last executing test programs:

15.864283073s ago: executing program 3 (id=380):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r5}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10)
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
munlock(&(0x7f0000cad000/0x1000)=nil, 0x1000)
munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000)
munlock(&(0x7f0000e4f000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000f32000/0x2000)=nil, 0x2000, 0x14000, 0x3, &(0x7f0000abb000/0x14000)=nil)
munlockall()
write$ppp(r8, &(0x7f00000004c0)="97", 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$inet6(r9, &(0x7f0000003c80)={&(0x7f0000003600)={0xa, 0x4a21, 0x0, @dev, 0x6c46}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000003700000000000000000000002800000000000000290000003900000000020201"], 0x40}, 0x0)

14.786193024s ago: executing program 4 (id=381):
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
socket$netlink(0x10, 0x3, 0x0)
getpgrp(0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0)
ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, 0x0)
fanotify_mark(r3, 0x1, 0x2, r3, &(0x7f00000002c0)='./file0\x00')
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x30}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)

14.51285488s ago: executing program 0 (id=383):
syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x4, 0x34, 0x0, 0xf}]}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
lgetxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x25, 0x3c, 0xf3, 0x40, 0x499, 0x1038, 0x5b36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xcc, 0x93, 0xa7, 0x0, [], [{{0x9, 0x5, 0x0, 0x2, 0x10}}]}}]}}]}}, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x706, 0x0, 0x4, 0x8, 0x40, "acc83f3e1f72d6d0fc601889a7c1aa448345d2"})
r1 = socket$inet6(0xa, 0x802, 0x0)
bind$inet6(r1, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}}], 0x1, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
mremap(&(0x7f0000df7000/0x2000)=nil, 0x2000, 0xf000, 0x3, &(0x7f0000dff000/0xf000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000500)=ANY=[], 0x120)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8001}]}}}]}, 0x48}}, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000100)=0x13)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0))
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r5, 0x5406, &(0x7f0000000000)={0x1, 0x1, 0x4, 0x7f, 0xe, "919c08f618eba03c"})
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"})
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0xd)
ioctl$TCXONC(r0, 0x5608, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)

12.864875551s ago: executing program 4 (id=385):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000e50c29451a36c69f293e68b75345ecf8fcd4313042ed43421474ca69f3160b37289c726cb5e44d4e43c78b95996b9e70c6e63541eedd230f0a82f1ea7c29f99069f4bfe218fb5d03000000acbe3bc2702eed6232b128222f7d5c0c1d144407d39612a6cf0fcd349ea2adbe48d8fe8f786e9d0daab700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
geteuid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000001a9, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000600)={0x80000001, 0x9, 0x7fff}, &(0x7f0000000640))
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'team_slave_1\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000013d40)=ANY=[@ANYBLOB="18000000000000100000000000000700b5000000087c9a0095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r7, 0x25, 0x0, @val=@netkit={@prog_fd}}, 0x40)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000120000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0800060002"], 0x28}}, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0)
pread64(r9, &(0x7f00000002c0)=""/40, 0x28, 0x4f)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)

12.780239636s ago: executing program 1 (id=386):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x80, 0x131100)
fcntl$setflags(r0, 0x2, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r5, 0x0)
connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = accept(r5, 0x0, 0x0)
sendto$inet6(r6, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26)
recvmmsg(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=""/222, 0xde}}], 0x2, 0x10002, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x2b)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00')

12.76431927s ago: executing program 3 (id=387):
syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x88, 0x0, 0x1, @dev, @local, {[@routing={0x2e, 0x10, 0x0, 0x5, 0x0, [@remote, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff02, 0x0, 0x0, 0x8007, 0x0, "5f730000a9003f00"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = memfd_secret(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4100001500000008000300", @ANYRES32=0x0, @ANYBLOB="04004680"], 0x20}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x1, 0x0, 0xffffffff}, {0x7, 0xfe, 0x4}, {0x6}]})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x1a)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x7fffffff, 0x4)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f0000000100)={0x1d, r8}, 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x0, @private0}, @in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0xe83, @private1}], 0x70)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280000012", 0x2d}], 0x1}, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000280)='net_prio.prioidx\x00', 0x0, 0x0)

11.32172254s ago: executing program 4 (id=388):
socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
syz_io_uring_setup(0x1af4, &(0x7f0000000080), 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x800003e, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x222, 0x0)
fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0)

11.271925062s ago: executing program 3 (id=389):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0xfff8, 0x0, 0x0, 0x0, 0x0, "8595701a4fb562f1"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800042, &(0x7f0000001480)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1d1, &(0x7f0000000580)="$eJzslc9qFEEQxn8905vNag45e3UxuWiyI4hvYB7AB3DZjDG465/Mgu4ScPSSiwfxJQI+hQdB7x5EBC/xoKCHiKeIrPR0ddtDFlbFRQL9wVBffd1V1d1Dd90o7hZN4Mfhbo9lUFi8UwoNrIhwtGDtV7ETwUdt/Y7oz8R+EFuMxq8fWzq+2e33851iNIMoBbPm1MhxSf92sSnk1aO6ovi7PPMnw9Se7PGhJzWlOW2OxPLfdzEP8m0JQuXTvy7RYN67AK98X5r9m94+tb9z6pxUwlvUj+XkkeSPogr3nhVXHiZ8qZw3h7s9Q67JK2a0Tfu5K1HNMc6LYM4ZDSWolInPYx4/46wAa8PBnbViND6/Pehu5Vv5rSxLL62/PC1XdPIAtvv5ugqWkRii8TD3tBWMN4D3v8ZLAqhgaQanQLlYF+Ie59WzQWALkiA2zGHzPvf1m6KlDLjKORaBe6UZzrCn1cZk01w3W9tAkYrT0cE64YiExWrgQu92f3MPhXJh+2ifo3NAwzuZOKZQfvGy3/6e2LbYDbH7Yg/Eut7lepKuMnwWb7WEBe53h8OdqnlZ5rXMa9myr5xIVdcNXbdsN4mIiIiIiIiIOCH4GQAA//9J907O")
timer_create(0x0, &(0x7f0000000140)={0x0, 0xa}, 0xfffffffffffffffc)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x11, 0x16, 0x1cd, &(0x7f0000000580)})
waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x0, "d2c4924dc64c3b6e6f00", <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0xfb43abc2aa13d2f7})
epoll_pwait(r4, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")

9.763224086s ago: executing program 4 (id=390):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)='./file0\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="7a0af8ff75250000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000005000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc5605fbbf6e1671d5ace8c142451f13dbae2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651064d08dde084e0c7ffddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e13b2f9614d547244a22000000000000db453620ce72d75946c0b638d9b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef4a96279856076ff7ac9ba09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be22dda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed5441218c54d0b3e9f298392b3276fabe4cb21ee6760b8ab4406f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314d7bb31ad9713d249499ed0d8a24abd57e052888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f009900eaffffffffffffff0000000000c9b46ff99a039eda74f74fe532dcfcd2c315b626fd768dbdf00fd532575767a7bca3968f50c20cfcaf91ab14b77f87e476bcf45fff904531adea62a517702743bf3492c8952c8e1fc37674de47d5881750516404c647fe02085b1a9603227411b17b6c7bc84fdfa0cfce589550df8faeeae5ca5024b374da260b00000000d22370373392ed74a7d1aff96a5b59775237f50c6bd8e0c4a7666be5962cd0931845e6d9a03a48fe85d370d9b6b755a2f66989da880c899d4d1c6757be6baffdce49b8c81f43d933549289dd475e39f399f6822a111ed8142b5dd2c01a15c949d86bd93b58"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3})
chdir(&(0x7f0000000000)='./file0\x00')
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6b7a7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c"}, 0xa7, 0xffffffffffffffff)
umount2(0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$netlink(0x10, 0x3, 0xc)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xc4}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="18050000000000000000000000000000950000000000000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000006600000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000cd6a2af80000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140), 0x3100408, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRES64=r6, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB="dd1b42d2c8070f7226a10630fce46897cefe9cf1245452fb66e6472445503fa7adc31ad0eb645d84888c36ef9f8709ef2172f6805449ce6759a46933589f3cf2d981b96676e5bba6e2175535645185e490335af4dc9e32b6c154621cd7fd616b592238b5cdc027b7daa13f40f30dabc05b9955d8fca1d2a552b6f64ef27eb363272e1ef122cd28f3e36e4897510caf46fc330d66764c5708a21678aa3e12b313fdecb28b8fd161c83bfbf917813919dafabecc79a2b924cf9b6966b74fce15dfa2ad45c0597d0ff217a5424bc2f226ca006ac207558ce7b661efd0f2ba184714", @ANYRESOCT=r6, @ANYRESHEX=r1])
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

9.626994228s ago: executing program 0 (id=391):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa20080045000028000000000002907800000000ffffb5ff11e090780000000062ea00000000000000000000fdb180122d8ac26525546b55d17eb8363198b8f0fdd84435a31c3a0d14a8ebd4eb7705a8b8d1937733"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fanotify_init(0x40, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10008}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x48}}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x30001, 0x0)
ppoll(&(0x7f0000000040)=[{}, {}], 0x2, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x20000007d, 0x408000)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000340)="d0253667660f2e6d00baf80c66b8ce61a78966efbafc0cb80048efea0000310066b94808000066b80000008066ba000000000f300f30f36f0f01c5b839000f00d00f7912", 0x44}], 0x1, 0x39, 0x0, 0x0)
ioctl$KVM_NMI(r8, 0xae9a)

9.610416375s ago: executing program 1 (id=392):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$RTC_PIE_OFF(r0, 0x7006)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xc082, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r7 = syz_open_pts(r6, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
dup3(r6, r7, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x31, '\x00\x00\x00\x00 #\x00'})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
clock_gettime(0x7, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
clock_settime(0x0, &(0x7f0000009ac0)={r8, r9+10000000})
ioctl$TIOCGPTPEER(r6, 0x5441, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0xfffffffffffffd4b)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000071103900000000004600000002c1cef0cc0000005aced435c700000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x48)

