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='ipv4', 0x4)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn', 0x37)

3m46.607914733s ago: executing program 7 (id=913):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50)
r0 = dup(0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000300))
r1 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r1, 0x0, 0x0, 0xffe0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0xe, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c)
openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
setns(0xc9, 0x0)
r3 = socket(0x8, 0x5, 0x5)
sendmsg$netlink(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0xd0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)='\a\x00\x00\x00', 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)

3m46.288670362s ago: executing program 7 (id=916):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4)
read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x7, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

3m44.949058627s ago: executing program 7 (id=918):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/bDeviceClass\x00', 0x0, 0x0)
read(r1, &(0x7f0000000300), 0x100)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xa1, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x80000001)

3m43.603436303s ago: executing program 7 (id=920):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='1t', 0x2)
r1 = dup(0xffffffffffffffff)
write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

3m27.833894582s ago: executing program 35 (id=920):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='1t', 0x2)
r1 = dup(0xffffffffffffffff)
write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

2m9.835861652s ago: executing program 1 (id=1134):
ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f00000003c0), 0x1, 0xbac, &(0x7f00000017c0)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c, 0x80000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b829232fdd05d7b21f9b9941055ed28c37d5e1ec11cdbcabb8a89ebf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565b43a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b50800000000000000893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858c268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c5fb5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d79be4da0fae78339ce15085998a17aaf3158b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e2ffffff7f042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed547448fa00c94a0420da4bf03b7deb1399148b3b77268ab867c2509cfce576a477f96eb5f1bd9d7dacdddcbb80400f33d79c861e453bdaa847455877361253b3a242b5854b0d28b47cf37cd515396839509f4da0d6c19ae9d3a052210a5c1d4c75273fa05693d79a463dcd94e60850043027ad28b52cf82ff6c63aff270e89c3d310e13ef7565a26eab1bcad6b26136dbee95b303851b41b619b7bc15316c83cddc57cfa5540ab542c6f7eda25e0ef2641e34d8a61905f919ce96663c2967cba470bae1e3334bec127870982103357136f6d05b940d6ad32843aa2053e3de1a7fa81b13e482bcc895b9f43fd77e8c6b1c3beb3422b16c6c957bc22e80d70b024597f146147fe0928df427c2b37e406f7eca3e74cd61a83c6959eba6fbe582291faaf44346ccd8a7f4b5f6cc3de36f3a1", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000100)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7f, 0x204, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e462775f9527ad4d3ff445ff0000008010cdbbf76e69950600", [0x1ce, 0x20000001]})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6)

2m5.628496264s ago: executing program 1 (id=1141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m3.290556937s ago: executing program 1 (id=1146):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x6020400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

2m3.061636433s ago: executing program 8 (id=1147):
syz_open_dev$evdev(&(0x7f0000000100), 0x1f, 0x400)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x2000019, 0x0, 0xfc, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

2m2.276915614s ago: executing program 8 (id=1148):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000200))
setreuid(0x0, 0x0)
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000004000000000000000085100000030000001800000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)

2m1.558157343s ago: executing program 8 (id=1150):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000001180)=ANY=[], 0x1, 0x192, &(0x7f0000000380)="$eJzskjFv2kAYht+zjQ0VRa3UiQUGpLZDizFt1a2MdO/GUsu4FNU0ASMFEIOjKGLIEGXML+BvREp+QDJEmTIxM6DMkaM7f2cc/kLuGfzqe/3e3ffZ9zcchhaAx83cQwsCHSXcMAYDQIUl3lpL9Iz0lvQ0EVxT7if5R6TlcDozKVPF28T45waBP6oCeBBeaoU/Dmldym8AcRzHgIYuwOMoYi2Ou9vMPR3AMM0AZQN4J4aI0wwfhBfvAdTHg/16OJ196g/cnt/z/zt685v9xba/OvU//cC3kyez6PzN3JMtcf0IwMqT4RbF9jkAx2S92mmfZVqj96yADmRrpvyGJbZd1NmeJ9dKZbhIx5It8k/wqwXwtg4ilnFrYhcDYqQ2GHQqGkamv+SsvHjx2dsLugswMLlsCQOaMAQ5sWEBge+sqOCx5vcIr5PEgraskbZJl6Qr0srOlTEi/jyh6kMEmJjcX1F64o7Ho0aOqpFjSs95EyHzg2qwcK49H+5y91IpFAqFQqFQKBQKxcvjKQAA//9p7WwO")
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000000300)=""/209, 0xd1)

2m0.948946449s ago: executing program 8 (id=1152):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000680)={0x1, &(0x7f00000005c0)=[{}]})

2m0.692368956s ago: executing program 1 (id=1154):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_setup(0x2007, &(0x7f0000000980)=<r0=>0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)

1m57.608110677s ago: executing program 8 (id=1164):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6(0xa, 0x80003, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

1m56.635763193s ago: executing program 8 (id=1167):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/bDeviceClass\x00', 0x0, 0x0)
read(r1, &(0x7f0000000300), 0x100)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xa1, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x80000001)

1m48.280390855s ago: executing program 1 (id=1182):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
r3 = inotify_init1(0x800)
inotify_add_watch(r3, &(0x7f0000000640)='.\x00', 0x80000001)
fallocate(0xffffffffffffffff, 0x0, 0x8e14, 0x8ffff)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000500)=0xffff, 0x9, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x9f, &(0x7f0000000540)=""/159, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94)
socket$netlink(0x10, 0x3, 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x620000, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, 0x0)
io_submit(0x0, 0x0, 0x0)

1m44.775377218s ago: executing program 1 (id=1183):
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x8001389, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)

1m41.383439228s ago: executing program 36 (id=1167):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/bDeviceClass\x00', 0x0, 0x0)
read(r1, &(0x7f0000000300), 0x100)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xa1, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x80000001)

1m29.456454245s ago: executing program 37 (id=1183):
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x8001389, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)

24.1287893s ago: executing program 9 (id=1282):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0x48}}], 0x1, 0x48001)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0)
rename(0x0, &(0x7f0000002a80)='./file0\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd2a, 0x25dfdbf9, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x1)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(r1, 0xa, &(0x7f0000000000)={0x6, 0x9}, &(0x7f0000000080))
fsopen(&(0x7f00000001c0)='pipefs\x00', 0x0)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f0000000580)=0x1)

19.873397733s ago: executing program 0 (id=1287):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x8, 0x0, 0x1, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000001180)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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")

19.842630984s ago: executing program 3 (id=1288):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x84)
flock(r3, 0x1)
flock(r3, 0x1)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_clone(0x820000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x12)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000000)={0x140, 0x4, 0x8, 0xff7d, 0x5, "236b30542f2625a0"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)="306663353a313232373ad36c06c0f16b68656d", 0x13)

18.535713128s ago: executing program 9 (id=1290):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='tcp', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='127.0.0.1', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='ip', 0x2)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn', 0x37)

17.791258578s ago: executing program 3 (id=1291):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000200))
setreuid(0x0, 0x0)
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)

17.33302297s ago: executing program 2 (id=1292):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000180)=0x1, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "3c0c89", 0x8, 0x2b, 0x1, @private2, @local, {[@hopopts={0xff}]}}}}}, 0x0)

17.032781008s ago: executing program 3 (id=1293):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c0003007678"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8000000"], 0x2c}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x1a}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028000000000ac141400"], 0x3c}}, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r2, 0x1)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x4, 0x0, 0xff, 0x0, 0x6, 0x800}, &(0x7f0000000240)=0x20)
socket(0x1, 0x1, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
epoll_create1(0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard')
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
ioctl$TCXONC(0xffffffffffffffff, 0x4b45, 0x3)

16.261053379s ago: executing program 3 (id=1294):
syz_open_dev$loop(&(0x7f0000000040), 0xa, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syslog(0x3, &(0x7f0000000300)=""/121, 0x79)

15.265476565s ago: executing program 2 (id=1295):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000800)={0x4, 0x2, 0x40000}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x35a37000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00')
readv(r3, &(0x7f0000000400)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x3)

14.643150082s ago: executing program 9 (id=1297):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r3, 0x0, 0x0)

13.633080549s ago: executing program 9 (id=1298):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='tcp', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='8009', 0x4)
write(0xffffffffffffffff, &(0x7f0000000400), 0x0)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn', 0x37)

13.446219394s ago: executing program 6 (id=1299):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8)
tkill(0x0, 0x2a)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r4 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101b43, 0x19)

13.19233213s ago: executing program 0 (id=1300):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)

11.792127727s ago: executing program 0 (id=1301):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0x48}}], 0x1, 0x48001)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0)
rename(0x0, &(0x7f0000002a80)='./file0\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd2a, 0x25dfdbf9, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(r1, 0xa, &(0x7f0000000000)={0x6, 0x9}, &(0x7f0000000080))
fsopen(&(0x7f00000001c0)='pipefs\x00', 0x0)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f0000000580)=0x1)

11.791692377s ago: executing program 6 (id=1302):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7}, 0x2000)

10.532656751s ago: executing program 6 (id=1303):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x24, 0x1e, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {}, {0x10, 0x3}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x38c6bb6e6757a39b}, 0x80)
syz_io_uring_setup(0x126d, &(0x7f0000000200)={0x0, 0x9b8e, 0x0, 0x80000000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e723000000ffdbdf251500000024001d8120"], 0x38}}, 0x0)

8.918026023s ago: executing program 2 (id=1304):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000200))
setreuid(0x0, 0x0)
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)

7.962655249s ago: executing program 0 (id=1305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c0003007678"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8000000"], 0x2c}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x1a}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028000000000ac141400"], 0x3c}}, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r2, 0x1)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x4, 0x0, 0xff, 0x0, 0x6, 0x800}, &(0x7f0000000240)=0x20)
socket(0x1, 0x1, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
epoll_create1(0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard')
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
ioctl$TCXONC(0xffffffffffffffff, 0x4b45, 0x3)

7.889974291s ago: executing program 6 (id=1306):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x800000, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000001c0))
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000040))
r4 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x2, '\x00', '\x00', '\x00', 0x5, 0x5d05, 0x7, 0xf, "38d4fc00"})
ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000080)=0x80000000)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x30}, 0x4048080)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c02"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000140)={0x1, 0x68, "e3e76b9ca71d7b85729404f679e5361a893481242dadbc492deeb0906984e0a7c3b7a0ddea2eda5073604d6fe6bcf25b14d32515737b55f49f33e85961ddec0e21aecafd073481050666b974c1eb3ee9210f61c571558e4d6d51dedba818bc43a2b4cd428cf43dfb"})
syz_usb_control_io$uac3(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00aaf800"/13], 0x0, 0x0, 0x0, 0x0})
lseek(r2, 0x86, 0x1)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f00000011c0)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x310, 0x8, 0xd, 0x1, 0x40, 0x40}, 0x53, &(0x7f0000001100)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x9, 0x0, 0xb, [0x30, 0xffc000, 0xc030, 0xffc0c0, 0x17, 0x3f00]}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0xbf07, 0xf, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f6e695fcbda471a3a5d3febd985f41a9"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x7, 0x8}]}, 0x1, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x3409}}]})
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x701, 0x0, 0x0, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
syz_usb_control_io$uac1(r5, &(0x7f00000005c0)={0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="0003ea000000ea22455154205c1b2a262b272dd6ced88a60d097e6cc5a5d8a1522523a7bf4ae27c65bc7ddb78dd644572c14028458e3fb0ded1541bade79c3cf6a041acc91872ea55dada25424d67be33916e09aa8b5003cf1b2f8f0768db42e85083a213a2b070e7c0c9f252f659624191ecfdd11a84c7e1cee9859dd316222c0ce79e202302f44c681e42f9ca175028b2e3da0fffae4ff2aad25a855f3cca24984c0dcd7ad3da51daa888d55cc318c146da3b2d533c7fb5f31671ac028dd7c79fa950d7c10f7a5204f3e15943f273364fe"], &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}}, &(0x7f0000000e00)={0x24, &(0x7f0000000640)={0x0, 0x14}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x81, 0x1, "d1"}, &(0x7f0000000780)={0x20, 0x82, 0x2, "f98d"}, &(0x7f00000007c0)={0x20, 0x83, 0x1, "cc"}, &(0x7f0000000800)={0x20, 0x84, 0x1, 'L'}, &(0x7f0000000840)={0x20, 0x85, 0x3, "dbc1aa"}})
write$char_usb(r6, 0x0, 0x0)
ioctl$EVIOCGKEY(r6, 0x80404518, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x2000004, 0x0, 0xa, 0x18, "c9e2b354e9b9856669bde58cd7af40fd150b70aac11c2e16bd5bba78634793ddd7aae008000000bf01933bdb6fd7ecdd91b59ca8d5410000001000", "07a9400978042a8bfe140f580000dfff0000080000040031623e1a0000000008", [0x7a, 0xd]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000003000/0x4000)=nil, &(0x7f0000168000/0x4000)=nil], &(0x7f0000000100)=[0x1, 0x1], 0x0, 0x2)