9.414393747s ago: executing program 2 (id=393):
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000013c0)="5500000019007f08c0fe04b282a380930a00110000000000806f0200390009000f00ff6c0500000004000300fc11ffdd070b56dcfbd064326c9b1100b1dfe3b30000000009011e7b1519f4c653ad45e785c46a62ee", 0x55}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
tee(r1, r1, 0x89c, 0x0)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9005}, 0x4)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040), 0x10)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000340)=""/250, 0xfa}], 0x2, 0x0, 0x0)
r5 = epoll_create1(0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0xbca, 'syz1\x00'}, 0x5, 0x0, 0x8, 0x0, 0x0, 0x3, 'syz1\x00', 0x0})
epoll_pwait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pwrite64(r1, &(0x7f0000000180)="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", 0xfd, 0x4809)
r7 = syz_open_procfs(0x0, &(0x7f000003e4c0)='net/mcfilter6\x00')
lseek(r7, 0x9, 0x0)
syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x204419, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5ae, &(0x7f0000001280)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

8.536154721s ago: executing program 1 (id=394):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}})
fchdir(r3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r5}, 0x8)
openat$cgroup_ro(r7, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x20, 0x4, 0x6}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r8, &(0x7f0000000300), &(0x7f0000001100)=""/4109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r8, &(0x7f0000000440), &(0x7f0000000540)=""/73, 0x2}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x20, 0x4, 0x6}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r9, &(0x7f0000000300), &(0x7f0000001100)=""/4109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r9, &(0x7f0000000440), &(0x7f0000000540)=""/73, 0x2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="180000000000000000139f000094b4f4ff000000009500000000000000373e28d9d7bd770c1dfc30288f0c775870fdecc478e588ba5d564f33f3694aabdaf92e66a71d21041467689a5225a30281c3c1b47b41539548d7348d124242630c745c926d700f22e94d6a661af8c8d8fbbcf43ef1d21a76ec9cf23e3993"], &(0x7f0000000180)='GPL\x00', 0xa2c6, 0x1000, &(0x7f00000004c0)=""/4096, 0x41000, 0x9, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000001680)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0x7, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[r8, r9, r6, r6]}, 0x80)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480), 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), 0x0, 0xa7c, r10}, 0x38)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r11 = inotify_init1(0x0)
fcntl$setown(r11, 0x8, 0xffffffffffffffff)
fcntl$getownex(r11, 0x10, &(0x7f0000000140)={0x0, <r12=>0x0})
syz_open_procfs(r12, &(0x7f0000000180)='stat\x00')

8.389804496s ago: executing program 2 (id=395):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005240), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x56, 0x0, &(0x7f0000000680)="e0b9547e514b984cc9c89b9b7d4eff3d1cd9b56f5bf00475ba4e93d1d64dd476c8a5ec5385a0ffbfd2ca8c2cf193a4007fc85956a409be584bcaee69b5604ffe899fdec691e0881902c10c69b7605cf90610fd61790ebd7bde912d7977cbfac52468113c79e69ceeb7c17bc20e9a42ae76304f8ef3b94113a9195ce6780e46cde82a22bcb086875e0be4e0bc08afd93b11c5a4300c8460e10ab34fc8e02c19424f63654578f8fa9d43269d91e5f77af89b3fdfa62a9501eef9b2b6903c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="6a0af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a26c7670568982b4e020f698393a1587aee89eb5603111ced3a0f3881f9c24561f1b2607995daa56f151905ea23c22624c"], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=<r7=>r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050505050"], 0x54}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130400000000000001001a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000000000"], 0x28}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r9 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r7], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r10, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

8.388019278s ago: executing program 4 (id=396):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = epoll_create(0x200)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc)
r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r4, 0xab00, r5)
ioctl$NBD_DO_IT(r4, 0xab03)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r6, @ANYBLOB="e440bfab84e1208cdb5174b96acaf27907e7809ab6ed4c35a7c80f65564202bf63b903addccd8c13f2ae3823f0b3a88b86341a02f28e056799243697654c0ad1b457f71bb549fc035f576578b499b999ec476c9d31bb5e8c2bb9e620884f8bef36e5b0b2334a27afa628ee2a006bdc8d4d507d5d08fa80a069eeb6ded3349b46179b7192db92cd27727410bc1b5dd94cf38c70fb67277c480b61846220a4d0445b33554f8b97b839152859e076fd71ce87d195", @ANYRES16=r3, @ANYRES32=r7, @ANYRES64, @ANYRESHEX=r8, @ANYBLOB="d7b073c90b3d0f89f91e768f50c59e1fb537de77a39193ad7a31d579417c72066a4cc67631087422d8606e0b2dc720585daeb5c511fa8d6bff055f06b6ba33abe6841cb405472ff5f461f63b6595d4fb9bc03ea2cb9c06e029ef7afbeb8cb6fcf81b", @ANYRES16=r0], 0x1018}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000001640)={{'\x00', 0x3}, {0xffffffffffff19b8}, 0x150, 0x0, 0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)="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", 0x122, 0x0, &(0x7f0000001500)={0x2, 0x86, {0x0, 0xc, 0x30, "9be1061d365a3650749b09718a91024026cec9a1996fb3b3ebfd3e69b7dd98c0ec2de7b40033df5fa628036db7f37291", 0x49, "3670fdf5307a6bb58431b2beab3de61faf91d3744e6f5e13a7bc2890cfbe8367cf643c3ed6f2b02fc81a8f56aae752e3fb951054a698cf5adb6eeedd848f6339efa0589d485da24608"}, 0x78, "3604a70a30030ff51baf7ef2875a873bfa0e5067175161682956ef8e92e2fb770c38144cc38b18697572464c80ed5f8e9e503c5978b3c8af2dd25041faa74a91c68dd9e46f24e2da42aff75e88944ef1859be7c1d57d083355bc3888a111516b1b3e316e03f56617a6b6c4de0d61e81b800fe307ae87e571"}, 0x10a})
ioctl$vim2m_VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f0000000140)={0x3})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0)

8.281578991s ago: executing program 3 (id=397):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x406800, 0x0)
shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000580)='./file3\x00', 0x2000000, &(0x7f0000000200)=ANY=[], 0x1, 0x1ff, &(0x7f0000000600)="$eJzsmL9v00AUx793dtwaISSWDiwMVKII6tiOQF06FAmJCSG1/JogoqYqcRuUGolYYohYWGBjQGJh4B9gyJCJgY1/AAkGQEJiICOz0dmX5Bw7CUmcifcZLt+79+7H90V6g0EQxH/Lj+9/vr24vLFzAcBxrGJJrv/SAMYSzZX8r68fn3+1eeXN+y/vPh6eeNoZPk9siaL0wvKY+3UAH7Y0BP2bUruxKn93wPv6BjjOSX0LDJbU98BxU2oPDHekfqjousi3rAf7vmfdr/u7QthicMTgiqEy/L5ui2FXzqMoipgSP2qGtarvew1F6DKWE5pJ9C+rrWTqVxLv2+LYVN4nqnj7+bOWmPdqYyv1c8DhSBMVMGzL9Q0s9WqTlETxf0ofnK9l/Oe6FakiMMnkchE1yhUn12fbvlbgn9cMgdRKCYOQqOSCvKeEXqCdrLj2ry5emgAW6zQWwBzbV7qdT9nQzyIexrB479MLE2GNz1OxfAF8bif9I3rLcFbpT7rSP8rBwaPyUTNc3z+o7nl73qHrVi7ZDPZFtxw3omTM9L1Bfzbj/nRMOb80ItfgBp5Ug6DhJKPBDJgIgoYbz12l426367/vym0BrgI4k0xE2zRGvgZgRpLD41yh1rQx6QRBEARBEARBEARBEARBEFNwGiz+CjoB93qc/TcAAP//1AJp/Q==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x0)
recvmmsg$unix(r5, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000840)=""/150, 0x96}], 0x1}}], 0x1, 0x0, 0x0)
llistxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x2)
shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0/file0\x00', 0x800, &(0x7f0000000180)=ANY=[], 0x1, 0x1538, &(0x7f0000001740)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000020000000000001100000000000000000200000001000013020000000200000000000000000000000000000604000000000061"], 0x0, 0x4d}, 0x20)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000180)={r6, 0x0}, 0x20)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r7, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0xffffff7f, {0x2, 0x0, @private}, 'veth0_vlan\x00'})
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000440)=""/243)
lseek(r0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)={[{@nodiscard}, {@quota}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@usrjquota={'usrjquota', 0x3d, 'O&R}+,'}}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5512, &(0x7f00000079c0)="$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")

8.183881259s ago: executing program 1 (id=398):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1, &(0x7f0000000100)="15b0bb12d67e4a93a16c462fffdab31919a6a4009be6003f62d2902a7387172b056f36c1ef9017a79aa93b07a023fd59ad146cd06d998aab45db7164aa09a54c283bff1b63ec9084b971a3ababceebe6b1364ce623197ee1f86b0dcb53faf737709be2983890")
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c900180014000500"], 0x1d)
socket(0x65e323e06d1fce50, 0x4, 0x7)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f0000000b00)=ANY=[@ANYBLOB="043135cbaaaaa8aa10"], 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x5, 0xb, &(0x7f0000000940)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1], 0x0, 0x0, 0xffffffffffffff2d, 0x0, 0x41000, 0x7b, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000b70900000000000055090100000000009500000000000000bf9100d700000000b702000000000000852c000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x90)
futex(&(0x7f00000000c0)=0x1fffc, 0x4, 0x0, 0x0, &(0x7f0000000140), 0x1)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc27, 0x189301)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_int(r5, 0x11a, 0x3, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020020011c0007006000000002000020d3"])
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0)

7.913250657s ago: executing program 4 (id=399):
syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x88, 0x0, 0x1, @dev, @local, {[@routing={0x2e, 0x10, 0x0, 0x5, 0x0, [@remote, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff02, 0x0, 0x0, 0x8007, 0x0, "5f730000a9003f00"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = memfd_secret(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4100001500000008000300", @ANYRES32=0x0, @ANYBLOB="04004680"], 0x20}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x1, 0x0, 0xffffffff}, {0x7, 0xfe, 0x4}, {0x6}]})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x1a)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x7fffffff, 0x4)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f0000000100)={0x1d, r8}, 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x0, @private0}, @in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0xe83, @private1}], 0x70)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280000012", 0x2d}], 0x1}, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000280)='net_prio.prioidx\x00', 0x0, 0x0)

5.445233252s ago: executing program 0 (id=401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
nanosleep(&(0x7f0000000080), 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r5 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400), 0x8)
write$binfmt_aout(r5, 0x0, 0x0)
inotify_init1(0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@clear_death, @request_death], 0x0, 0x0, 0x0})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x5000410)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000008740)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@fat=@uid}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_lower}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x40}}, {@uni_xlateno}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@nonumtail}, {@shortname_win95}, {@rodir}, {@utf8no}, {@nonumtail}, {@shortname_lower}, {@shortname_mixed}, {@utf8}], [{@appraise}, {@pcr={'pcr', 0x3d, 0x10}}]}, 0x6, 0x2d3, &(0x7f0000000a40)="$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")
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)

5.4438616s ago: executing program 1 (id=402):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0, 0x12c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001800)={[{@map_acorn}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@map_off}, {@map_acorn}, {@check_strict}, {@check_strict}, {@map_acorn}, {@map_off}, {@overriderock}, {@check_strict}, {@mode={'mode', 0x3d, 0xfe8}}, {@uid}, {@dmode={'dmode', 0x3d, 0x7}}]}, 0x3f, 0x563, &(0x7f0000001240)="$eJzs3VFv01YbwPHHpYW8eSWEXl4hhAocyiYVqQQngaCIK885SQ8kdmQ7qL1CFU1RRQoTZdLam603bJO2D8HtPsTupn0atI/AZDspDWmaQmhTdf9fBOfUPvZ5jhv5qdv4WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFhuxbbzltSN11pSw7mVwG98+LK79cACudVXHNCviBX/k0xGLqeLLv//w+pL8X9zMpt+NSuZuMjI9n8vXXhwcXqqt/0BAR+Lza3t5yudTvvVpAM5QlfPDV9X054JfdNwalqZ0FflUsm+s1gNVdXUdbgcRrqh3EA7kR+oefeWypfLRaVzy37Lq1Wcuu4tvH+7YNsl9TDX1E4Q+t6dh7nQXTT1uvFqSZt4ddzmfvxGfGQiFWmnodTaeqddHDWAuFH+MI0KoxoV7EIhny8U8qV75Xv3bXt6YIH9ERloMfk3LSbrC569gfFMdfO/1MWIJy1ZErXvy5WKBOJLY8j6rl7+//qOPrDfvfm/l+W7PwfITreck2tp5dqw/D8kluN7bcqWbMtzWZGOdKQtryYe0fG+aqLFEyOh+GKkIU6yRHWXKClLSUpiyxNZlKqEoqQqRuqiJZRlCSUSnbyjXAlEiyOR+BKIknlx5ZYoyUtZylIUJVpysiy+tMSTmlTESfayJuvJcS+KsobFuNsoP3QY2d7bsi2FA0ZL/sf4vuj5GxjH+17+BwAAAAAAp5aV/PY9vv6fkatJrWrq2p50WAAAAAAA4AtK/vI/Gxczce2qWFz/AwAAAABw2ljJPXaWiGTlelpbEyu5XYpfAgAAAAAAcEokf/+/FhfJHCjXxdqdLoXrfwAAAAAATomfR86xHzbPWX/8LZlgxtppLn1lbThxO2fjTLrdmY/3GFWvWOe7O0mKUlpMT7t61sqkjXYnwXzXLdZGxPFnWWQwgB8/JYCL0/Kr3Ejb3FhNy9XemrSXbNXUdc716w/y4jjnpyK9FH33Yv17kSCYsX7xGuctWVvvtHNPX3ZWk1iSuYp3NroTKA7Mo3hALK+T+RaSey72HfFMciNGt99s2q+9d/xT6eZTn9DnG5lL28x1Z7zN9o8/E/eZz/WNPl63G0VG1jvt/JgjfyM30zY352+mxT5RFHLDvgfdY1HYG8VnHYvBKKyPoyj2RWENRlEcMwoAmJS1EVnISs53O2PmnVHZ3bKCePk4P14kZ/T5tM38leTEOn1ln7xij8or9pjZ7feBZyANy7Fxv7/t9ptm1bfxBm+H9hvWC1Z8CM+83vhWLm1ubd9e31h51n7WflEoFEv2Xdu+V5CZZBjdYk+k78+RewAAqdHP2BnZwrqbXlVfENn/qvp/ux8pyMlTeSkdWZWF5G6D5BMH++41u+djCAsjrlqzSZpMn/CycMC15dnkLofefgsHtu2PoXgc3woAAI7N3Ig8fJj8vzDiurs/l/dfHZ+VYW3zx34sAAD4t9DBOysb/WQFgWk+yZfLeSda1Crw3UcqMJWaVsaLdOAuOl5Nq2bgR77r1+PKY1PRoQpbzaYfRKrqB6rph2YpefK76j76PdQNx4uMGzbr2gm1cn0vctxIVUz4H9VsfVM34aIOko3DpnZN1bhOZHxPhX4rcHVOqVDrPQ1NRXuRqZq46qlmYBpOsKwe+/VWQytLLAlMM/LTHfb6Ml7VDxrJbnOTPtgAAJwQm1vbz1c6nfarI6xMeowAAKAfWRoAAAAAAAAAAAAAAAAAAAAAgJPvOO7/o3LKK72poA+31fSJiPkzKtYhB3iSK3/JYRuPPHX8cOQnJwBH6p8AAAD//xdGSyg=")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
sendfile(r4, r3, 0x0, 0x100000002)
syz_io_uring_submit(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

5.442733233s ago: executing program 2 (id=403):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$kcm(0xa, 0x0, 0x87)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000280)=[{0x7, 0x3, 0xff}, {0x7, 0x2, 0x5, 0x3}, {0x1, 0x3, 0x4, 0xffffffff}, {0x1, 0x29, 0x3, 0x3c}, {0x201e, 0x6, 0x4, 0x1007}]})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000)
openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402)
write$binfmt_elf64(r4, &(0x7f0000019680)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020006000500000000000000000000004000000000000000000000000000f50000000038000000000000000000000000000000000023020000000000000000000000000000000000000000000000000000000000000000000000000000a8b6e136545d98c9ed204d101fe2c436acfc6d40a9a82cfdda4be4f4e882bc7ce04f834c06a98cb43d87b6ae920c1064a299b9a9a2ec99c2de5c4c1ab61977134752fd349b4e6a57a00ac90ceb1e245aa32c2caf8f37fedc36bed03c1cac11f3bcebf13fbe0463b07111000000"], 0x78)
prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000680)=""/102373, 0x18fe5}], 0x1, 0x0, 0x9c)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000))
io_uring_setup(0x49c4, &(0x7f0000000180)={0x0, 0x9c9a, 0x4, 0x2, 0x4, 0x0, r3})
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0xd4a4})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0e80706e6c06a79874342a0e0d13343972d01f"})
write$UHID_INPUT(r9, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

5.410694335s ago: executing program 3 (id=404):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x13, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000540), &(0x7f0000000040)=0x36)
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0x23, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x3b}, @jmp={0x5, 0x1, 0x4, 0x2, 0x9, 0xffffffffffffff8e, 0x10}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x32e0, 0x82, &(0x7f00000006c0)=""/130, 0x40e00, 0x4, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x10, 0x1e, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[r3, r3], &(0x7f0000000900)=[{0x0, 0x2, 0x1, 0xb}], 0x10, 0x6}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0)
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f0000000200)=""/229)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xd, 0x0, &(0x7f0000000200)="b800000100005b3889e55bff05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="8c", 0x1}], 0x1}}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f00000002c0)=0xb0)

4.123926942s ago: executing program 0 (id=405):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$RTC_PIE_OFF(r0, 0x7006)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xc082, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r7 = syz_open_pts(r6, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
dup3(r6, r7, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x31, '\x00\x00\x00\x00 #\x00'})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
clock_gettime(0x7, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
clock_settime(0x0, &(0x7f0000009ac0)={r8, r9+10000000})
ioctl$TIOCGPTPEER(r6, 0x5441, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0xfffffffffffffd4b)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000071103900000000004600000002c1cef0cc0000005aced435c700000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x48)

3.116807405s ago: executing program 0 (id=406):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x0, 0x32315559, 0x140, 0x0, 0x0, @discrete={0x3, 0x7}})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$SO_COOKIE(r3, 0x1, 0x26, 0x0, &(0x7f0000000680))
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x22044004, 0x0, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006", 0x4d}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x0, 0x3, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x80)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000001c000480"], 0x5c}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000040)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@skip_balance}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0)
dup(r8)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)

2.783965517s ago: executing program 2 (id=407):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, r0, 0x3, 0x0, 0xffffffffffffffff, @link_id}, 0x20)
fsmount(0xffffffffffffffff, 0x0, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xb, 0x200000, 0x0, &(0x7f0000048000), 0x2)
newfstatat(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', &(0x7f00000039c0), 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00')
preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000001600)=""/171, 0xab}, {&(0x7f0000000140)=""/88, 0x58}], 0x3, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x1c)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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")
llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111aa000000005a3d4dc48baeccc500850000001b00000095000600000000000000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x2df, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, 0x0, &(0x7f0000000040))
sendmmsg(r1, &(0x7f00000022c0)=[{{&(0x7f0000000300)=@xdp, 0x80, 0x0}}], 0x1, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)