7.216601329s ago: executing program 9 (id=1307):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008)
socket$pppoe(0x18, 0x1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x70bd2c, 0x0, {0x7, 0x0, 0x0, 0x0, 0x10000, 0xc40a}}, 0x20}}, 0x4040014)

5.342869318s ago: executing program 3 (id=1308):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r6=>0x0)
read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(r6, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xffffff4c}])
write$nbd(0xffffffffffffffff, 0x0, 0x8d)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

3.684856423s ago: executing program 3 (id=1309):
r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r0, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480))
syz_open_procfs(r1, &(0x7f00000000c0)='oom_score_adj\x00')
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c)
r2 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000008189899a1fea9fd2d3945b80d6327bd32ac2478b7a5b9b719bccbf84270be5534512acf9bfb650ec311885", @ANYRES16=r3, @ANYBLOB="00082bbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x1)
syz_open_dev$mtd(&(0x7f0000000100), 0x2, 0x10b241)

3.562239656s ago: executing program 6 (id=1310):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
request_key(0x0, &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='nl80211\x00', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000340)=""/102400, 0x19000)
process_vm_writev(r1, &(0x7f000001a480)=[{0x0}, {&(0x7f0000019340)=""/148, 0x94}], 0x2, &(0x7f000001a800)=[{0x0}, {&(0x7f000001a5c0)=""/203, 0xcb}, {&(0x7f000001a6c0)=""/252, 0xfc}, {&(0x7f000001a7c0)=""/62, 0x3e}], 0x4, 0x0)

3.311856112s ago: executing program 0 (id=1311):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
r2 = eventfd2(0x7, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r4=>r3})
ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086201, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x2)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r0, &(0x7f0000000340)="d1", 0x1, 0x6, 0x0, 0x5, r2}])
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
io_destroy(r1)
close_range(r5, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)='1199 0017\x00', 0x9)
ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f00000001c0)={0x13, 0x0, 0x2, 0x1, 0x7fff})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.145445063s ago: executing program 9 (id=1312):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000680)={0x1, &(0x7f00000005c0)=[{}]})

1.980953527s ago: executing program 6 (id=1313):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000140)=ANY=[@ANYRES64])
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000500)={'broute\x00', 0x0, 0x4, 0x98, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f00000005c0)=""/152}, &(0x7f0000000580)=0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16], 0x48)
tkill(0x0, 0x12)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

1.971776008s ago: executing program 0 (id=1314):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x161001, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000800)=0x10001)
getsockopt$inet6_int(r0, 0x29, 0x7, 0xffffffffffffffff, &(0x7f0000001100))
syz_usb_connect$uac2(0x5, 0xec, &(0x7f0000000d40)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902da000301004002080b0002010120eb090400000001012000092401faff074c00100c2403040304fe01090b000611240802010000000001000200030003000a240404802f14849dee0c240304000400020083007f072404"], 0x0)

1.671692836s ago: executing program 2 (id=1315):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x400000001fb, 0x101301)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='dummy_hcd.0', 0xb)
close(0x3)

1.209776788s ago: executing program 2 (id=1316):
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCSETA(r2, 0x80047456, &(0x7f0000000140)={0x10, 0x0, 0x9, 0x1ff, 0x10, "b4ba1c25a953278a"})
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
r3 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0)
read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020)

0s ago: executing program 2 (id=1317):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x81)
ioctl$HIDIOCSFEATURE(r6, 0xc0404806, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))

kernel console output (not intermixed with test programs):