2.192128623s ago: executing program 1 (id=408):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0x200800, &(0x7f0000000200)={[{@lazytime}, {@uqnoenforce}, {@discard}, {@nouuid}, {@grpquota}, {@ikeep}, {@grpid}]}, 0x4, 0x96a2, &(0x7f000001c300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000002b80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000006140)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0}, &(0x7f0000001200)=0xc)
ioprio_set$uid(0x0, r3, 0x6000)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext3\x00', &(0x7f0000000240)='./file1\x00', 0x24002, &(0x7f00000010c0)={[{@bsdgroups}, {@noauto_da_alloc}, {@i_version}, {@noacl}, {@lazytime}], [{@seclabel}]}, 0x2, 0xbce, &(0x7f0000002bc0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000001000)='./file0/file0\x00', r4, &(0x7f0000000fc0)='./file3\x00', 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x60440, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x275a, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, 0xffffffffffffffff, "a2f38dc9adf1e16be113964683586213342107cadda0ab7b9da4cabc76a835ab", 0x6, 0x3, 0x4, 0x401}, 0x3c)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001380)=ANY=[@ANYBLOB="040e44000720", @ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r4, @ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r0], 0x6a)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c0c2, 0xc9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="040e0a4060200006"], 0xd)
openat$cgroup_int(r5, 0x0, 0x2, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="2c6769643cfdcf0b77ac6521230a8e69bd954673aa802f1833d29130aeed4c22f81044f553f456f9bfb5098b2a9e93a548712e8ab98eb09e6416868eb529124b101953e0856f719f3a5ef09399b0", @ANYRESDEC=0xee00, @ANYBLOB="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"], 0x0, 0xa78, &(0x7f0000000540)="$eJzs3c1vHGf9APDvbGzHdqs2bfNr+4vaZpIqrdsGZ23TRFEPNLHXyRa/INuRGgnUVI2DolgUNSC1EVJTCXGiokIICZAQ6pFTpXKgF5QTcOTEAQn6H6CKU4qAQTO7a+86+5K4azstn0+03pl5vs/bzOw88Xp3nuDzLMuy4rHF9XO/3snGcvc5PfPx+x+8mz/euR5DsSeeT34bMRwRacTAv4tzZXB6ZmlxvkdBVyIuRMSNiCQi9kbtuYORlrULkfwo7t1YvxHJL+LRNtmG77Bz9JTxP223zz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgrTc+UyxNJzFUXzr2cdlZMAd4lvVHcR8Ws38lHvapNIpL8EcPDjam+H92/kfxw/uNwPFZbe6w28/dwXLvn4X0vPDRQauTv0qAdcfWta1deXVtbfaO+vjdNB3tm2rvtzbpzQ1vLdqayUF1erM6fOlNJq8uL6cnjx8vHzs4up7PVqCyfX16pzKfTS5VTK4tL6dj0M+nEyZNTaWX8/OK5hTMz43OVxsYTX5osl4+nL41/rXJqaXlx4dhL48vTZ6tzc9WFM0VMnpzHnMhPxK9WV9KVyqn5NL10eW11qlcj86CJtilJa9Bkr5Imy5OTExOTI3H8+ZPPnyiXB+obJicaG8qbxC0Ru3/S0m+/vO3I3/T9+g2fQak+/sdcVGMhzsXLkbb9Nx0zsRSLMd8mLdkorzH+HzlW6Vpv8/jfGOUf3Ug+EMX4/0Rt7YlO43+Htvb+l2W1kreav/HvarwV1+JKvBprsRar8cZnLjGN37euf7o5/V9Zlm2h3DTv7cHmfdCHtp6JSixENZZjMaoxH6eKLWl9Sxon43gcj3K8EmdjNpYjjdmoxlxUYjnOx3KsRKU4o6ZjKSppxEosxlKkMRbT8UykMREnYySmIo1KjMf5WIxzsRBnYiZOFaVcisvFfp/q0sb1oInbCZrsEnTLYP7Zxv/sbvyfINutz1dw2LqsPv4PdQzIGktj0zvWKgAAAKCf/v+Pcd/+B//w14jBeLx4X362Olcp73azAAAAgD4qPq73WP40mEXE45G0+f2/tEuNAwAAAPoiKb5jl0TEaBysLdW+CbUnfAgAAAAAviCKv/8/kT+N5ksHI1m/E8qF3W4bAAAA0B+977HfMyIZjvo9LdOLteeL9Yj6fX5HZ6tzlfHpxbkXJuKp4i4DxTcNbiltT0QyWHz94Nk4VIs6NFp7Hm0tcTiPmhh/YSKejcP1jow9mT89OdYmcrIW+XQt8ukukVN5JAB80R2+dTz+NLvD8f/ZOFqLOHpgYCgiBg60GVnLGyPrwG50FABY13uOndaIt+v5msf/L2/8/j9YT24Z/x+MS//JN67GeLwWr8daXIyjxbcNik8ctNT79ffq7xmsfwyhHEd7vBvQiP3TiVIc7fF+wGjTRC9He7wjUIuNb0RMbe9BAIAddrjDONxp/C8iovHBwdr4f7Tp9/+49ff/9amFVn2lEADuCusz2Pd1IdvTvGW3+wgAtDJKAwAAAAAAAAAAAAAAAAAAAAAAAAAAQP/19bb/w1vM/rf6vH61LVn/5yNovzBS3weNLW/f0d545+pb134cEc1JpbwT29PmoqX9LbnUh3KyiNip47VzC7EvYst7NdolDUXEtjd+pB9VfFpfqL02St0uHue6pgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA5kETsabe9FLE3IsoRcWznW7V9ru92A3beV5pXkptxM96M+3avOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX0z1+/+XovZ8T21TDJQijkTEhYjIdruN/XRztxvQJyNbzNd0///8mEeWxEDtsEcyOD2ztDifH/5i7ofSx+9/8O4jrdn33m49RWBp0+QS9Ro2x/7q3sbSA0Wu0ZnVq1e+8/q305nTUYqhOL0yOzczf2bpxY0sDycfRqRRezTk7c0f3zvyu/fa9PzDvKftba53ttg5M7fW+0i73N3r7eby2upkXtNK5eWV737r8ptNSQ/GoYgnxyLGWmv6Zv7oUNOhGOxWW/JJ8oPkvvhpXCiOf743kizJD9H9Rf9HLl1eWx1/7fW1ix3atC8ORsTFiOGebVrf1QeL60lbxVlXGsxrLRdB+Y/9PfrYXvMcF7USJzr04YHilBmt92GopQ+lDnWmnftQ7PCm/V5qLCTJ5hZN1Vs0FK0teiieanOks70RnffCU92PdHvJJ8lfkrPx5/h+0/wfpfz4H4nOr87WIorIpjOlY2SpFln0fLI54ZXNkX//2W21vu00NdypH7a8eEtN1//6serT9ShLul6Pmmqc6lBj+9fFpho3nxWljh0vRqT9m3LUrz4dM9Xaub8W1aGd/xfPRQwc6HZVvGW0fq7zFaU1/4vtk7f6+v95Mhb/iOvm/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5+ScSedttLEUciYl9jPY3I7qDYvZ0SSqPJnTaxr66v//ic21/8LLVse6d3tuRm3Mze3q5GAQAAAAAAALDTTs98/P4H7+aP4u/xe25mWf3v+2nEQETsS34yEjNLi/M9ChqMuBARN/Ll4U5B/8xqWrfm+eLejfUbEdn9W+8SANDDfwMAAP//zlFyiw==")
name_to_handle_at(r5, &(0x7f0000001040)='./bus\x00', &(0x7f0000000180)=ANY=[], &(0x7f0000005080), 0x400)
setitimer(0x1, &(0x7f0000001080)={{0x77359400}, {0x77359400}}, &(0x7f0000000040))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x2a85000, 0x0)
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)

1.481039936s ago: executing program 2 (id=409):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0xb, 0x20004054)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000f100000000000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010000000000000000000a00000500000000080001"], 0x20}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = inotify_init1(0x0)
r3 = open$dir(0x0, 0x80080, 0x180)
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x1000a10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f9, &(0x7f0000000280)={'wg2\x00'})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x6a2982, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000002c0)={0x288000c, r5, 0x0, 0x0, 0x1})
getdents(r3, &(0x7f00000001c0)=""/83, 0x53)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r6, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @link_fd=r6}, 0x20)
fcntl$setlease(r7, 0x10, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000006c0)={{0xfffff7ff, 0x8}, 0x100, './file0\x00'})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000500)="440f20c0350a000000440f22c0c483791470ef0066ba6100b00cee0f01c4c4e205ad5b84c4837d054787e3c7442400a3000000c744240296d80000ff1c243e0f3248b8c3000000000000000f23c00f21f835030003000f23f80f20e035020000000f22e0", 0x64}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0c062f20"], 0xf)

284.883463ms ago: executing program 3 (id=410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a"], 0xd)
pipe(0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}})
syz_emit_ethernet(0xb3, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x19}, @l2cap_cid_signaling={{0x15}, [@l2cap_conn_req={{0x2, 0x6, 0x4}, {0xb99, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x401}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xaf, 0x3}}]}}, 0x1e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="2c000000010101040000000000000000020000001800028014000180080001"], 0x2c}}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
unshare(0x2a020400)
fcntl$setpipe(r4, 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "81d90d", 0x8, 0x0, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, {[@dstopts={0x2}]}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = gettid()
capget(&(0x7f0000000180)={0x19980330, r7}, &(0x7f0000000200))
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r8, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

219.148691ms ago: executing program 0 (id=411):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = io_uring_setup(0x3eae, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mknod(0x0, 0x0, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e5, &(0x7f0000000400)="$eJzs20tu00Acx/HfJGkSQ4HyXCCkILGADUmaikqsWs7BqmrTqsIFhNkkQsJcAM7AObgMB4AFO1YY+ZGm9aM1E9y0zfez8Xh+/dvjuu6MolgAFtamHsrIqBnuPGivfLltStU1qx4YgMoFyfZPYMOxqgJwXtR/p3uSFYA/n/EAOCs/X0jfJf349WFb9eyqPsz9SV5rZfNP0v1Gkpu2nPT64qv0eFJvrmTrG/E2zq/mHv/Jo8n5l3VN13VDK7qpW8aXifKdw/p7VmsgAAAWjVH3tLwr1QvSePLOrgqmlrT7LTurTzW1u+8OB6fka4V5K8q722/cnRPOAiBPrdTzX6wePX/9wrwR5avJXttukAAq4Y3GLbnu8J03Cif5qDF+teX+U8OxqirTMJUdOb/RTPUEHyUd9mzaHjnQsR7n6O+543VmH7yJP6VROnLKlNeUF720GMZGNlqSNNtNMb5V+fJn5V7XbI0NlfrhTs69sG60zuiP/3hj3v+ZAFSt9/7gbc8bjZ/uH2ztDfeGrwf9/vP1Z2ur64NetLLvnby+B3BxTSd9Hfk2EAAAAAAAAAAAAAAAuEju6G64Sb+2CwAAAOAS+m/vDDVU+LrVvK8RAAAAAAAAAAAAAAAAAIDL5m8AAAD//3E6Bko=")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r4, &(0x7f0000001340)=[{&(0x7f0000001380)=""/151, 0x97}], 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000014c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "076a1400"})
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"})
r6 = syz_open_pts(r4, 0x42)
r7 = dup3(r6, r4, 0x0)
write$UHID_INPUT(r7, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x20}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

0s ago: executing program 2 (id=412):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x2000000000000206, &(0x7f0000000400)=[{0x6}]}, 0x10)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x4000, 0x0, &(0x7f0000000500))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000f40)=ANY=[@ANYBLOB="00fb0002c9233eca470cd390f8d0c215cae6186070a48d44bee875d8a6f24c67c06401408fc6687e9a591d5ba3db7f557510b600087cf8b938bcb44a9c1fde1975f3d3acb4626fb853acddb5061ad84bebb800f76220289a5e893a5048f0805aa98a15c23f163768263bfb4f5ba3e7c1d22a7ccad746c66991ee48de6a0144bee8c85c9dbdde090445dc5de8"], 0x100, 0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
sendto$inet(r0, &(0x7f0000000700), 0x0, 0x40040, 0x0, 0x0)
r6 = gettid()
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r8 = dup(r7)
sendmsg$netlink(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)=ANY=[], 0x100}, {&(0x7f0000000580)=ANY=[], 0x1f88}, {&(0x7f0000000640)={0xac, 0x0, 0x0, 0x0, 0x0, "", [@generic="7a7e2caaa8d55a685325b1464e1a765a114c13e78ecb27b6c329f58788b8698a9d6e4b9d8a7f60a60ee95742dba513af0a2d57957ad381018b1f99d11a229c2d49f90f6beb5a6e4ef93f171fd20f451100e1bcf046", @nested={0x41, 0x0, 0x0, 0x1, [@generic="0c9884f00d485f0b170949eb707b7c2094a8b32642c478414b3fb097fe4f0c6be94f627119a25ffd76c35e798eb68595c9c573f051d7f67a7df2d159c9"]}]}, 0xac}], 0x3}, 0x0)
readv(r7, &(0x7f0000000100)=[{&(0x7f0000000340)=""/177, 0xb1}], 0x1)
shutdown(r8, 0x0)
tkill(r6, 0x7)

kernel console output (not intermixed with test programs):

(loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.110642][ T5364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.332178][   T25] usb 1-1: USB disconnect, device number 2
[   97.337819][ T5468] loop2: detected capacity change from 0 to 4096
[   97.406050][ T5468] ntfs3: Unknown parameter 'dÙ>az½˜4Ó�ˆè»iscard'
[   97.469208][ T5243] Bluetooth: hci2: command tx timeout
[   97.522240][   T29] audit: type=1326 audit(1723796411.025:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.3.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x0
[   97.576625][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.630513][ T5477] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   97.693793][ T5364] bridge_slave_1: left allmulticast mode
[   97.714971][ T5364] bridge_slave_1: left promiscuous mode
[   97.738841][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.831286][ T5481] capability: warning: `syz.3.29' uses 32-bit capabilities (legacy support in use)
[   97.850425][ T5364] bridge_slave_0: left allmulticast mode
[   97.865886][ T5364] bridge_slave_0: left promiscuous mode
[   97.874110][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.898624][   T25] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   97.946446][ T5484] mmap: syz.1.32 (5484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   98.012565][   T29] audit: type=1326 audit(1723796411.505:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5483 comm="syz.1.32" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7db799b9 code=0x0
[   98.105335][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.153091][   T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.185898][   T25] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   98.227889][   T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   98.260406][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   98.290446][   T25] usb 1-1: SerialNumber: syz
[   98.328014][   T25] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[   98.349724][ T5489] loop2: detected capacity change from 0 to 2048
[   98.368873][   T25] usb-storage 1-1:1.0: USB Mass Storage device detected
[   98.369101][ T5489] EXT4-fs: Ignoring removed mblk_io_submit option
[   98.429030][   T25] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   98.470650][ T5489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.582177][   T25] usb 1-1: USB disconnect, device number 3
[   99.325770][ T5500] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.33: bg 0: block 234: padding at end of block bitmap is not set
[   99.346858][ T5500] EXT4-fs (loop2): Remounting filesystem read-only
[   99.353935][ T5500] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -5)
[   99.487390][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.521668][ T5503] netlink: 104 bytes leftover after parsing attributes in process `syz.3.34'.
[   99.550619][ T5243] Bluetooth: hci2: command tx timeout
[   99.723679][ T5508] loop2: detected capacity change from 0 to 512
[   99.940057][ T5508] EXT4-fs: Ignoring removed orlov option
[  100.156819][ T5515] loop1: detected capacity change from 0 to 2048
[  100.938871][ T5516]  loop1: p1 < > p4
[  100.957465][ T5516] loop1: p4 size 8388608 extends beyond EOD, truncated
[  100.983639][ T5514] loop0: detected capacity change from 0 to 1024
[  100.994109][ T5515]  loop1: p1 < > p4
[  100.999487][ T5515] loop1: p4 size 8388608 extends beyond EOD, truncated
[  101.072490][ T5364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.312467][ T5240] udevd[5240]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  101.321442][ T5480] udevd[5480]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  102.198604][ T5243] Bluetooth: hci2: command tx timeout
[  102.220921][   T29] audit: type=1800 audit(1723796415.715:9): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.38" name="file1" dev="loop0" ino=25 res=0 errno=0
[  102.480692][ T5508] EXT4-fs (loop2): Test dummy encryption mode enabled
[  102.492563][ T5364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.515416][ T5240] udevd[5240]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  102.532849][ T5480] udevd[5480]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  102.575280][ T5508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a054e09c, mo2=0002]
[  102.605052][ T5508] System zones: 1-12
[  102.616375][ T5364] bond0 (unregistering): Released all slaves
[  102.640563][ T5508] EXT4-fs: error -4 creating inode table initialization thread
[  102.662791][ T5508] EXT4-fs (loop2): mount failed
[  103.545314][ T5457] chnl_net:caif_netlink_parms(): no params data found
[  103.568638][ T5534] loop2: detected capacity change from 0 to 512
[  103.627026][ T5534] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  103.638962][ T5534] EXT4-fs (loop2): orphan cleanup on readonly fs
[  103.650916][ T5534] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  103.682332][ T5536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'.
[  103.738553][ T5534] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  103.763860][ T5534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.41: bg 0: block 40: padding at end of block bitmap is not set
[  103.830082][ T5534] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  103.843903][ T5534] EXT4-fs (loop2): 1 truncate cleaned up
[  103.851064][ T5534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  103.896909][ T5540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'.
[  104.868354][ T5243] Bluetooth: hci2: command tx timeout
[  104.896860][ T5533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.782340][ T5546] loop1: detected capacity change from 0 to 1024
[  106.182870][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.539855][ T5563] loop3: detected capacity change from 0 to 256
[  106.597456][ T5563] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[  106.609885][   T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  106.791434][ T5364] hsr_slave_0: left promiscuous mode
[  106.805929][ T5364] hsr_slave_1: left promiscuous mode
[  106.833462][ T5364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.848784][ T5364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.889823][ T5364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.921110][ T5364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.984211][ T5280] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  107.081899][ T5364] veth1_macvtap: left promiscuous mode
[  107.110376][ T5364] veth0_macvtap: left promiscuous mode
[  107.128642][ T5364] veth1_vlan: left promiscuous mode
[  107.147440][ T5364] veth0_vlan: left promiscuous mode
[  107.251998][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.039219][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  108.063427][ T5280] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=de.8a
[  108.079747][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  108.131257][ T5280] usb 2-1: New USB device strings: Mfr=186, Product=2, SerialNumber=3
[  108.150242][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  108.200804][ T5280] usb 2-1: Product: syz
[  108.205146][   T25] usb 3-1: SerialNumber: syz
[  108.212716][ T5280] usb 2-1: Manufacturer: syz
[  108.234239][ T5280] usb 2-1: SerialNumber: syz
[  108.242214][   T25] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  108.274315][ T5280] usb 2-1: config 0 descriptor??
[  108.282692][   T25] usb-storage 3-1:1.0: USB Mass Storage device detected
[  108.322024][ T5280] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  108.351075][   T25] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  108.373618][   T25] scsi host1: usb-storage 3-1:1.0
[  108.549353][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'.
[  108.561277][ T5552] loop2: detected capacity change from 0 to 512
[  108.594314][ T5552] EXT4-fs: Ignoring removed bh option
[  108.625304][ T5552] EXT4-fs (loop2): orphan cleanup on readonly fs
[  108.634891][ T5552] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  108.652123][ T5595] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  108.654500][ T5552] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.45: invalid indirect mapped block 8 (level 2)
[  108.678910][ T5552] EXT4-fs (loop2): Remounting filesystem read-only
[  108.685904][ T5552] EXT4-fs (loop2): 1 truncate cleaned up
[  108.727299][ T5552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  109.132104][ T5364] team0 (unregistering): Port device team_slave_1 removed
[  109.192514][ T5364] team0 (unregistering): Port device team_slave_0 removed
[  109.380471][ T5595] loop1: detected capacity change from 0 to 32768
[  109.387860][ T5595] btrfs: Deprecated parameter 'usebackuproot'
[  109.404991][ T5595] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  109.449852][ T5595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.46 (5595)
[  109.507391][ T5595] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.532663][ T5595] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  109.717129][ T5595] BTRFS info (device loop1): rebuilding free space tree
[  109.795448][ T5595] BTRFS info (device loop1): disabling free space tree
[  109.812984][ T5595] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.823774][ T5595] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  110.003673][ T5457] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.011502][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.021447][ T5457] bridge_slave_0: entered allmulticast mode
[  110.029647][ T5457] bridge_slave_0: entered promiscuous mode
[  110.042103][ T5586] ip6gretap0 speed is unknown, defaulting to 1000
[  110.162299][ T5586] ip6gretap0 speed is unknown, defaulting to 1000
[  110.162523][ T5457] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.221874][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.237700][ T5280] usb 2-1: qt2_attach - failed to power on unit: -71
[  110.268441][ T5457] bridge_slave_1: entered allmulticast mode
[  110.288410][ T5280] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71
[  110.306998][ T5457] bridge_slave_1: entered promiscuous mode
[  110.341634][ T5280] usb 2-1: USB disconnect, device number 2
[  110.361281][ T5236] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  110.407972][ T5586] ip6gretap0 speed is unknown, defaulting to 1000
[  110.518020][ T5457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.537412][ T5586] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  110.606431][ T5457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.639035][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.663995][ T5586] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  110.861011][ T5243] Bluetooth: hci0: unexpected event for opcode 0x1408
[  110.887618][ T5586] ip6gretap0 speed is unknown, defaulting to 1000
[  110.925895][ T5457] team0: Port device team_slave_0 added
[  110.975718][ T5586] ip6gretap0 speed is unknown, defaulting to 1000
[  111.031384][ T5457] team0: Port device team_slave_1 added
[  111.201154][ T5586] ip6gretap0 speed is unknown, defaulting to 1000
[  111.396023][ T5319] usb 3-1: USB disconnect, device number 2
[  111.436349][ T5586] ip6gretap0 speed is unknown, defaulting to 1000
[  111.437700][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.585866][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.709054][ T5457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.725364][ T5586] ip6gretap0 speed is unknown, defaulting to 1000
[  111.729962][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.744194][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.770254][ T5457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.953010][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  112.659756][ T5648] loop1: detected capacity change from 0 to 164
[  112.690272][ T5648] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  114.540619][ T5653] loop3: detected capacity change from 0 to 1024
[  114.682304][ T5653] loop3: detected capacity change from 0 to 256
[  114.740594][ T5457] hsr_slave_0: entered promiscuous mode
[  114.750063][ T5653] vfat: Unknown parameter 'iocharseodir'
[  114.805514][ T5457] hsr_slave_1: entered promiscuous mode
[  114.857998][ T5457] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.890514][ T5457] Cannot create hsr debugfs directory
[  114.952044][ T5674] loop2: detected capacity change from 0 to 128
[  115.012608][ T5672] overlayfs: overlapping lowerdir path
[  115.023235][ T5674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  115.080266][ T5672] loop0: detected capacity change from 0 to 8
[  115.088746][ T5280] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  115.130045][ T5672] unable to read fragment index table
[  115.200625][ T5674] UDF-fs: error (device loop2): udf_read_inode: (ino 88) failed !bh
[  115.300883][ T5280] usb 2-1: Using ep0 maxpacket: 32
[  115.318010][ T5280] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  115.337860][ T5280] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  115.372271][ T5280] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  115.417653][ T5280] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  115.461555][ T5280] usb 2-1: config 0 interface 0 has no altsetting 0
[  115.519743][ T5280] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  115.521514][ T5680] loop0: detected capacity change from 0 to 512
[  115.529398][ T5280] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  115.547199][ T5680] EXT4-fs: Ignoring removed mblk_io_submit option
[  115.577129][ T5280] usb 2-1: Product: syz
[  115.588856][ T5680] EXT4-fs error (device loop0): __ext4_iget:4982: inode #11: block 1: comm syz.0.61: invalid block
[  115.591515][ T5280] usb 2-1: Manufacturer: syz
[  115.629444][ T5280] usb 2-1: SerialNumber: syz
[  115.636686][ T5680] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.61: couldn't read orphan inode 11 (err -117)
[  115.667528][ T5680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.692540][ T5280] usb 2-1: config 0 descriptor??
[  115.720470][ T5280] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  115.804981][ T5280] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  115.918869][ T5668] syz.1.58 uses obsolete (PF_INET,SOCK_PACKET)
[  116.060333][ T5246] Bluetooth: hci0: SCO packet for unknown connection handle 3017
[  116.082899][ T5690] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  116.159913][    T9] usb 2-1: USB disconnect, device number 3
[  116.159933][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  116.181481][ T5230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.194804][    T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  116.376354][ T5697] loop2: detected capacity change from 0 to 8
[  116.437135][ T5697] SQUASHFS error: lzo decompression failed, data probably corrupt
[  116.450342][ T5697] SQUASHFS error: Failed to read block 0x91: -5
[  116.456849][ T5697] SQUASHFS error: Unable to read metadata cache entry [8f]
[  116.464366][ T5697] SQUASHFS error: Unable to read inode 0x11f
[  116.967415][ T5706] loop0: detected capacity change from 0 to 512
[  117.157016][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  117.733883][ T5457] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  117.852408][ T5706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.865419][ T5706] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.932686][ T5457] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  118.057749][ T5457] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  118.145628][ T5457] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  118.524438][ T5457] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.592640][ T5717] loop2: detected capacity change from 0 to 2048
[  118.606964][ T5230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.636957][ T5457] 8021q: adding VLAN 0 to HW filter on device team0
[  118.724452][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.731640][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.759839][ T5717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.919679][ T5724] syz.3.67[5724] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.919787][ T5724] syz.3.67[5724] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.941190][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.960315][ T5364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.991808][   T29] audit: type=1800 audit(1723796432.485:10): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.65" name="bus" dev="loop2" ino=18 res=0 errno=0
[  119.018979][ T5724] syz.3.67[5724] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  119.051017][   T29] audit: type=1326 audit(1723796432.495:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.3.67" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x0
[  119.174832][ T5728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'.
[  119.185943][ T5457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.297353][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'.
[  119.310921][ T5732] loop3: detected capacity change from 0 to 128
[  119.340653][ T5728] netlink: 'syz.0.66': attribute type 5 has an invalid length.
[  119.500603][ T5724] ip6gretap0 speed is unknown, defaulting to 1000
[  119.531056][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.764310][ T5739] loop0: detected capacity change from 0 to 256
[  119.926537][ T5739] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[  120.623088][ T5457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.268213][ T5243] Bluetooth: hci0: unexpected event for opcode 0x1004
[  121.776040][ T5457] veth0_vlan: entered promiscuous mode