  458.964583][ T7845] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7847] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7845]
[  460.635807][ T7852] JFS: discard option not supported on device
[  460.678318][ T7852] Mount JFS Failure: -22
[  460.682645][ T7852] jfs_mount failed w/return code = -22
[  460.827804][ T7865] netlink: 152 bytes leftover after parsing attributes in process `syz.0.863'.
[  461.375651][   T26] audit: type=1800 audit(1786731434.558:324): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.866" name="attr_allow_any_host" dev="configfs" ino=44596 res=0 errno=0
[  461.379140][ T7876] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  461.464363][ T7878] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  461.683253][ T7876] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  461.741671][   T26] audit: type=1800 audit(1786731434.558:325): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.866" name="addr_trtype" dev="configfs" ino=44597 res=0 errno=0
[  461.857302][   T26] audit: type=1800 audit(1786731434.638:326): pid=7878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.866" name="addr_traddr" dev="configfs" ino=44017 res=0 errno=0
[  461.944031][   T26] audit: type=1800 audit(1786731434.858:327): pid=7881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.866" name="addr_trsvcid" dev="configfs" ino=44600 res=0 errno=0
[  463.190375][   T26] audit: type=1800 audit(1786731436.368:328): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.869" name="addr_trtype" dev="configfs" ino=45064 res=0 errno=0
[  463.233390][ T7898] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  463.295629][ T7900] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  463.320284][   T26] audit: type=1800 audit(1786731436.468:329): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.869" name="addr_traddr" dev="configfs" ino=45065 res=0 errno=0
[  463.384597][   T26] audit: type=1800 audit(1786731436.478:330): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.869" name="addr_trsvcid" dev="configfs" ino=45066 res=0 errno=0
[  465.546704][ T7925] loop3: detected capacity change from 0 to 128
[  466.245806][ T7925] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  466.265852][ T7925] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  466.426256][   T26] audit: type=1800 audit(1786731439.608:331): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.877" name="attr_allow_any_host" dev="configfs" ino=45110 res=0 errno=0
[  466.450340][ T7936] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  466.462625][ T7936] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  466.474399][ T7936] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  466.513222][ T7930] JFS: discard option not supported on device
[  466.520936][   T26] audit: type=1800 audit(1786731439.628:332): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.877" name="addr_trtype" dev="configfs" ino=45111 res=0 errno=0
[  466.647687][ T7930] Mount JFS Failure: -22
[  466.726532][ T7930] jfs_mount failed w/return code = -22
[  466.752096][   T26] audit: type=1800 audit(1786731439.638:333): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.877" name="addr_traddr" dev="configfs" ino=45112 res=0 errno=0
[  466.885256][   T26] audit: type=1800 audit(1786731439.658:334): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.877" name="addr_trsvcid" dev="configfs" ino=45113 res=0 errno=0
[  467.521906][ T7954] netlink: 152 bytes leftover after parsing attributes in process `syz.0.880'.
[  467.997620][ T7958] siw: device registration error -23
[  469.230643][   T26] audit: type=1800 audit(1786731442.408:335): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.881" name="attr_allow_any_host" dev="configfs" ino=44716 res=0 errno=0
[  469.252030][    C1] vkms_vblank_simulate: vblank timer overrun
[  469.391068][ T7970] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  469.764728][   T26] audit: type=1800 audit(1786731442.408:336): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.881" name="addr_trtype" dev="configfs" ino=44717 res=0 errno=0
[  469.785335][    C1] vkms_vblank_simulate: vblank timer overrun
[  470.543943][ T7970] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  470.574386][   T26] audit: type=1800 audit(1786731443.398:337): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.881" name="addr_traddr" dev="configfs" ino=45164 res=0 errno=0
[  470.656297][   T26] audit: type=1800 audit(1786731443.718:338): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.881" name="addr_trsvcid" dev="configfs" ino=45165 res=0 errno=0
[  472.616478][   T26] audit: type=1800 audit(1786731445.798:339): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.890" name="attr_allow_any_host" dev="configfs" ino=45200 res=0 errno=0
[  472.635227][ T8002] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  472.685609][ T8002] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  472.740818][ T8002] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  472.754654][   T26] audit: type=1800 audit(1786731445.798:340): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.890" name="addr_trtype" dev="configfs" ino=45201 res=0 errno=0
[  472.852456][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'.
[  472.864381][   T26] audit: type=1800 audit(1786731445.868:341): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.890" name="addr_traddr" dev="configfs" ino=45202 res=0 errno=0
[  472.884976][    C1] vkms_vblank_simulate: vblank timer overrun
[  472.970478][   T26] audit: type=1800 audit(1786731445.918:342): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.890" name="addr_trsvcid" dev="configfs" ino=45203 res=0 errno=0
[  477.094262][ T8039] loop1: detected capacity change from 0 to 1024
[  477.744455][ T4232] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  478.034384][ T4232] usb 8-1: Using ep0 maxpacket: 32
[  478.319618][   T26] audit: type=1800 audit(1786731451.498:343): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.903" name="attr_allow_any_host" dev="configfs" ino=45258 res=0 errno=0
[  478.365943][ T4232] usb 8-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40
[  478.396560][ T8070] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  478.421291][ T4232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.505612][ T4232] usb 8-1: Product: syz
[  478.537341][   T26] audit: type=1800 audit(1786731451.558:344): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.903" name="addr_trtype" dev="configfs" ino=45259 res=0 errno=0
[  478.584509][ T4232] usb 8-1: Manufacturer: syz
[  478.591828][ T8070] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  478.645742][ T4232] usb 8-1: SerialNumber: syz
[  478.878505][   T26] audit: type=1800 audit(1786731451.758:345): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.903" name="addr_trsvcid" dev="configfs" ino=45260 res=0 errno=0
[  479.180398][ T4232] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  479.212193][ T4232] usb 8-1: unit 1 not found!
[  479.361605][ T4232] usb 8-1: unit 5 not found!
[  479.745079][ T8085] JFS: discard option not supported on device
[  479.805122][ T8085] Mount JFS Failure: -22
[  479.845527][ T4232] usb 8-1: USB disconnect, device number 2
[  479.868163][ T8085] jfs_mount failed w/return code = -22
[  480.466862][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  480.637220][   T26] audit: type=1800 audit(1786731453.818:346): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.900" name="attr_allow_any_host" dev="configfs" ino=44832 res=0 errno=0
[  480.679392][ T8101] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  480.691371][ T8100] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  480.735782][ T8100] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  480.754675][ T8101] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  480.776291][   T26] audit: type=1800 audit(1786731453.858:347): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.909" name="addr_trtype" dev="configfs" ino=45316 res=0 errno=0
[  480.799323][ T8100] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  480.843643][   T26] audit: type=1800 audit(1786731453.918:348): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.900" name="addr_traddr" dev="configfs" ino=44854 res=0 errno=0
[  482.788846][ T8103] loop3: detected capacity change from 0 to 1024
[  483.136632][   T26] audit: type=1800 audit(1786731453.928:349): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.909" name="addr_trsvcid" dev="configfs" ino=44859 res=0 errno=0
[  483.158047][   T26] audit: type=1800 audit(1786731453.928:350): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.909" name="addr_adrfam" dev="configfs" ino=44860 res=0 errno=0
[  484.518601][ T8130] loop0: detected capacity change from 0 to 1024
[  485.194094][ T8130] EXT4-fs (loop0): Ignoring removed orlov option
[  485.791510][ T8130] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  486.059120][ T8150] capability: warning: `syz.6.921' uses deprecated v2 capabilities in a way that may be insecure
[  486.350488][   T26] audit: type=1800 audit(1786731459.528:351): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.925" name="attr_allow_any_host" dev="configfs" ino=45388 res=0 errno=0
[  486.389993][ T8161] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  486.531023][ T8162] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  486.543502][ T8162] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  486.545489][ T8161] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  486.603739][   T26] audit: type=1800 audit(1786731459.568:352): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.925" name="addr_trtype" dev="configfs" ino=45393 res=0 errno=0
[  486.845080][ T8161] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  486.864769][   T26] audit: type=1800 audit(1786731459.718:353): pid=8164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.925" name="addr_traddr" dev="configfs" ino=45394 res=0 errno=0
[  486.905829][   T26] audit: type=1800 audit(1786731459.718:354): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.923" name="addr_trsvcid" dev="configfs" ino=45395 res=0 errno=0
[  487.344479][   T26] audit: type=1800 audit(1786731459.718:355): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.923" name="addr_adrfam" dev="configfs" ino=45396 res=0 errno=0
[  488.885431][   T26] audit: type=1800 audit(1786731460.018:356): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.925" name="addr_trsvcid" dev="configfs" ino=45398 res=0 errno=0
[  493.482217][   T26] audit: type=1800 audit(1786731466.658:357): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.936" name="attr_allow_any_host" dev="configfs" ino=44942 res=0 errno=0
[  493.483028][ T8222] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  493.596413][ T8224] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  493.624455][   T26] audit: type=1800 audit(1786731466.658:358): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.936" name="addr_trtype" dev="configfs" ino=44943 res=0 errno=0
[  493.651567][ T8226] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  493.699932][ T8226] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  493.705045][   T26] audit: type=1800 audit(1786731466.778:359): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.936" name="addr_traddr" dev="configfs" ino=45537 res=0 errno=0
[  493.776256][ T8226] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  493.814997][   T26] audit: type=1800 audit(1786731466.778:360): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.936" name="addr_trsvcid" dev="configfs" ino=45538 res=0 errno=0
[  493.914696][   T26] audit: type=1800 audit(1786731466.778:361): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.936" name="addr_adrfam" dev="configfs" ino=45539 res=0 errno=0
[  494.029984][   T26] audit: type=1800 audit(1786731466.958:362): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.938" name="addr_trsvcid" dev="configfs" ino=45545 res=0 errno=0
[  496.259418][ T8251] loop1: detected capacity change from 0 to 128
[  498.255709][ T8251] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  498.273506][ T8251] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  499.471326][ T4232] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  499.535811][ T8277] loop1: detected capacity change from 0 to 8
[  499.673027][ T8277] SQUASHFS error: Unable to read directory block [1d0:0]
[  499.845650][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  499.955151][   T26] audit: type=1800 audit(1786731473.138:363): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="attr_allow_any_host" dev="configfs" ino=45011 res=0 errno=0
[  499.977952][ T8283] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  500.038866][ T8283] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  500.044845][   T26] audit: type=1800 audit(1786731473.158:364): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="addr_trtype" dev="configfs" ino=45614 res=0 errno=0
[  500.049985][ T4232] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00
[  500.128124][   T26] audit: type=1800 audit(1786731473.218:365): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="addr_traddr" dev="configfs" ino=45012 res=0 errno=0
[  500.130474][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.213706][ T4232] usb 1-1: Product: syz
[  500.227843][   T26] audit: type=1800 audit(1786731473.218:366): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="addr_trsvcid" dev="configfs" ino=45615 res=0 errno=0
[  500.262860][ T4232] usb 1-1: Manufacturer: syz
[  500.271733][ T4232] usb 1-1: SerialNumber: syz
[  500.327983][ T8288] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  500.343403][ T4232] usb-storage 1-1:1.0: USB Mass Storage device detected
[  500.360358][   T26] audit: type=1800 audit(1786731473.218:367): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="addr_adrfam" dev="configfs" ino=45616 res=0 errno=0
[  500.405702][ T8288] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  500.454777][ T4232] scsi host1: usb-storage 1-1:1.0
[  500.471257][ T8288] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  500.564398][   T26] audit: type=1800 audit(1786731473.508:368): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.950" name="attr_allow_any_host" dev="configfs" ino=45021 res=0 errno=0
[  500.594697][ T4232] usb 1-1: USB disconnect, device number 9
[  500.664374][   T26] audit: type=1800 audit(1786731473.508:369): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.950" name="addr_trtype" dev="configfs" ino=45022 res=0 errno=0
[  500.755310][   T26] audit: type=1800 audit(1786731473.588:370): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.950" name="addr_traddr" dev="configfs" ino=45628 res=0 errno=0
[  502.637994][   T26] audit: type=1800 audit(1786731473.648:371): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.950" name="addr_trsvcid" dev="configfs" ino=45630 res=0 errno=0
[  503.531303][ T8322] loop3: detected capacity change from 0 to 512
[  503.599515][ T8327] loop1: detected capacity change from 0 to 128
[  503.901824][ T8327] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  504.073910][ T8327] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  504.314414][ T4679] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  504.365499][ T8321] lo speed is unknown, defaulting to 1000
[  504.540884][ T8321] chnl_net:caif_netlink_parms(): no params data found
[  504.602086][ T8322] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  504.634801][ T4679] usb 1-1: not running at top speed; connect to a high speed hub
[  504.642850][   T26] audit: type=1800 audit(1786731477.798:372): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.960" name="attr_allow_any_host" dev="configfs" ino=45715 res=0 errno=0
[  504.664561][ T8346] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  504.676997][ T8346] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  504.683755][ T8322] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  504.714633][ T4679] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  504.737310][ T4679] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  504.796676][ T4679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.869182][ T4679] usb 1-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  505.088668][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.114851][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.123618][ T8321] device bridge_slave_0 entered promiscuous mode
[  505.234082][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.293683][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.304574][ T4679] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  505.409623][ T8321] device bridge_slave_1 entered promiscuous mode
[  505.496420][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.508652][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.554837][ T8321] team0: Port device team_slave_0 added
[  505.565031][ T8321] team0: Port device team_slave_1 added
[  505.582977][ T4679] usb 1-1: USB disconnect, device number 10
[  505.590984][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.603957][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.665488][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.709582][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.716867][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.743442][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.802817][ T8321] device hsr_slave_0 entered promiscuous mode
[  505.824487][ T8321] device hsr_slave_1 entered promiscuous mode
[  505.844673][ T8321] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  505.862643][ T8321] Cannot create hsr debugfs directory