[  121.854320][ T5457] veth1_vlan: entered promiscuous mode
[  121.961492][ T5777] loop3: detected capacity change from 0 to 128
[  121.974346][ T5457] veth0_macvtap: entered promiscuous mode
[  122.185756][ T5457] veth1_macvtap: entered promiscuous mode
[  122.222236][ T5777] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  122.271413][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.347247][ T5777] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  122.373784][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.445864][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.506566][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.531317][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  122.538974][ T5243] Bluetooth: Wrong link type (-22)
[  122.544656][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x11
[  122.551391][ T5243] Bluetooth: Wrong link type (-22)
[  122.556575][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x11
[  122.563581][ T5243] Bluetooth: Wrong link type (-22)
[  122.569361][ T5243] Bluetooth: hci3: link tx timeout
[  122.575899][ T5243] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  122.637891][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.693859][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.706450][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.727672][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.741143][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.757075][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[  122.757456][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.832985][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.888329][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.960281][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.048668][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.071798][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.105967][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.154489][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.248951][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.291199][ T5803] ip6gretap0 speed is unknown, defaulting to 1000
[  123.327889][ T5457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.362193][ T5457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.390846][ T5457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.424292][ T5457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.799960][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.807932][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.968859][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.998740][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.276443][   T29] audit: type=1326 audit(1723796437.775:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  124.394373][   T29] audit: type=1326 audit(1723796437.805:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  124.466569][   T29] audit: type=1326 audit(1723796437.805:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  124.526867][ T5829] loop2: detected capacity change from 0 to 128
[  124.593571][   T29] audit: type=1326 audit(1723796437.805:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  124.688078][ T5243] Bluetooth: hci3: command 0x0406 tx timeout
[  124.799594][   T29] audit: type=1326 audit(1723796437.805:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  124.960064][   T29] audit: type=1326 audit(1723796437.805:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  125.099299][   T29] audit: type=1326 audit(1723796437.815:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  125.100335][ T5234] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.485026][   T29] audit: type=1326 audit(1723796437.825:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  125.974551][ T5837] process 'syz.1.77' launched './file1' with NULL argv: empty string added
[  126.069168][   T29] audit: type=1326 audit(1723796437.825:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  126.241702][   T29] audit: type=1326 audit(1723796437.825:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  126.242037][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'.
[  126.433880][ T5846] loop3: detected capacity change from 0 to 2048
[  126.528233][ T5846] loop3: detected capacity change from 0 to 256
[  126.676597][ T5846] loop3: detected capacity change from 0 to 1764
[  126.786406][ T5246] Bluetooth: hci3: unexpected event for opcode 0x203b
[  126.798276][ T5864] loop2: detected capacity change from 0 to 256
[  126.945055][ T5246] Bluetooth: hci4: unexpected event 0x3e length: 360 > 260
[  126.945098][ T5246] Bluetooth: hci4: unexpected subevent 0x0d length: 359 > 260
[  126.960190][ T5246] Bluetooth: hci4: Unknown advertising packet type: 0x1f
[  126.960268][ T5246] Bluetooth: hci4: adv larger than maximum supported
[  127.045555][ T5864] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[  127.080661][ T5868] ip6gretap0 speed is unknown, defaulting to 1000
[  128.321883][ T5884] 9pnet_fd: Insufficient options for proto=fd
[  128.342493][ T5884] loop2: detected capacity change from 0 to 8
[  130.546872][ T5900] evm: overlay not supported
[  130.666242][ T5898] overlayfs: failed to get inode (-116)
[  130.674631][ T5898] overlayfs: failed to get inode (-116)
[  130.687702][ T5898] overlayfs: failed to get inode (-116)
[  130.699252][ T5898] overlayfs: failed to get inode (-116)
[  131.178972][ T5246] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  131.188716][ T5246] Bluetooth: hci3: Injecting HCI hardware error event
[  131.201175][ T5246] Bluetooth: hci3: hardware error 0x00
[  131.212278][ T5895] loop1: detected capacity change from 0 to 2048
[  131.397685][ T5895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.854495][ T5909] loop2: detected capacity change from 0 to 512
[  131.882371][ T5909] EXT4-fs: Ignoring removed orlov option
[  131.911181][ T5909] EXT4-fs (loop2): Test dummy encryption mode enabled
[  131.956895][ T5909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0102]
[  131.972026][ T5909] System zones: 1-12
[  131.997109][ T5909] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.90: casefold flag without casefold feature
[  132.013765][ T5909] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.90: couldn't read orphan inode 15 (err -117)
[  132.037483][ T5909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.042062][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.062444][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  133.069061][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  133.095410][ T5926] loop1: detected capacity change from 0 to 128
[  133.147072][ T5926] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  133.298631][ T5246] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  134.269890][ T5934] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 550)
[  134.278363][ T5934] FAT-fs (loop1): Filesystem has been set read-only
[  134.435617][ T5236] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 550)
[  134.590106][ T5932] loop4: detected capacity change from 0 to 2048
[  134.597220][ T5932] EXT4-fs: Ignoring removed mblk_io_submit option
[  135.682454][ T5932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.183058][ T5948] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  136.244727][ T5950] loop2: detected capacity change from 0 to 512
[  136.276191][ T5932] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.98: bg 0: block 234: padding at end of block bitmap is not set
[  136.296135][ T5932] EXT4-fs (loop4): Remounting filesystem read-only
[  136.300385][ T5950] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.100: corrupted in-inode xattr: invalid ea_ino
[  136.333076][ T5955] loop0: detected capacity change from 0 to 512
[  136.402775][ T5950] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.100: couldn't read orphan inode 15 (err -117)
[  136.415773][ T5950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.451063][ T5955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.463445][ T5940] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.100: invalid indirect mapped block 234881024 (level 0)
[  136.501322][ T5955] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.530170][ T5940] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 13: comm syz.2.100: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  136.585167][ T5955] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.101: Directory hole found for htree leaf block 0
[  136.673501][ T5964] netlink: 'syz.1.104': attribute type 11 has an invalid length.
[  136.702996][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.864090][ T5457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.025108][ T5230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.120529][ T2990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.334424][ T5986] loop3: detected capacity change from 0 to 512
[  137.346670][ T2990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.347950][ T5981] loop1: detected capacity change from 0 to 1024
[  137.387096][   T29] kauditd_printk_skb: 29 callbacks suppressed
[  137.387114][   T29] audit: type=1326 audit(1723796450.885:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x0
[  137.446022][ T5986] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  137.509672][ T5981] hfsplus: invalid btree flag
[  137.516310][ T5986] EXT4-fs (loop3): Remounting filesystem read-only
[  137.527476][ T5981] hfsplus: failed to load attributes file
[  137.534700][ T5986] EXT4-fs (loop3): 1 truncate cleaned up
[  137.547701][ T5992] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  137.560508][ T5986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.594859][ T2990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.656457][ T5981] loop1: detected capacity change from 0 to 256
[  137.692444][ T5994] netlink: 5 bytes leftover after parsing attributes in process `syz.0.109'.
[  137.726002][ T5994] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  137.747515][ T5994] 0ªX¹¦Dö»: entered allmulticast mode
[  138.694566][ T5989] loop2: detected capacity change from 0 to 2048
[  138.734654][ T2990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.741583][ T5999] ptrace attach of "./syz-executor exec"[5236] was attempted by "./syz-executor exec"[5999]
[  138.772774][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  138.785245][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  138.793431][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  138.801530][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  138.810663][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  138.818072][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.837062][ T5234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.861081][ T5989]  loop2: p3 < > p4 < >
[  138.865570][ T5989] loop2: partition table partially beyond EOD, truncated
[  138.901988][ T5989] loop2: p3 start 4284289 is beyond EOD, truncated
[  139.034992][ T6000] ip6gretap0 speed is unknown, defaulting to 1000
[  139.380092][ T5243] Bluetooth: hci4: command tx timeout
[  140.292140][ T6009] loop3: detected capacity change from 0 to 764
[  140.356561][ T6009] rock: directory entry would overflow storage
[  140.458665][ T6009] rock: sig=0x4654, size=5, remaining=4
[  140.832398][ T2990] bridge_slave_1: left allmulticast mode
[  140.838121][ T2990] bridge_slave_1: left promiscuous mode
[  140.845357][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.846477][ T6020] IPv6: addrconf: prefix option has invalid lifetime
[  140.911757][ T5243] Bluetooth: hci2: command tx timeout
[  140.960262][ T2990] bridge_slave_0: left allmulticast mode
[  140.980814][ T2990] bridge_slave_0: left promiscuous mode
[  140.986848][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.541177][ T5582] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  142.737715][ T5243] Bluetooth: hci0: unexpected event for opcode 0x1408
[  142.747643][ T5582] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  142.788811][ T5582] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  142.798005][ T5582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.853497][ T6042] netlink: 'syz.2.119': attribute type 11 has an invalid length.
[  142.905635][ T5582] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1
[  142.978649][ T5243] Bluetooth: hci2: command tx timeout
[  143.099410][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.109013][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.127565][ T5582] usb 4-1: USB disconnect, device number 3
[  143.281032][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.574993][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.651010][ T6048] loop3: detected capacity change from 0 to 16
[  143.674818][ T6048] erofs: (device loop3): mounted with root inode @ nid 36.
[  143.686643][ T6048] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  143.703207][ T6048] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851]
[  143.714457][ T6048] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  143.725257][ T6048] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  143.736183][ T6048] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851]
[  143.747366][ T6048] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  145.058662][ T5243] Bluetooth: hci2: command tx timeout
[  145.117609][ T2990] bond0 (unregistering): Released all slaves
[  147.139256][ T5243] Bluetooth: hci2: command tx timeout
[  148.642960][ T6064] loop2: detected capacity change from 0 to 1024
[  148.729801][ T6064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.864803][ T6071] loop3: detected capacity change from 0 to 512
[  149.023190][ T6071] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  149.275670][ T6000] chnl_net:caif_netlink_parms(): no params data found
[  149.603090][ T6067] loop3: detected capacity change from 0 to 1024
[  149.635166][ T6073] loop0: detected capacity change from 0 to 1024
[  149.690344][ T6067] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  149.702358][ T6067] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  149.717745][ T6067] EXT4-fs (loop3): invalid journal inode
[  149.723615][ T6067] EXT4-fs (loop3): can't get journal size
[  149.730294][ T6073] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  149.753246][ T6067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  149.815118][ T6073] JBD2: no valid journal superblock found
[  149.848171][ T6073] EXT4-fs (loop0): Could not load journal inode
[  150.367855][ T5234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.504397][ T6073] loop0: detected capacity change from 0 to 512
[  150.605602][ T6073] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent
[  150.656794][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.732017][ T6094] loop0: detected capacity change from 0 to 128
[  151.775895][ T2990] hsr_slave_0: left promiscuous mode
[  151.839465][ T2990] hsr_slave_1: left promiscuous mode
[  151.849907][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.874992][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.333792][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.486331][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.545211][ T6104] loop1: detected capacity change from 0 to 256
[  152.556298][ T6104] exfat: Deprecated parameter 'codepage'
[  152.570656][ T6104] exfat: Bad value for 'codepage'
[  152.613505][ T2990] veth1_macvtap: left promiscuous mode
[  152.642975][ T2990] veth0_macvtap: left promiscuous mode
[  152.649444][ T6104] ax25_connect(): syz.1.131 uses autobind, please contact jreuter@yaina.de
[  152.664090][ T2990] veth1_vlan: left promiscuous mode
[  152.681524][ T2990] veth0_vlan: left promiscuous mode
[  152.819810][ T6114] netlink: 'syz.0.132': attribute type 11 has an invalid length.
[  153.078620][   T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  153.292480][   T25] usb 3-1: config 0 has an invalid interface number: 204 but max is 1
[  153.312072][   T25] usb 3-1: config 0 has no interface number 1
[  153.346337][   T25] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[  153.360542][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.372161][   T25] usb 3-1: Product: syz
[  153.386582][   T25] usb 3-1: Manufacturer: syz
[  153.397399][   T25] usb 3-1: SerialNumber: syz
[  153.419396][   T25] usb 3-1: config 0 descriptor??
[  153.502848][   T25] snd-usb-audio 3-1:0.204: probe with driver snd-usb-audio failed with error -22
[  153.549258][ T2990] team0 (unregistering): Port device team_slave_1 removed
[  153.554537][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.204/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.614190][ T2990] team0 (unregistering): Port device team_slave_0 removed
[  154.110568][ T6098] ip6gretap0 speed is unknown, defaulting to 1000
[  154.205972][ T6132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  154.668974][ T6138] Invalid ELF header magic: != ELF
[  155.379906][ T6138] Bluetooth: MGMT ver 1.23
[  156.668617][ T5243] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  156.677280][ T5243] Bluetooth: hci4: Injecting HCI hardware error event
[  156.686948][ T5243] Bluetooth: hci4: hardware error 0x00
[  156.798883][   T29] audit: type=1326 audit(1723796469.805:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x7ffc0000
[  156.825726][   T29] audit: type=1326 audit(1723796469.805:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x7ffc0000
[  156.851930][ T6141] loop3: detected capacity change from 0 to 1764
[  156.852094][   T29] audit: type=1326 audit(1723796469.805:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49b7778350 code=0x7ffc0000