[  505.905305][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  505.905321][   T26] audit: type=1800 audit(1786731479.088:377): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.964" name="attr_allow_any_host" dev="configfs" ino=46170 res=0 errno=0
[  505.934553][ T8373] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  505.946571][ T8373] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  505.956415][ T4251] Bluetooth: hci1: command 0x0409 tx timeout
[  505.964910][ T8373] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  505.996018][   T26] audit: type=1800 audit(1786731479.108:378): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.964" name="addr_trtype" dev="configfs" ino=46171 res=0 errno=0
[  506.114074][   T26] audit: type=1800 audit(1786731479.128:379): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.964" name="addr_traddr" dev="configfs" ino=46172 res=0 errno=0
[  506.230048][   T26] audit: type=1800 audit(1786731479.138:380): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.964" name="addr_trsvcid" dev="configfs" ino=46173 res=0 errno=0
[  507.594801][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  507.601162][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  508.557739][ T1108] Bluetooth: hci1: command 0x041b tx timeout
[  508.740474][ T8395] loop1: detected capacity change from 0 to 512
[  508.806693][   T26] audit: type=1800 audit(1786731481.988:381): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="attr_allow_any_host" dev="configfs" ino=45986 res=0 errno=0
[  508.838868][ T8399] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  508.848824][   T26] audit: type=1800 audit(1786731481.988:382): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="addr_trtype" dev="configfs" ino=45987 res=0 errno=0
[  508.858977][ T8395] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  508.877525][ T8399] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  508.906981][ T8321] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  508.943065][   T26] audit: type=1800 audit(1786731482.048:383): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="addr_traddr" dev="configfs" ino=46209 res=0 errno=0
[  508.977712][ T8321] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  509.004844][   T26] audit: type=1800 audit(1786731482.048:384): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="addr_trsvcid" dev="configfs" ino=46210 res=0 errno=0
[  509.027965][   T26] audit: type=1800 audit(1786731482.048:385): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="addr_adrfam" dev="configfs" ino=46211 res=0 errno=0
[  509.057196][ T8395] EXT4-fs (loop1): orphan cleanup on readonly fs
[  509.146924][ T8395] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[  509.173073][ T8321] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  509.227414][ T8321] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  509.424962][ T8395] Quota error (device loop1): write_blk: dquota write failed
[  509.433138][ T8395] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.969: Failed to acquire dquot type 0
[  509.523730][ T8395] EXT4-fs (loop1): 1 truncate cleaned up
[  509.619457][ T8395] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback.
[  509.655302][ T8410] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  509.713909][ T8410] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  509.756614][ T8410] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  509.804948][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.909078][ T8321] 8021q: adding VLAN 0 to HW filter on device team0
[  509.945670][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  509.959879][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  510.008034][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  510.018548][ T8415] loop0: detected capacity change from 0 to 2048
[  510.055999][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  510.091286][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.098503][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.151664][ T8415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  510.180388][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  510.215078][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  510.260802][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.268437][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.336703][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  510.351952][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  510.388488][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  510.445777][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  510.485752][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  510.582488][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  510.605223][ T4230] Bluetooth: hci1: command 0x040f tx timeout
[  510.662454][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  510.691741][ T8429] loop0: detected capacity change from 0 to 2048
[  510.793472][ T8432] loop1: detected capacity change from 0 to 128
[  510.894596][ T8432] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  510.921499][ T8432] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  511.120874][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  511.253589][ T8429] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  511.438217][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  511.451381][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  511.451396][   T26] audit: type=1800 audit(1786731484.628:390): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.979" name="file1" dev="loop0" ino=15 res=0 errno=0
[  511.516293][ T8429] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  511.536534][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  511.585267][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  511.639643][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  511.644140][ T8429] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  511.695246][ T8429] EXT4-fs (loop0): This should not happen!! Data will be lost
[  511.695246][ T8429] 
[  511.716836][ T8321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  511.772601][ T8443] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  511.779030][   T26] audit: type=1800 audit(1786731484.948:391): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.982" name="attr_allow_any_host" dev="configfs" ino=46340 res=0 errno=0
[  511.814551][ T8429] EXT4-fs (loop0): Total free blocks count 0
[  511.838341][ T8446] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  511.850639][ T8429] EXT4-fs (loop0): Free/Dirty block details
[  511.865687][ T8439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  511.901442][ T8449] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  511.950263][ T8443] EXT4-fs (loop0): This should not happen!! Data will be lost
[  511.950263][ T8443] 
[  511.989610][   T26] audit: type=1800 audit(1786731485.018:392): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.982" name="addr_trtype" dev="configfs" ino=46341 res=0 errno=0
[  512.017728][ T8429] EXT4-fs (loop0): free_blocks=2415919104
[  512.034423][ T8443] EXT4-fs (loop0): Total free blocks count 0
[  512.040922][ T8443] EXT4-fs (loop0): Free/Dirty block details
[  512.055238][ T8443] EXT4-fs (loop0): free_blocks=2415919104
[  512.128385][   T26] audit: type=1800 audit(1786731485.068:393): pid=8449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.982" name="addr_traddr" dev="configfs" ino=46342 res=0 errno=0
[  512.155587][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  512.163769][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  512.185927][   T26] audit: type=1800 audit(1786731485.078:394): pid=8449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.982" name="addr_trsvcid" dev="configfs" ino=46343 res=0 errno=0
[  512.272508][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.318501][   T26] audit: type=1800 audit(1786731485.078:395): pid=8449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.982" name="addr_adrfam" dev="configfs" ino=46344 res=0 errno=0
[  512.599758][ T8465] netlink: 152 bytes leftover after parsing attributes in process `syz.6.986'.
[  512.684882][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[  512.814725][ T8468] siw: device registration error -23
[  513.645933][ T8481] loop1: detected capacity change from 0 to 8
[  513.714625][ T4264] Bluetooth: hci5: command 0x0406 tx timeout
[  513.876083][ T8489] loop0: detected capacity change from 0 to 8
[  513.881089][ T8483] loop6: detected capacity change from 0 to 2048
[  513.991246][ T8483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  514.157319][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  514.189090][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  514.199440][ T8489] SQUASHFS error: Unable to read directory block [1d0:62]
[  514.209759][ T8489] SQUASHFS error: Unable to read directory block [1d0:0]
[  514.237331][ T8489] SQUASHFS error: Unable to read directory block [1d0:0]
[  514.377426][   T26] audit: type=1800 audit(1786731487.548:396): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.992" name="attr_allow_any_host" dev="configfs" ino=47167 res=0 errno=0
[  514.466287][ T8499] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  514.469889][ T8501] SQUASHFS error: Unable to read directory block [1d0:0]
[  514.725667][   T26] audit: type=1800 audit(1786731487.628:397): pid=8499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.992" name="addr_trtype" dev="configfs" ino=47168 res=0 errno=0
[  514.773608][   T26] audit: type=1800 audit(1786731487.718:398): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.992" name="addr_traddr" dev="configfs" ino=47169 res=0 errno=0
[  514.836281][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  514.868686][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  514.916201][ T8321] device veth0_vlan entered promiscuous mode
[  514.930067][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  514.951767][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  515.052260][ T8321] device veth1_vlan entered promiscuous mode
[  515.112450][   T26] audit: type=1326 audit(1786731488.288:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.991" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fe9e470d9 code=0x0
[  515.184613][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  515.192937][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  517.065985][ T8321] device veth0_macvtap entered promiscuous mode
[  517.093744][ T8498] netlink: 'syz.1.991': attribute type 3 has an invalid length.
[  517.136784][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  517.169120][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  517.225420][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  517.434463][ T8321] device veth1_macvtap entered promiscuous mode
[  517.548781][ T8533] loop0: detected capacity change from 0 to 128
[  517.748754][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.888782][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.318059][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.380841][ T8535] netlink: 152 bytes leftover after parsing attributes in process `syz.1.998'.
[  518.394335][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.404197][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.498601][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.656625][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.806021][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.941793][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.095933][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.219028][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.227229][ T8533] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  519.235946][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.249715][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.259345][ T8533] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  519.260298][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.279841][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.289772][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.300345][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.310866][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.321617][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.339916][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.350879][   T26] audit: type=1800 audit(1786731492.528:400): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1000" name="attr_allow_any_host" dev="configfs" ino=47208 res=0 errno=0
[  519.374109][ T8541] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  519.383356][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.411057][   T26] audit: type=1800 audit(1786731492.558:401): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1000" name="addr_trtype" dev="configfs" ino=47209 res=0 errno=0
[  519.455683][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.551562][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  519.582195][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  519.601405][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  519.692685][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  519.701238][   T26] audit: type=1800 audit(1786731492.578:402): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1000" name="addr_traddr" dev="configfs" ino=47210 res=0 errno=0
[  519.889213][ T8321] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.959275][ T8321] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.165793][ T8321] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.177007][ T8321] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.043462][   T26] audit: type=1800 audit(1786731495.218:403): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1004" name="attr_allow_any_host" dev="configfs" ino=46482 res=0 errno=0
[  522.065769][ T8559] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  522.087355][ T8559] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  522.154356][ T8559] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  522.163201][   T26] audit: type=1800 audit(1786731495.248:404): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1004" name="addr_trtype" dev="configfs" ino=46483 res=0 errno=0
[  522.201423][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.237208][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.279266][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  522.299141][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.324415][   T26] audit: type=1800 audit(1786731495.268:405): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1004" name="addr_traddr" dev="configfs" ino=46484 res=0 errno=0
[  522.346417][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.452931][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  522.479649][   T26] audit: type=1800 audit(1786731495.328:406): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1004" name="addr_trsvcid" dev="configfs" ino=47341 res=0 errno=0
[  522.944641][ T8579] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  522.975083][   T26] audit: type=1800 audit(1786731495.328:407): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1004" name="addr_adrfam" dev="configfs" ino=47342 res=0 errno=0
[  523.295026][   T26] audit: type=1800 audit(1786731496.098:408): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1010" name="attr_allow_any_host" dev="configfs" ino=46526 res=0 errno=0
[  523.385231][ T8586] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1011'.
[  523.560637][   T26] audit: type=1800 audit(1786731496.098:409): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1010" name="addr_trtype" dev="configfs" ino=46527 res=0 errno=0
[  523.658506][ T8596] loop8: detected capacity change from 0 to 128
[  524.796589][ T8596] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  525.329651][ T8596] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  525.377112][   T26] audit: type=1800 audit(1786731496.178:410): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1010" name="addr_traddr" dev="configfs" ino=47476 res=0 errno=0
[  527.561248][ T8624] loop3: detected capacity change from 0 to 512
[  527.637700][ T8624] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  527.637700][ T8624] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  527.637700][ T8624] 
[  527.795332][ T8624] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  527.958753][ T8624] EXT4-fs (loop3): 1 truncate cleaned up
[  527.975296][ T8624] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,nogrpid,nogrpid,,errors=continue. Quota mode: none.
[  528.046220][ T8639] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  528.051925][   T26] audit: type=1800 audit(1786731501.228:411): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1023" name="attr_allow_any_host" dev="configfs" ino=46599 res=0 errno=0
[  528.114667][   T26] audit: type=1800 audit(1786731501.228:412): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1023" name="addr_trtype" dev="configfs" ino=46600 res=0 errno=0
[  528.230539][ T8647] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1025'.
[  528.254347][   T26] audit: type=1800 audit(1786731501.298:413): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1023" name="addr_traddr" dev="configfs" ino=46601 res=0 errno=0
[  528.362285][ T8647] siw: device registration error -23
[  528.392446][ T8653] loop0: detected capacity change from 0 to 512
[  528.399166][   T26] audit: type=1800 audit(1786731501.338:414): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1023" name="addr_trsvcid" dev="configfs" ino=46606 res=0 errno=0
[  528.636388][ T8653] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  528.784144][ T8653] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  528.866848][ T8658] loop8: detected capacity change from 0 to 512
[  529.276500][ T8658] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  529.454421][ T8653] EXT4-fs error (device loop0): ext4_readdir:223: inode #12: comm syz.0.1026: path /241/file0/file0: directory fails checksum at offset 0
[  529.580846][ T8658] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  530.058482][ T8679] loop8: detected capacity change from 0 to 2048
[  530.134081][ T8679] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  530.501567][ T8693] loop0: detected capacity change from 0 to 512
[  530.688353][ T8693] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  530.794027][ T8700] loop6: detected capacity change from 0 to 128
[  530.832213][ T8700] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  530.868303][ T8700] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  531.153576][ T8693] EXT4-fs (loop0): 1 truncate cleaned up
[  531.336577][ T8693] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none.
[  531.485714][ T8693] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.1033: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  531.532168][   T26] audit: type=1800 audit(1786731504.708:415): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1036" name="attr_allow_any_host" dev="configfs" ino=47597 res=0 errno=0
[  531.580857][ T8704] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  531.624438][ T8693] EXT4-fs (loop0): Remounting filesystem read-only
[  531.659362][   T26] audit: type=1800 audit(1786731504.758:416): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1036" name="addr_trtype" dev="configfs" ino=47601 res=0 errno=0
[  531.710650][ T8706] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.1033: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  531.732502][ T8709] loop1: detected capacity change from 0 to 512
[  531.745073][ T8706] EXT4-fs (loop0): Remounting filesystem read-only
[  531.759832][   T26] audit: type=1800 audit(1786731504.818:417): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1036" name="addr_traddr" dev="configfs" ino=47605 res=0 errno=0
[  531.809106][ T8709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  531.858990][ T8709] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1037: bad orphan inode 3855
[  531.871350][   T26] audit: type=1800 audit(1786731504.828:418): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1036" name="addr_trsvcid" dev="configfs" ino=47606 res=0 errno=0
[  531.893083][ T8709] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  531.912727][ T8717] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1039'.
[  531.947473][ T8717] siw: device registration error -23
[  532.024402][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1041'.
[  532.096381][ T8723] loop0: detected capacity change from 0 to 512
[  532.294209][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1041'.
[  532.340289][ T8723] EXT4-fs (loop0): Ignoring removed orlov option
[  532.352339][ T8723] EXT4-fs (loop0): Invalid default hash set in the superblock
[  532.656902][ T8739] loop1: detected capacity change from 0 to 128
[  532.706567][ T8737] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  532.713175][ T8739] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  532.739153][ T4679] hid-generic 0005:15C2:05DF.0003: item fetching failed at offset 0/1
[  532.803174][ T8739] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  532.867913][ T4679] hid-generic: probe of 0005:15C2:05DF.0003 failed with error -22
[  534.164901][   T26] audit: type=1800 audit(1786731507.348:419): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1049" name="attr_allow_any_host" dev="configfs" ino=47715 res=0 errno=0
[  534.240325][ T8754] loop6: detected capacity change from 0 to 1024
[  534.249277][ T8758] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  534.279691][   T26] audit: type=1800 audit(1786731507.428:420): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1049" name="addr_trtype" dev="configfs" ino=47716 res=0 errno=0
[  534.320921][ T4432] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  534.401840][ T8762] loop0: detected capacity change from 0 to 256
[  534.414360][   T26] audit: type=1800 audit(1786731507.528:421): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1049" name="addr_traddr" dev="configfs" ino=46758 res=0 errno=0
[  534.486941][ T8754] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[  534.550243][   T26] audit: type=1800 audit(1786731507.528:422): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1049" name="addr_trsvcid" dev="configfs" ino=46759 res=0 errno=0
[  534.601381][ T8762] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  534.606535][ T8764] loop1: detected capacity change from 0 to 512
[  534.679891][ T8764] EXT4-fs (loop1): Ignoring removed oldalloc option
[  534.766956][ T8764] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,nolazytime,noquota,oldalloc,,errors=continue. Quota mode: writeback.
[  534.793263][ T8764] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  538.609603][   T21] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  538.647433][   T21] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  540.798497][ T8794] loop8: detected capacity change from 0 to 2048
[  540.984658][ T8794] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  541.202387][   T26] audit: type=1800 audit(1786731514.378:423): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1062" name="attr_allow_any_host" dev="configfs" ino=46834 res=0 errno=0
[  541.235686][ T8811] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  541.284683][   T26] audit: type=1800 audit(1786731514.418:424): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1062" name="addr_trtype" dev="configfs" ino=46835 res=0 errno=0
[  541.379040][   T26] audit: type=1800 audit(1786731514.458:425): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1062" name="addr_traddr" dev="configfs" ino=46836 res=0 errno=0
[  541.593401][ T8794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  541.620463][   T26] audit: type=1800 audit(1786731514.458:426): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1062" name="addr_trsvcid" dev="configfs" ino=46837 res=0 errno=0
[  542.596707][   T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  542.669077][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1059'.
[  542.746380][ T8830] loop8: detected capacity change from 0 to 16
[  543.512191][   T26] audit: type=1800 audit(1786731516.688:427): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1065" name="attr_allow_any_host" dev="configfs" ino=46876 res=0 errno=0
[  543.537453][ T8836] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  543.560784][ T8830] erofs: (device loop8): mounted with root inode @ nid 36.
[  543.612630][ T8836] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  543.627418][   T21] usb 1-1: Using ep0 maxpacket: 32
[  543.874559][   T21] usb 1-1: unable to get BOS descriptor or descriptor too short
[  545.835188][   T26] audit: type=1800 audit(1786731516.718:428): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1065" name="addr_trtype" dev="configfs" ino=47762 res=0 errno=0
[  545.859061][   T21] usb 1-1: unable to read config index 0 descriptor/start: -71
[  545.866829][   T26] audit: type=1800 audit(1786731516.718:429): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1065" name="addr_traddr" dev="configfs" ino=47763 res=0 errno=0
[  545.887711][   T21] usb 1-1: can't read configurations, error -71
[  545.934512][ T8846] loop0: detected capacity change from 0 to 1024
[  545.941898][   T26] audit: type=1800 audit(1786731516.718:430): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1065" name="addr_trsvcid" dev="configfs" ino=47764 res=0 errno=0
[  545.963210][   T26] audit: type=1800 audit(1786731516.748:431): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1065" name="addr_adrfam" dev="configfs" ino=47765 res=0 errno=0
[  546.104106][   T26] audit: type=1800 audit(1786731519.278:432): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1068" name="attr_allow_any_host" dev="configfs" ino=46885 res=0 errno=0
[  546.113175][ T8850] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  546.162728][ T8855] loop6: detected capacity change from 0 to 512
[  546.207921][   T26] audit: type=1800 audit(1786731519.278:433): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1068" name="addr_trtype" dev="configfs" ino=46886 res=0 errno=0
[  546.270388][ T8859] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  546.447625][ T8855] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1070: iget: bad i_size value: 38620345925642
[  546.547612][ T8850] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  546.647282][   T26] audit: type=1800 audit(1786731519.558:434): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1068" name="addr_traddr" dev="configfs" ino=46891 res=0 errno=0
[  546.693768][ T8855] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1070: couldn't read orphan inode 15 (err -117)
[  546.921009][ T8855] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  547.007220][   T26] audit: type=1800 audit(1786731519.678:435): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1068" name="addr_trsvcid" dev="configfs" ino=46892 res=0 errno=0
[  547.028631][   T26] audit: type=1800 audit(1786731519.708:436): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1068" name="addr_adrfam" dev="configfs" ino=46893 res=0 errno=0
[  547.207018][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1076'.
[  547.385526][  T155] hfsplus: b-tree write err: -5, ino 25
[  547.441424][  T155] hfsplus: b-tree write err: -5, ino 4
[  547.475571][ T8862] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  547.498087][  T155] hfsplus: b-tree write err: -5, ino 2
[  547.507577][  T155] hfsplus: b-tree write err: -5, ino 26
[  547.513753][  T155] hfsplus: b-tree write err: -5, ino 27
[  549.900817][   T26] audit: type=1800 audit(1786731523.078:437): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1081" name="attr_allow_any_host" dev="configfs" ino=46920 res=0 errno=0
[  550.087106][   T26] audit: type=1800 audit(1786731523.148:438): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1081" name="addr_trtype" dev="configfs" ino=46921 res=0 errno=0
[  550.109054][   T26] audit: type=1800 audit(1786731523.188:439): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1081" name="addr_traddr" dev="configfs" ino=46922 res=0 errno=0
[  550.130826][   T26] audit: type=1800 audit(1786731523.258:440): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1081" name="addr_trsvcid" dev="configfs" ino=46923 res=0 errno=0
[  550.132711][ T8891] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  550.153512][   T26] audit: type=1800 audit(1786731523.308:441): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1081" name="addr_adrfam" dev="configfs" ino=46924 res=0 errno=0
[  550.266886][ T8893] loop0: detected capacity change from 0 to 512
[  554.502435][   T26] audit: type=1800 audit(1786731527.588:442): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1085" name="attr_allow_any_host" dev="configfs" ino=46939 res=0 errno=0
[  555.411943][ T8914] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  555.421812][ T8918] loop8: detected capacity change from 0 to 256
[  555.431849][   T26] audit: type=1800 audit(1786731528.588:443): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1085" name="addr_trtype" dev="configfs" ino=47858 res=0 errno=0
[  555.536311][   T26] audit: type=1800 audit(1786731528.718:444): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1085" name="addr_traddr" dev="configfs" ino=46950 res=0 errno=0
[  555.668915][   T26] audit: type=1800 audit(1786731528.718:445): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1085" name="addr_trsvcid" dev="configfs" ino=46951 res=0 errno=0
[  555.698001][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1088'.
[  556.319548][   T26] audit: type=1800 audit(1786731529.498:446): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1087" name="attr_allow_any_host" dev="configfs" ino=47870 res=0 errno=0
[  556.383943][ T8932] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  556.504509][ T8932] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  556.504529][   T26] audit: type=1800 audit(1786731529.558:447): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1087" name="addr_trtype" dev="configfs" ino=46965 res=0 errno=0
[  556.557532][ T8934] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  556.769657][   T26] audit: type=1800 audit(1786731529.678:448): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1087" name="addr_traddr" dev="configfs" ino=47871 res=0 errno=0
[  556.800502][ T8937] loop8: detected capacity change from 0 to 512
[  556.934618][   T26] audit: type=1800 audit(1786731529.738:449): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1087" name="addr_trsvcid" dev="configfs" ino=46966 res=0 errno=0
[  557.098886][   T26] audit: type=1800 audit(1786731529.738:450): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1087" name="addr_adrfam" dev="configfs" ino=46967 res=0 errno=0
[  557.301049][   T26] audit: type=1800 audit(1786731530.478:451): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1093" name="attr_allow_any_host" dev="configfs" ino=47889 res=0 errno=0
[  557.337545][ T8955] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  557.434113][ T8955] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  557.541102][ T8937] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  558.376709][ T8937] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  558.748903][ T8968] EXT4-fs error (device loop8): ext4_ind_map_blocks:604: inode #18: comm syz.8.1091: Can't allocate blocks for non-extent mapped inodes with bigalloc
[  558.930884][ T8979] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  559.584412][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  559.584431][   T26] audit: type=1800 audit(1786731532.728:458): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1098" name="addr_traddr" dev="configfs" ino=47919 res=0 errno=0
[  559.951234][ T8979] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  560.032250][ T8968] EXT4-fs (loop8): Remounting filesystem read-only
[  560.110163][   T26] audit: type=1800 audit(1786731532.728:459): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1098" name="addr_trsvcid" dev="configfs" ino=47920 res=0 errno=0
[  560.283280][ T8993] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  561.252815][ T9000] loop0: detected capacity change from 0 to 512
[  561.311552][ T9000] EXT4-fs (loop0): Ignoring removed bh option
[  561.394371][ T9000] EXT4-fs (loop0): Ignoring removed nobh option
[  561.637240][ T9000] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.1103: bad orphan inode 13
[  561.648146][ T9000] ext4_test_bit(bit=12, block=4) = 1
[  561.653565][ T9000] is_bad_inode(inode)=0
[  561.657874][ T9000] NEXT_ORPHAN(inode)=0
[  561.663147][ T9000] max_ino=32
[  561.666472][ T9000] i_nlink=1
[  561.669713][ T9000] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,nobh,nogrpid,barrier=0x000000000000001c,,errors=continue. Quota mode: none.
[  562.510693][ T9000] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.1103: Hash code is SIPHASH, but hash not in dirent
[  562.602199][ T9000] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1103: Corrupt directory, running e2fsck is recommended
[  562.756598][ T9000] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.1103: Hash code is SIPHASH, but hash not in dirent
[  562.874305][ T9016] loop6: detected capacity change from 0 to 128
[  562.960261][ T9016] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  563.019505][ T9016] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  563.184742][ T9000] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1103: Corrupt directory, running e2fsck is recommended
[  566.096802][ T9027] loop4: detected capacity change from 0 to 7
[  566.223143][ T6143]  loop4:
[  566.226784][ T6143] loop4: partition table partially beyond EOD, truncated
[  566.428642][ T9027]  loop4:
[  566.431878][ T9027] loop4: partition table partially beyond EOD, truncated
[  567.255287][   T26] audit: type=1800 audit(1786731540.438:460): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1112" name="attr_allow_any_host" dev="configfs" ino=48016 res=0 errno=0
[  567.315190][ T9035] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  567.375392][   T26] audit: type=1800 audit(1786731540.498:461): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1112" name="addr_trtype" dev="configfs" ino=48181 res=0 errno=0
[  567.418347][ T9035] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  567.466249][   T26] audit: type=1800 audit(1786731540.598:462): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1112" name="addr_traddr" dev="configfs" ino=48182 res=0 errno=0
[  567.617139][ T9042] loop3: detected capacity change from 0 to 256
[  567.624534][   T13] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  567.630815][   T26] audit: type=1800 audit(1786731540.598:463): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1112" name="addr_trsvcid" dev="configfs" ino=48183 res=0 errno=0
[  568.632010][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  568.638572][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  569.394468][   T13] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  569.406405][   T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.640605][ T9060] loop3: detected capacity change from 0 to 8
[  569.673949][ T9059] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  569.690119][   T13] cdc_acm 9-1:1.0: ttyACM0: USB ACM device
[  569.834754][ T9059] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0
[  569.972617][ T9064] loop0: detected capacity change from 0 to 512
[  569.979365][ T9059] syz.3.1117 (9059) used greatest stack depth: 20208 bytes left
[  570.013171][   T13] usb 9-1: USB disconnect, device number 2
[  571.620571][ T9064] EXT4-fs (loop0): orphan cleanup on readonly fs
[  571.726515][ T9064] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present
[  571.806308][ T9064] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  571.856995][ T9064] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1118: Failed to acquire dquot type 1
[  571.879771][ T9073] loop8: detected capacity change from 0 to 1024
[  571.914531][ T9064] EXT4-fs (loop0): 1 truncate cleaned up
[  571.954685][ T9064] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback.
[  572.031591][ T9064] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  572.082840][ T9064] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[  572.093516][ T9073] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  572.185394][ T9073] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  572.488461][ T9073] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  575.958646][ T9091] loop3: detected capacity change from 0 to 128
[  576.751492][   T26] audit: type=1800 audit(1786731549.928:464): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1124" name="attr_allow_any_host" dev="configfs" ino=48247 res=0 errno=0
[  577.146769][ T9089] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  577.892243][   T26] audit: type=1800 audit(1786731550.178:465): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1124" name="addr_trtype" dev="configfs" ino=48091 res=0 errno=0
[  577.925358][ T9089] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  577.949092][   T26] audit: type=1800 audit(1786731551.018:466): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1124" name="addr_traddr" dev="configfs" ino=48256 res=0 errno=0
[  578.279134][ T9091] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  578.310254][ T9091] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  578.445113][   T26] audit: type=1800 audit(1786731551.108:467): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1124" name="addr_trsvcid" dev="configfs" ino=48092 res=0 errno=0
[  578.780157][ T9111] loop8: detected capacity change from 0 to 256
[  579.046553][ T9119] loop6: detected capacity change from 0 to 512
[  579.200820][ T9119] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  579.469532][ T9119] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  579.525706][ T9129] loop0: detected capacity change from 0 to 8
[  579.567451][ T9119] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1130: bg 0: block 248: padding at end of block bitmap is not set
[  579.623553][ T9119] Quota error (device loop6): write_blk: dquota write failed
[  579.631289][ T9119] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  579.641694][ T9119] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1130: Failed to acquire dquot type 1
[  579.659838][ T9119] EXT4-fs (loop6): 1 truncate cleaned up
[  579.687408][ T9119] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  580.158377][ T4430] Quota error (device loop6): remove_tree: Getting block too big (0 >= 6)
[  580.193928][ T4430] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:23: Failed to release dquot type 1
[  580.207972][   T26] audit: type=1800 audit(1786731553.388:468): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1137" name="attr_allow_any_host" dev="configfs" ino=49158 res=0 errno=0
[  580.232616][ T9137] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  580.278483][   T26] audit: type=1800 audit(1786731553.408:469): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1137" name="addr_trtype" dev="configfs" ino=49159 res=0 errno=0
[  580.337417][ T9137] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  580.340043][ T9135] loop1: detected capacity change from 0 to 4096
[  580.664774][   T26] audit: type=1800 audit(1786731553.488:470): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1137" name="addr_traddr" dev="configfs" ino=48354 res=0 errno=0
[  582.785739][ T9135] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  584.330981][ T9167] loop3: detected capacity change from 0 to 128
[  585.156132][ T9167] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  585.179646][ T9167] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  586.551525][ T4251] kernel write not supported for file /input/event1 (pid: 4251 comm: kworker/0:7)
[  587.990996][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  587.991013][   T26] audit: type=1800 audit(1786731561.168:472): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1149" name="attr_allow_any_host" dev="configfs" ino=49224 res=0 errno=0
[  588.059590][ T9190] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  588.108063][ T9190] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  588.125792][ T9194] loop8: detected capacity change from 0 to 8
[  588.140363][   T26] audit: type=1800 audit(1786731561.238:473): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1149" name="addr_trtype" dev="configfs" ino=49225 res=0 errno=0
[  588.267686][ T9194] SQUASHFS error: Unable to read directory block [1d0:62]
[  588.323932][   T26] audit: type=1800 audit(1786731561.278:474): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1149" name="addr_traddr" dev="configfs" ino=49226 res=0 errno=0
[  588.448018][   T26] audit: type=1800 audit(1786731561.278:475): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1149" name="addr_trsvcid" dev="configfs" ino=49227 res=0 errno=0
[  590.269930][ T9211] loop3: detected capacity change from 0 to 1024
[  590.356626][ T9211] EXT4-fs (loop3): Ignoring removed orlov option
[  590.496547][ T9211] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  591.724599][   T26] audit: type=1800 audit(1786731564.908:476): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1161" name="attr_allow_any_host" dev="configfs" ino=49343 res=0 errno=0
[  591.747869][ T9234] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  591.807152][ T9234] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  591.841673][   T26] audit: type=1800 audit(1786731564.928:477): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1161" name="addr_trtype" dev="configfs" ino=49344 res=0 errno=0
[  591.958750][ T9239] loop3: detected capacity change from 0 to 8
[  591.995386][   T26] audit: type=1800 audit(1786731564.988:478): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1161" name="addr_traddr" dev="configfs" ino=49345 res=0 errno=0
[  592.107248][   T26] audit: type=1800 audit(1786731564.988:479): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1161" name="addr_trsvcid" dev="configfs" ino=49346 res=0 errno=0
[  593.154868][ T9239] SQUASHFS error: Unable to read directory block [1d0:62]
[  594.765019][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'.
[  594.882433][ T9260] JFS: discard option not supported on device
[  594.882869][ T9260] Mount JFS Failure: -22
[  594.882885][ T9260] jfs_mount failed w/return code = -22
[  597.057915][   T26] audit: type=1800 audit(1786731570.238:480): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1176" name="attr_allow_any_host" dev="configfs" ino=49392 res=0 errno=0
[  597.175323][ T9272] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  597.193489][   T26] audit: type=1800 audit(1786731570.358:481): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1176" name="addr_trtype" dev="configfs" ino=49393 res=0 errno=0
[  597.260521][ T9272] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  597.284294][   T26] audit: type=1800 audit(1786731570.438:482): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1176" name="addr_traddr" dev="configfs" ino=49394 res=0 errno=0
[  597.404308][   T26] audit: type=1800 audit(1786731570.438:483): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1176" name="addr_trsvcid" dev="configfs" ino=49395 res=0 errno=0
[  598.750626][ T9277] loop6: detected capacity change from 0 to 1024
[  599.291332][   T26] audit: type=1326 audit(1786731572.468:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.0.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef30cc90d9 code=0x7ffc0000
[  599.524562][   T26] audit: type=1326 audit(1786731572.528:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.0.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef30cc90d9 code=0x7ffc0000
[  600.572614][   T26] audit: type=1326 audit(1786731572.528:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.0.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef30cc90d9 code=0x7ffc0000
[  600.727763][ T9294] loop0: detected capacity change from 0 to 8
[  600.787614][   T26] audit: type=1326 audit(1786731572.558:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.0.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef30cca947 code=0x7ffc0000
[  600.959500][   T26] audit: type=1326 audit(1786731572.558:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.0.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fef30c8990e code=0x7ffc0000
[  601.158972][   T26] audit: type=1326 audit(1786731572.558:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.0.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fef30c8990e code=0x7ffc0000
[  608.293927][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1186'.
[  611.495886][ T9338] loop3: detected capacity change from 0 to 8
[  611.532174][ T9335] lo speed is unknown, defaulting to 1000
[  611.923613][ T9343] loop6: detected capacity change from 0 to 128
[  611.938126][ T9343] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  612.680915][ T9343] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  613.394376][ T1108] Bluetooth: hci6: command 0x0409 tx timeout
[  613.525377][ T9335] chnl_net:caif_netlink_parms(): no params data found
[  615.983395][ T4251] Bluetooth: hci6: command 0x041b tx timeout
[  616.470037][ T4251] Bluetooth: hci3: command 0x0406 tx timeout
[  616.887638][  T155] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.091607][ T9358] loop6: detected capacity change from 0 to 1024
[  617.246812][ T9358] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  617.284589][ T9358] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.399527][  T155] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.436746][ T9358] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm syz.6.1196: lblock 0 mapped to illegal pblock 0 (length 1)
[  617.544372][ T9358] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  617.602367][ T9358] EXT4-fs (loop6): This should not happen!! Data will be lost
[  617.602367][ T9358] 
[  617.615749][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.632632][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.676674][ T9335] device bridge_slave_0 entered promiscuous mode
[  617.733555][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.785568][ T9366] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1196: lblock 0 mapped to illegal pblock 0 (length 1)
[  617.818684][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.878501][ T9335] device bridge_slave_1 entered promiscuous mode
[  617.888644][ T9366] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1196: lblock 0 mapped to illegal pblock 0 (length 1)
[  617.974608][ T9366] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1196: lblock 0 mapped to illegal pblock 0 (length 1)
[  618.055757][ T9366] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1196: lblock 0 mapped to illegal pblock 0 (length 1)
[  618.756295][ T1108] Bluetooth: hci6: command 0x040f tx timeout
[  618.957396][ T9367] EXT4-fs error (device loop6): ext4_free_blocks:6231: comm syz.6.1196: Freeing blocks not in datazone - block = 0, count = 1
[  619.032946][  T155] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.378130][ T9375] loop0: detected capacity change from 0 to 2048
[  619.417976][ T9335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.467487][  T155] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.586640][ T9335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  619.650953][ T9375] UDF-fs: error (device loop0): udf_read_tagged: block 97: CRC length 511 exceeds block size
[  619.831304][ T9375] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2)
[  619.862147][ T9335] team0: Port device team_slave_0 added
[  619.887232][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'.
[  620.227062][ T9335] team0: Port device team_slave_1 added
[  621.337464][ T4251] Bluetooth: hci6: command 0x0419 tx timeout
[  623.276727][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.325646][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.384309][ T9335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.458629][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.472069][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.734388][ T9335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  624.300546][ T9399] lo speed is unknown, defaulting to 1000
[  624.333445][ T9335] device hsr_slave_0 entered promiscuous mode
[  624.387453][ T9335] device hsr_slave_1 entered promiscuous mode
[  624.414619][ T9335] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  624.422276][ T9335] Cannot create hsr debugfs directory
[  624.459011][ T4198] syz-executor (4198) used greatest stack depth: 20160 bytes left
[  624.926085][ T9418] loop6: detected capacity change from 0 to 8
[  624.944157][ T9399] chnl_net:caif_netlink_parms(): no params data found
[  626.652969][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[  627.882110][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.964441][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.972781][ T9399] device bridge_slave_0 entered promiscuous mode
[  628.087901][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.097076][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.167340][ T9399] device bridge_slave_1 entered promiscuous mode
[  628.281291][ T9335] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  628.685396][ T4251] Bluetooth: hci1: command 0x041b tx timeout
[  628.846906][ T9335] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  628.874344][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.991898][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  629.020012][ T9335] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  629.105781][ T9335] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  629.219446][ T9399] team0: Port device team_slave_0 added
[  629.226901][ T9458] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1212'.
[  629.312729][ T9399] team0: Port device team_slave_1 added
[  629.397817][ T9461] siw: device registration error -23
[  629.404476][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  629.413451][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  630.160933][  T155] device hsr_slave_0 left promiscuous mode
[  630.195943][  T155] device hsr_slave_1 left promiscuous mode
[  630.241376][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  630.278739][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  631.673187][ T4251] Bluetooth: hci1: command 0x040f tx timeout
[  631.735616][ T9467] loop6: detected capacity change from 0 to 8192
[  631.787076][ T9467] attempt to access beyond end of device
[  631.787076][ T9467] loop6: rw=0, want=57848, limit=8192
[  631.815008][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  631.833349][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  631.855331][ T9467] Buffer I/O error on dev loop6, logical block 57847, async page read
[  631.878413][ T9467] attempt to access beyond end of device
[  631.878413][ T9467] loop6: rw=0, want=57848, limit=8192
[  631.894924][  T155] device bridge_slave_1 left promiscuous mode
[  631.901354][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.913189][ T9467] Buffer I/O error on dev loop6, logical block 57847, async page read
[  631.965907][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  631.965922][   T26] audit: type=1800 audit(1786731605.148:496): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1206" name="file2" dev="loop6" ino=1048639 res=0 errno=0
[  632.058821][  T155] device bridge_slave_0 left promiscuous mode
[  632.078606][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.110566][  T155] device veth1_macvtap left promiscuous mode
[  632.184355][  T155] device veth0_macvtap left promiscuous mode
[  632.190604][  T155] device veth1_vlan left promiscuous mode
[  632.233386][  T155] device veth0_vlan left promiscuous mode
[  632.860816][  T155] team0 (unregistering): Port device team_slave_1 removed
[  632.899598][  T155] team0 (unregistering): Port device team_slave_0 removed
[  632.943552][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  632.983695][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.188475][  T155] bond0 (unregistering): Released all slaves
[  633.317389][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'.
[  633.409592][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  633.443184][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.541966][ T9484] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  633.575859][ T9399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  633.604925][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.622364][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  633.664357][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.714845][ T4251] Bluetooth: hci1: command 0x0419 tx timeout
[  633.736892][ T9399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  635.112897][ T9335] 8021q: adding VLAN 0 to HW filter on device team0
[  635.196103][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  635.203896][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  635.364787][ T9399] device hsr_slave_0 entered promiscuous mode
[  635.425687][ T9399] device hsr_slave_1 entered promiscuous mode
[  635.486482][ T9399] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  635.504619][ T9399] Cannot create hsr debugfs directory
[  635.510286][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  635.520010][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  635.529341][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.536470][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.545054][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  635.599613][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  636.475161][ T1485] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.482328][ T1485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  636.648229][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  636.691038][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  636.723416][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  636.784121][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  636.833566][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  636.871220][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  637.391858][ T9504] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1220'.
[  638.374947][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  638.437595][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  638.491544][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  638.536465][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  638.574715][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  638.604766][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  638.652175][ T9335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  643.036032][ T9335] 8021q: adding VLAN 0 to HW filter on device batadv0
[  643.043262][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  643.063842][ T9534] loop0: detected capacity change from 0 to 2048
[  643.084900][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  643.184820][ T9534] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  643.267988][ T9534] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  644.303688][ T9542] loop0: detected capacity change from 0 to 512
[  646.251485][ T9555] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  647.253234][ T9562] loop3: detected capacity change from 0 to 1024
[  647.272200][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  647.292705][ T9562] EXT4-fs (loop3): Ignoring removed orlov option
[  647.299616][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  647.426150][ T9562] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  647.475910][ T9335] device veth0_vlan entered promiscuous mode
[  647.525661][ T9399] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  647.595247][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  647.629009][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  647.669712][ T9399] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  647.721630][ T9399] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  647.824138][ T9335] device veth1_vlan entered promiscuous mode
[  647.841397][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  647.849563][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  647.964982][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  648.002011][ T9399] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  648.691294][ T9575] JFS: discard option not supported on device
[  648.738199][ T9575] Mount JFS Failure: -22
[  648.746371][ T9576] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1224'.
[  648.783479][ T9575] jfs_mount failed w/return code = -22
[  648.902442][ T9578] siw: device registration error -23
[  649.015975][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'.
[  649.133838][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  649.353228][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  649.459358][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  649.601927][ T9335] device veth0_macvtap entered promiscuous mode
[  650.541675][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  650.598828][ T9335] device veth1_macvtap entered promiscuous mode
[  651.461065][ T9585] loop3: detected capacity change from 0 to 1024
[  651.694034][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  651.718472][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  651.764288][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  651.804329][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  651.875299][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  651.924275][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  651.934152][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.003987][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.034343][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.094334][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.135769][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.143837][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  652.175159][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  652.233279][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  652.266523][ T9603] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  652.344280][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.364707][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  652.404278][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.464260][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  652.504254][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.514128][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  652.561449][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.591440][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  652.624252][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.670721][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.697638][   T26] audit: type=1800 audit(1786731625.878:497): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1236" name="attr_allow_any_host" dev="configfs" ino=49966 res=0 errno=0
[  652.727040][ T9607] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  652.737674][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  652.754903][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  652.786617][   T26] audit: type=1800 audit(1786731625.908:498): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1236" name="addr_trtype" dev="configfs" ino=49968 res=0 errno=0
[  652.820896][ T9607] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  652.874378][   T26] audit: type=1800 audit(1786731625.998:499): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1236" name="addr_traddr" dev="configfs" ino=49978 res=0 errno=0
[  652.905575][ T9335] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.934370][ T9335] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  652.963495][ T9335] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  652.973629][   T26] audit: type=1800 audit(1786731626.028:500): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1236" name="addr_trsvcid" dev="configfs" ino=50395 res=0 errno=0
[  653.001222][ T9335] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.053056][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.085149][   T26] audit: type=1800 audit(1786731626.028:501): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1236" name="addr_adrfam" dev="configfs" ino=50396 res=0 errno=0
[  653.186857][ T9615] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  653.194628][   T26] audit: type=1800 audit(1786731626.368:502): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1237" name="attr_allow_any_host" dev="configfs" ino=50008 res=0 errno=0
[  653.242228][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  653.251246][ T9615] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  653.277641][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  653.289030][ T9616] loop6: detected capacity change from 0 to 2048
[  653.315945][ T9399] 8021q: adding VLAN 0 to HW filter on device team0
[  653.348523][   T26] audit: type=1800 audit(1786731626.368:503): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1237" name="addr_trtype" dev="configfs" ino=50009 res=0 errno=0
[  653.414015][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  653.434869][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  653.454836][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.461957][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.469763][   T26] audit: type=1800 audit(1786731626.368:504): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1237" name="addr_traddr" dev="configfs" ino=50010 res=0 errno=0
[  653.493042][   T26] audit: type=1800 audit(1786731626.418:505): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1237" name="addr_trsvcid" dev="configfs" ino=50014 res=0 errno=0
[  653.515153][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  653.522699][   T26] audit: type=1800 audit(1786731626.428:506): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1237" name="addr_adrfam" dev="configfs" ino=50015 res=0 errno=0
[  653.523690][ T9616] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  653.568486][ T9616] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  653.617904][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  653.635923][ T9616] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  653.648450][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  653.804351][ T9616] EXT4-fs (loop6): This should not happen!! Data will be lost
[  653.804351][ T9616] 
[  653.815047][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.822164][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.850240][ T9616] EXT4-fs (loop6): Total free blocks count 0
[  653.885689][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  653.906372][ T9616] EXT4-fs (loop6): Free/Dirty block details
[  653.912453][ T9616] EXT4-fs (loop6): free_blocks=4096
[  653.960288][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.984554][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.994704][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  654.013430][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  654.068563][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  655.075432][ T9616] EXT4-fs (loop6): dirty_blocks=32
[  655.080704][ T9616] EXT4-fs (loop6): Block reservation details
[  655.114730][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  655.179556][ T9616] EXT4-fs (loop6): i_reserved_data_blocks=2
[  655.185103][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  655.225702][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  655.245126][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  655.268434][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  655.304869][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  655.333350][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  655.367250][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  655.474367][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'.
[  655.478920][ T4432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.521670][ T4432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.552332][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  657.154033][ T9651] loop0: detected capacity change from 0 to 1024
[  657.373637][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  657.405277][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  657.420487][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  657.470595][ T9658] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  657.537206][  T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.583142][ T9658] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  657.661344][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  657.701052][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  657.767969][  T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.939287][  T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.298652][ T9399] device veth0_vlan entered promiscuous mode
[  659.826276][ T9669] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9670] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9669]
[  660.762111][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  660.809298][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  660.844629][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  660.874923][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  660.930580][  T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.977591][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1245'.
[  661.135576][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  661.135591][   T26] audit: type=1800 audit(1786731634.318:511): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1246" name="attr_allow_any_host" dev="configfs" ino=50164 res=0 errno=0
[  661.165313][ T9676] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  661.239145][ T9676] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  661.243710][   T26] audit: type=1800 audit(1786731634.348:512): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1246" name="addr_trtype" dev="configfs" ino=50165 res=0 errno=0
[  661.269250][ T9672] device hsr_slave_1 left promiscuous mode
[  661.313936][ T9399] device veth1_vlan entered promiscuous mode
[  661.343594][   T26] audit: type=1800 audit(1786731634.408:513): pid=9677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1246" name="addr_traddr" dev="configfs" ino=50166 res=0 errno=0
[  661.683051][   T26] audit: type=1800 audit(1786731634.458:514): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1246" name="addr_trsvcid" dev="configfs" ino=50167 res=0 errno=0
[  661.704849][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  661.946934][   T26] audit: type=1800 audit(1786731634.458:515): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1246" name="addr_adrfam" dev="configfs" ino=50168 res=0 errno=0
[  662.054824][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  662.132335][ T9399] device veth0_macvtap entered promiscuous mode
[  662.266596][ T9399] device veth1_macvtap entered promiscuous mode
[  662.362375][ T9686] loop0: detected capacity change from 0 to 512
[  662.368986][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.388474][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.401902][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.453242][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.514258][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.555747][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.604261][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.645254][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.685751][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.734371][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.774259][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.824269][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.896022][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_0
[  662.965893][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  663.022482][ T9686] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  663.030505][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  663.053941][ T9704] JFS: discard option not supported on device
[  663.259625][ T9686] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1242: invalid indirect mapped block 256 (level 1)
[  663.356331][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1249'.
[  663.767301][ T9704] Mount JFS Failure: -22
[  663.771841][ T9686] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1242: invalid indirect mapped block 2683928664 (level 1)
[  663.926226][ T9704] jfs_mount failed w/return code = -22
[  663.936374][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  663.955453][ T9686] EXT4-fs (loop0): 1 truncate cleaned up
[  663.976648][ T9686] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,auto_da_alloc=0x000000000000000a,journal_ioprio=0x0000000000000005,nodioread_nolock,min_batch_time=0x0000000000000031,usrjquota=.jqfmt=vfsv1,noauto_da_alloc,jqfmt=vfsv0,resuid=0x0000000000000000,,,errors=continue. Quota mode: writeback.
[  664.045059][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.124486][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.174298][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.226103][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.302338][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.156356][ T9716] loop6: detected capacity change from 0 to 1024
[  665.163448][ T9700] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  666.400488][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.461866][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.512566][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.535318][   T26] audit: type=1800 audit(1786731639.718:516): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1252" name="attr_allow_any_host" dev="configfs" ino=51294 res=0 errno=0
[  666.574473][ T9726] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  666.631875][   T26] audit: type=1800 audit(1786731639.748:517): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1252" name="addr_trtype" dev="configfs" ino=51295 res=0 errno=0
[  666.633823][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.715604][   T26] audit: type=1800 audit(1786731639.798:518): pid=9686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1242" name="file0" dev="loop0" ino=13 res=0 errno=0
[  666.736688][ T9726] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  666.784374][   T26] audit: type=1800 audit(1786731639.888:519): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1252" name="addr_traddr" dev="configfs" ino=50765 res=0 errno=0
[  666.814256][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.851215][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.881749][   T26] audit: type=1800 audit(1786731639.898:520): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1252" name="addr_trsvcid" dev="configfs" ino=50766 res=0 errno=0
[  666.914181][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  666.977569][ T9399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.084889][ T9399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.093795][ T9399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.184354][ T9399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  667.246819][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  667.263029][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  669.535355][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.556455][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.596233][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  671.156840][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.185174][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.304882][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  671.447208][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'.
[  671.723867][  T155] IPVS: stopping master sync thread 5811 ...
[  673.497946][  T155] device hsr_slave_0 left promiscuous mode
[  673.517898][  T155] device hsr_slave_1 left promiscuous mode
[  673.594691][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  673.602152][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  674.554172][ T9790] loop2: detected capacity change from 0 to 1024
[  674.605651][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  674.613123][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  676.466722][  T155] device bridge_slave_1 left promiscuous mode
[  676.473022][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.628117][  T155] device bridge_slave_0 left promiscuous mode
[  676.685370][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.275451][ T9809] binder: 9806:9809 ioctl c0306201 2000000003c0 returned -14
[  678.335916][  T155] device veth1_macvtap left promiscuous mode
[  678.342114][  T155] device veth0_macvtap left promiscuous mode
[  678.361167][  T155] device veth1_vlan left promiscuous mode
[  678.396672][  T155] device veth0_vlan left promiscuous mode
[  678.874504][   T26] audit: type=1800 audit(1786731652.058:521): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1264" name="attr_allow_any_host" dev="configfs" ino=51566 res=0 errno=0
[  678.908094][ T9813] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  678.966291][ T9813] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  678.985811][   T26] audit: type=1800 audit(1786731652.088:522): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1264" name="addr_trtype" dev="configfs" ino=51567 res=0 errno=0
[  679.039419][  T155] bond6 (unregistering): Released all slaves
[  679.085274][   T26] audit: type=1800 audit(1786731652.138:523): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1264" name="addr_traddr" dev="configfs" ino=50898 res=0 errno=0
[  679.114300][  T155] bond5 (unregistering): Released all slaves
[  679.160208][  T155] bond4 (unregistering): Released all slaves
[  679.194272][   T26] audit: type=1800 audit(1786731652.148:524): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1264" name="addr_trsvcid" dev="configfs" ino=51568 res=0 errno=0
[  679.223770][  T155] bond3 (unregistering): Released all slaves
[  679.312177][  T155] bond2 (unregistering): Released all slaves
[  679.507574][  T155] bond1 (unregistering): Released all slaves
[  680.445950][ T9828] JFS: discard option not supported on device
[  680.531877][   T26] audit: type=1800 audit(1786731653.708:525): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1267" name="attr_allow_any_host" dev="configfs" ino=51591 res=0 errno=0
[  680.585630][ T9828] Mount JFS Failure: -22
[  680.590044][ T9828] jfs_mount failed w/return code = -22
[  680.601312][ T9830] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  680.638617][   T26] audit: type=1800 audit(1786731653.778:526): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1267" name="addr_trtype" dev="configfs" ino=51592 res=0 errno=0
[  680.685344][ T9832] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  680.738884][   T26] audit: type=1800 audit(1786731653.868:527): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1267" name="addr_traddr" dev="configfs" ino=50916 res=0 errno=0
[  680.786228][ T9830] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  682.256483][   T26] audit: type=1800 audit(1786731653.968:528): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1267" name="addr_trsvcid" dev="configfs" ino=51593 res=0 errno=0
[  682.284486][   T26] audit: type=1800 audit(1786731653.968:529): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1267" name="addr_adrfam" dev="configfs" ino=51594 res=0 errno=0
[  683.883751][  T155] team0 (unregistering): Port device team_slave_1 removed
[  685.305352][  T155] team0 (unregistering): Port device team_slave_0 removed
[  685.444633][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  685.575477][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  685.975091][  T155] bond0 (unregistering): Released all slaves
[  686.209166][   T23] lo speed is unknown, defaulting to 1000
[  686.220236][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'.
[  686.276967][ T9849] loop0: detected capacity change from 0 to 4096
[  686.522618][ T9849] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  686.651867][ T9855] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[  686.834980][   T26] audit: type=1800 audit(1786731660.018:530): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1283" name="attr_allow_any_host" dev="configfs" ino=50945 res=0 errno=0
[  686.934321][   T26] audit: type=1800 audit(1786731660.068:531): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1283" name="addr_trtype" dev="configfs" ino=50946 res=0 errno=0
[  686.984459][ T9858] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  687.060733][ T9865] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  687.074453][   T26] audit: type=1800 audit(1786731660.238:532): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1283" name="addr_traddr" dev="configfs" ino=51618 res=0 errno=0
[  688.694946][   T26] audit: type=1800 audit(1786731660.238:533): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1283" name="addr_trsvcid" dev="configfs" ino=51619 res=0 errno=0
[  690.842209][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  690.851617][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  691.691082][ T9886] netlink: 'syz.2.1289': attribute type 3 has an invalid length.
[  692.568138][ T9900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1293'.
[  692.626554][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'.
[  692.716623][ T9901] JFS: discard option not supported on device
[  692.768118][ T9901] Mount JFS Failure: -22
[  692.772422][ T9901] jfs_mount failed w/return code = -22
[  694.338418][   T26] audit: type=1800 audit(1786731667.518:534): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1290" name="attr_allow_any_host" dev="configfs" ino=51006 res=0 errno=0
[  694.365146][ T9922] "syz.6.1285" (9922) uses obsolete ecb(arc4) skcipher
[  694.395076][ T9920] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  694.445363][ T9920] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  694.473921][ T9925] loop0: detected capacity change from 0 to 512
[  694.481084][   T26] audit: type=1800 audit(1786731667.578:535): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1290" name="addr_trtype" dev="configfs" ino=51656 res=0 errno=0
[  694.515963][ T9926] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  694.563424][ T9925] EXT4-fs (loop0): Test dummy encryption mode enabled
[  694.614555][   T26] audit: type=1800 audit(1786731667.628:536): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1290" name="addr_traddr" dev="configfs" ino=51657 res=0 errno=0
[  694.676918][ T9925] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1287: inode has both inline data and extents flags
[  694.754699][   T26] audit: type=1800 audit(1786731667.698:537): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1290" name="addr_trsvcid" dev="configfs" ino=51013 res=0 errno=0
[  694.776275][ T9925] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1287: couldn't read orphan inode 15 (err -117)
[  694.778969][   T26] audit: type=1800 audit(1786731667.698:538): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1290" name="addr_adrfam" dev="configfs" ino=51014 res=0 errno=0
[  694.825544][ T9925] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  694.877904][ T9932] loop6: detected capacity change from 0 to 1024
[  695.857712][ T9932] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  695.933689][ T9925] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  695.945190][ T9939] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  697.899566][ T9967] loop6: detected capacity change from 0 to 512
[  698.003348][ T9967] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback.
[  698.194842][ T9967] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  698.737429][   T26] audit: type=1800 audit(1786731671.918:539): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1302" name="file1" dev="loop6" ino=15 res=0 errno=0
[  700.760619][ T9983] netlink: 'syz.6.1303': attribute type 3 has an invalid length.
[  701.822956][ T9991] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1305'.
[  701.995401][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'.
[  702.014411][    T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  702.026745][   T26] audit: type=1800 audit(1786731675.208:540): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1298" name="attr_allow_any_host" dev="configfs" ino=51078 res=0 errno=0
[  702.073260][ T9997] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  702.121200][ T9997] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  702.149202][   T26] audit: type=1800 audit(1786731675.238:541): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1298" name="addr_trtype" dev="configfs" ino=51079 res=0 errno=0
[  702.188543][ T9995] JFS: discard option not supported on device
[  702.249971][   T26] audit: type=1800 audit(1786731675.298:542): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1298" name="addr_traddr" dev="configfs" ino=51080 res=0 errno=0
[  702.304293][ T9995] Mount JFS Failure: -22
[  702.308595][ T9995] jfs_mount failed w/return code = -22
[  702.384554][    T7] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  702.393643][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.410927][T10002] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1307'.
[  702.425752][    T7] usb 7-1: config 0 descriptor??
[  702.451656][   T26] audit: type=1800 audit(1786731675.298:543): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1298" name="addr_trsvcid" dev="configfs" ino=51081 res=0 errno=0
[  703.034333][    T7] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00
[  703.042869][    T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  704.009776][    T7] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2
[  704.017425][    T7] [drm] Initialized udl on minor 2
[  705.634760][    T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffff92
[  705.646700][    T7] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  705.664052][T10003] lo speed is unknown, defaulting to 1000
[  705.673991][T10003] lo speed is unknown, defaulting to 1000
[  705.794408][ T1108] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0
[  705.809407][T10003] lo speed is unknown, defaulting to 1000
[  705.869588][T10003] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  705.875463][ T1108] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  705.923920][ T1108] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  705.974520][ T1108] usb 7-1: USB disconnect, device number 4
[  706.929094][T10003] lo speed is unknown, defaulting to 1000
[  706.962817][T10003] lo speed is unknown, defaulting to 1000
[  707.046832][T10003] lo speed is unknown, defaulting to 1000
[  707.053402][T10003] lo speed is unknown, defaulting to 1000
[  707.140602][T10003] lo speed is unknown, defaulting to 1000
[  707.226804][T10003] lo speed is unknown, defaulting to 1000
[  707.942045][T10045] dummy_hcd dummy_hcd.0: remove, state 1
[  707.974295][    T7] hub 1-0:1.0: activate --> -108
[  707.983633][    T7] hub 1-0:1.0: hub_ext_port_status failed (err = -108)
[  707.983941][T10045] usb usb1: USB disconnect, device number 1
[  708.099922][T10045] dummy_hcd dummy_hcd.0: stopped
[  708.104923][T10045] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  711.650029][T10039] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  711.661986][T10039] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  711.670475][T10039] CPU: 0 PID: 10039 Comm: syz.0.1314 Not tainted syzkaller #0
[  711.677957][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  711.688059][T10039] RIP: 0010:set_link_state+0x27/0x11d0
[  711.693657][T10039] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 88 42 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b ab 87 fb 4d 8b 26 4c 89 74 24 10
[  711.713359][T10039] RSP: 0018:ffffc9000321f7c8 EFLAGS: 00010046
[  711.719529][T10039] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802a9c8000
[  711.727542][T10039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  711.735542][T10039] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  711.743542][T10039] R10: dffffc0000000000 R11: fffff52000643ee8 R12: 0000000000000a02
[  711.751557][T10039] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  711.759568][T10039] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  711.768532][T10039] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  711.775144][T10039] CR2: 00007ff67a871440 CR3: 00000001f896e000 CR4: 00000000003506f0
[  711.783147][T10039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  711.791146][T10039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  711.799141][T10039] Call Trace:
[  711.802509][T10039]  <TASK>
[  711.805534][T10039]  ? _raw_spin_lock+0x40/0x40
[  711.810334][T10039]  ? lock_chain_count+0x20/0x20
[  711.815282][T10039]  ? mutex_lock_io_nested+0x60/0x60
[  711.820558][T10039]  dummy_pullup+0xbd/0x120
[  711.825006][T10039]  ? dummy_set_selfpowered+0x150/0x150
[  711.830507][T10039]  usb_gadget_disconnect+0xd0/0x3a0
[  711.835752][T10039]  usb_gadget_remove_driver+0x4a/0x350
[  711.841247][T10039]  usb_gadget_unregister_driver+0x15d/0x4c0
[  711.847261][T10039]  raw_release+0xd6/0x260
[  711.851682][T10039]  ? raw_open+0x510/0x510
[  711.856043][T10039]  __fput+0x212/0x8c0
[  711.860114][T10039]  task_work_run+0x125/0x1a0
[  711.864793][T10039]  do_exit+0x635/0x2110
[  711.869015][T10039]  ? put_task_struct+0x80/0x80
[  711.873818][T10039]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  711.879831][T10039]  ? _raw_spin_lock_irq+0xb7/0xf0
[  711.884891][T10039]  do_group_exit+0x12c/0x2f0
[  711.889535][T10039]  ? lockdep_hardirqs_on+0x94/0x140
[  711.894781][T10039]  get_signal+0x7eb/0x12e0
[  711.899279][T10039]  arch_do_signal_or_restart+0xe6/0x12a0
[  711.905005][T10039]  ? futex_exit_release+0x1c0/0x1c0
[  711.910290][T10039]  ? get_sigframe_size+0x10/0x10
[  711.915262][T10039]  ? __context_tracking_exit+0x4c/0x80
[  711.920764][T10039]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  711.926788][T10039]  ? exit_to_user_mode_loop+0x3b/0x130
[  711.932344][T10039]  exit_to_user_mode_loop+0x9e/0x130
[  711.937656][T10039]  exit_to_user_mode_prepare+0xee/0x180
[  711.943233][T10039]  syscall_exit_to_user_mode+0x16/0x40
[  711.948729][T10039]  do_syscall_64+0x58/0xa0
[  711.953169][T10039]  ? clear_bhb_loop+0x30/0x80
[  711.957870][T10039]  ? clear_bhb_loop+0x30/0x80
[  711.962581][T10039]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  711.968503][T10039] RIP: 0033:0x7fef30cc90d9
[  711.972946][T10039] Code: Unable to access opcode bytes at RIP 0x7fef30cc90af.
[  711.980420][T10039] RSP: 002b:00007fef2ef000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  711.988866][T10039] RAX: fffffffffffffe00 RBX: 00007fef30f51098 RCX: 00007fef30cc90d9
[  711.996877][T10039] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fef30f51098
[  712.004877][T10039] RBP: 00007fef30f51090 R08: 0000000000000000 R09: 0000000000000000
[  712.012894][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.020903][T10039] R13: 00007fef30f51128 R14: 00007ffdab8eae70 R15: 00007ffdab8eaf58
[  712.029076][T10039]  </TASK>
[  712.032143][T10039] Modules linked in:
[  712.036076][T10039] ---[ end trace 54abe9a6bfbb7129 ]---
[  712.041556][T10039] RIP: 0010:set_link_state+0x27/0x11d0
[  712.047227][T10039] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 88 42 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b ab 87 fb 4d 8b 26 4c 89 74 24 10
[  712.066860][T10039] RSP: 0018:ffffc9000321f7c8 EFLAGS: 00010046
[  712.072961][T10039] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802a9c8000
[  712.080964][T10039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  712.088965][T10039] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  712.096962][T10039] R10: dffffc0000000000 R11: fffff52000643ee8 R12: 0000000000000a02
[  712.104961][T10039] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  712.112979][T10039] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  712.121949][T10039] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  712.128561][T10039] CR2: 00007ff67a871440 CR3: 00000001f896e000 CR4: 00000000003506f0
[  712.136555][T10039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  712.144552][T10039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  712.152623][T10039] Kernel panic - not syncing: Fatal exception
[  712.158924][T10039] Kernel Offset: disabled
[  712.163277][T10039] Rebooting in 86400 seconds..