[  156.959347][   T29] audit: type=1326 audit(1723796469.805:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x7ffc0000
[  156.984380][   T29] audit: type=1326 audit(1723796469.805:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x7ffc0000
[  157.017874][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.040932][   T29] audit: type=1326 audit(1723796469.805:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f49b77799b9 code=0x7ffc0000
[  157.070811][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.078057][ T6000] bridge_slave_0: entered allmulticast mode
[  157.085982][ T6000] bridge_slave_0: entered promiscuous mode
[  157.171094][   T29] audit: type=1326 audit(1723796469.815:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x7ffc0000
[  157.202525][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.241890][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.271696][ T6000] bridge_slave_1: entered allmulticast mode
[  157.284045][   T29] audit: type=1326 audit(1723796469.815:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x7ffc0000
[  157.299875][ T6000] bridge_slave_1: entered promiscuous mode
[  157.333334][   T29] audit: type=1326 audit(1723796469.815:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49b77799b9 code=0x7ffc0000
[  157.352715][ T6141] loop3: detected capacity change from 0 to 128
[  157.371213][   T29] audit: type=1326 audit(1723796469.815:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x7ffc0000
[  157.430575][ T6141] VFS: Found a Xenix FS (block size = 512) on device loop3
[  157.507640][ T6141] sysv_free_block: trying to free block not in datazone
[  157.565648][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.606616][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.643070][ T6141] program syz.3.135 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.746912][ T6000] team0: Port device team_slave_0 added
[  157.793724][ T6000] team0: Port device team_slave_1 added
[  157.908998][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.938773][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.982919][ T6000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.029426][ T5234] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  158.029858][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.089358][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.159817][   T51] usb 3-1: USB disconnect, device number 3
[  158.226079][ T6000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.699889][ T6168] loop1: detected capacity change from 0 to 1764
[  158.752881][ T6168] iso9660: Corrupted directory entry in block 2 of inode 1920
[  159.084394][ T5243] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  159.300245][ T6000] hsr_slave_0: entered promiscuous mode
[  159.330149][ T6000] hsr_slave_1: entered promiscuous mode
[  159.382677][ T6000] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.414133][ T6000] Cannot create hsr debugfs directory
[  159.493714][ T5582] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  159.720831][ T5582] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  159.764420][ T5582] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  159.813417][ T5582] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  159.845093][ T5582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  159.865166][ T5582] usb 3-1: SerialNumber: syz
[  159.903581][ T5582] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  159.927571][ T5582] usb-storage 3-1:1.0: USB Mass Storage device detected
[  159.978205][ T5582] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  160.019198][ T5582] scsi host1: usb-storage 3-1:1.0
[  160.222979][ T6167] loop2: detected capacity change from 0 to 512
[  160.266011][ T6167] EXT4-fs: Ignoring removed bh option
[  160.363630][ T6167] EXT4-fs (loop2): orphan cleanup on readonly fs
[  160.407981][ T6167] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  160.462334][ T6167] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.140: invalid indirect mapped block 8 (level 2)
[  160.481132][ T6186] loop1: detected capacity change from 0 to 512
[  160.495756][ T6186] EXT4-fs (loop1): blocks per group (64) and clusters per group (20800) inconsistent
[  160.667053][ T6167] EXT4-fs (loop2): Remounting filesystem read-only
[  160.674058][ T6167] EXT4-fs (loop2): 1 truncate cleaned up
[  160.709343][ T6167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  160.820339][ T6188] ALSA: seq fatal error: cannot create timer (-22)
[  161.804728][ T6000] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  161.851477][ T6000] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  161.899184][ T6000] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  161.959400][ T6000] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  162.295580][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.395995][ T6000] 8021q: adding VLAN 0 to HW filter on device team0
[  162.414540][ T6203] loop1: detected capacity change from 0 to 2048
[  162.425062][ T6203] udf: Bad value for 'umask'
[  162.454287][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.461488][ T5364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.470004][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.580491][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.587612][ T5364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.776465][ T5283] usb 3-1: USB disconnect, device number 4
[  163.650750][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  163.650765][   T29] audit: type=1326 audit(1723796476.375:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x7ffc0000
[  163.737377][   T29] audit: type=1326 audit(1723796476.375:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x7ffc0000
[  163.760791][   T29] audit: type=1326 audit(1723796476.375:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6031b78350 code=0x7ffc0000
[  163.805673][   T29] audit: type=1326 audit(1723796476.375:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x7ffc0000
[  163.910112][   T29] audit: type=1326 audit(1723796476.375:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x7ffc0000
[  164.010467][   T29] audit: type=1326 audit(1723796476.375:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6031b799b9 code=0x7ffc0000
[  164.315371][ T6231] loop1: detected capacity change from 0 to 2048
[  164.348191][   T29] audit: type=1326 audit(1723796476.375:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x7ffc0000
[  165.677066][   T29] audit: type=1326 audit(1723796476.375:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x7ffc0000
[  165.756784][   T29] audit: type=1326 audit(1723796476.385:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6031b799b9 code=0x7ffc0000
[  165.796881][   T29] audit: type=1326 audit(1723796476.385:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x7ffc0000
[  166.086759][ T6241] loop2: detected capacity change from 0 to 1024
[  166.129845][ T6241] EXT4-fs: quotafile must be on filesystem root
[  167.281121][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.312481][ T5243] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  167.597552][ T6241] loop2: detected capacity change from 0 to 1024
[  167.642124][ T6241] EXT4-fs: Ignoring removed orlov option
[  167.664166][ T6241] EXT4-fs (loop2): Test dummy encryption mode enabled
[  167.741730][ T6241] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  167.795814][ T6241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.852811][ T6241] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.150: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  168.385274][ T6241] fscrypt (loop2): Error allocating 'xts(aes)' transform: -4
[  168.504731][ T6000] veth0_vlan: entered promiscuous mode
[  168.541794][ T6000] veth1_vlan: entered promiscuous mode
[  168.556058][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.674242][ T6000] veth0_macvtap: entered promiscuous mode
[  168.733629][ T6000] veth1_macvtap: entered promiscuous mode
[  168.802821][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[  168.827280][ T6293] loop3: detected capacity change from 0 to 1024
[  168.894020][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.930880][ T6293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.930947][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.118579][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.153563][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.179272][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.198617][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.268768][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.305897][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.323542][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.369087][ T5364] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  169.396759][ T6304] ip6gretap0 speed is unknown, defaulting to 1000
[  169.414426][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.458348][ T5364] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 96 with error 28
[  169.478560][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.507877][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.530565][ T5364] EXT4-fs (loop3): This should not happen!! Data will be lost
[  169.530565][ T5364] 
[  169.548958][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.568968][ T5364] EXT4-fs (loop3): Total free blocks count 0
[  169.593493][ T5364] EXT4-fs (loop3): Free/Dirty block details
[  169.605980][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.619719][ T5364] EXT4-fs (loop3): free_blocks=68451041280
[  169.625586][ T5364] EXT4-fs (loop3): dirty_blocks=96
[  169.641905][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.662402][ T5364] EXT4-fs (loop3): Block reservation details
[  169.672491][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.682667][ T5364] EXT4-fs (loop3): i_reserved_data_blocks=6
[  169.693032][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.739796][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.740923][ T5234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.779383][ T6000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.798834][ T6000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.807750][ T6000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.818748][ T6000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.445300][ T6318] loop1: detected capacity change from 0 to 256
[  170.455398][ T6318] vfat: Unknown parameter 'uni_xlaie90'
[  170.530026][ T6318] loop1: detected capacity change from 0 to 512
[  170.558993][ T6318] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  171.073751][ T6318] EXT4-fs (loop1): 1 orphan inode deleted
[  171.079634][ T6318] EXT4-fs (loop1): 1 truncate cleaned up
[  171.090614][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.547249][ T5364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.572083][ T5364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.586630][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.654481][ T6328] loop3: detected capacity change from 0 to 512
[  172.185597][ T6328] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  172.196896][ T6328] EXT4-fs (loop3): 1 truncate cleaned up
[  172.207717][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.419840][ T6328] bridge0: port 3(erspan0) entered blocking state
[  172.426424][ T6328] bridge0: port 3(erspan0) entered disabled state
[  172.433603][ T6328] erspan0: entered allmulticast mode
[  172.439866][ T6328] erspan0: entered promiscuous mode
[  172.445506][ T6328] bridge0: port 3(erspan0) entered blocking state
[  172.452417][ T6328] bridge0: port 3(erspan0) entered forwarding state
[  172.571357][ T5234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.694085][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.739318][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.967677][ T6340] loop3: detected capacity change from 0 to 1024
[  172.981917][ T6340] hfsplus: unable to parse mount options
[  173.032557][ T6335] loop1: detected capacity change from 0 to 1024
[  173.257434][ T6335] hfsplus: unable to parse mount options
[  174.576240][ T6335] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns
[  174.723473][ T6355] warning: `syz.4.163' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  174.853746][ T6355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.163'.
[  174.866914][ T6339] loop1: detected capacity change from 0 to 2048
[  174.929341][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'.
[  174.956079][ T6339] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  175.103256][ T6339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.305086][ T6367] fuse: Unknown parameter 'group_id00000000000000000000'
[  175.428056][ T6367] loop2: detected capacity change from 0 to 512
[  175.486179][ T6367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  175.568795][ T6367] System zones: 1-12
[  175.573086][ T6367] EXT4-fs (loop2): orphan cleanup on readonly fs
[  175.711439][ T6367] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.166: invalid indirect mapped block 1819239214 (level 1)
[  175.757081][ T6379] Option '    i&1¦H¡bÓö}{³Öoõ|­E0ÊçÖóf6Äúi6M3¹ôjzg˸l¾”¬*Ó|6^…¥ŒL†„Å®' to dns_resolver key: bad/missing value
[  175.835358][ T6367] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.166: bg 0: block 361: padding at end of block bitmap is not set
[  176.003106][ T6367] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  176.032157][ T6371] netlink: 'syz.0.165': attribute type 1 has an invalid length.
[  176.057557][ T6367] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.166: attempt to clear invalid blocks 33619980 len 1
[  176.091889][ T6371] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.165'.
[  176.135995][ T6367] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.166: invalid indirect mapped block 1819239214 (level 0)
[  176.169887][ T6371] block nbd10: not configured, cannot reconfigure
[  176.195806][ T6367] EXT4-fs (loop2): 1 truncate cleaned up
[  176.236968][ T6367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  176.284781][ T6367] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.342857][ T6379] could not allocate digest TFM handle tgr160
[  176.461220][ T6367] loop2: detected capacity change from 0 to 512
[  176.518612][ T5281] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  176.553702][ T6367] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  176.599116][ T6367] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  176.615978][ T6367] EXT4-fs (loop2): 1 truncate cleaned up
[  176.639631][ T6367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.688578][ T5281] usb 2-1: device descriptor read/64, error -71
[  176.711086][ T6367] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.754244][ T6403] netlink: 'syz.4.171': attribute type 11 has an invalid length.
[  176.790906][ T6371] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  176.979949][ T5281] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  177.250027][ T6410] loop2: detected capacity change from 0 to 256
[  178.226805][ T5281] usb 2-1: device descriptor read/64, error -71
[  178.350350][ T5281] usb usb2-port1: attempt power cycle
[  178.758827][ T5281] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  178.791429][ T5281] usb 2-1: device descriptor read/8, error -71
[  179.288684][ T5281] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  181.540200][ T5281] usb 2-1: device descriptor read/8, error -71
[  182.242116][ T5281] usb usb2-port1: unable to enumerate USB device
[  182.260456][ T6414] loop4: detected capacity change from 0 to 1024
[  182.265449][ T6410] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[  182.701857][ T6427] loop3: detected capacity change from 0 to 512
[  182.719595][ T6427] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  182.737704][ T6427] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  182.748364][ T6427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.784384][ T6427] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.176: Directory hole found for htree leaf block 0
[  184.073488][ T5234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.114486][   T29] kauditd_printk_skb: 23 callbacks suppressed
[  184.114506][   T29] audit: type=1326 audit(1723796497.599:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.0.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x0
[  184.152566][ T6450] loop1: detected capacity change from 0 to 65
[  184.220411][ T6450] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  184.271842][ T6450] BFS-fs: bfs_fill_super(): Last block not available on loop1: 511
[  184.327909][ T6426] loop4: detected capacity change from 0 to 2048
[  184.430749][ T6453] loop1: detected capacity change from 0 to 512
[  184.463085][ T6426]  loop4: p3 < > p4 < >
[  184.467320][ T6426] loop4: partition table partially beyond EOD, truncated
[  184.492051][ T6426] loop4: p3 start 4284289 is beyond EOD, truncated
[  184.539744][ T6453] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.181: corrupted in-inode xattr: invalid ea_ino
[  184.588867][ T6453] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.181: couldn't read orphan inode 12 (err -117)
[  184.620307][ T4683]  loop4: p3 < > p4 < >
[  184.626263][ T6453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.648208][ T4683] loop4: partition table partially beyond EOD, truncated
[  184.667331][ T4683] loop4: p3 start 4284289 is beyond EOD, truncated
[  184.712865][   T29] audit: type=1326 audit(1723796498.209:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x0
[  184.771848][ T6446] kvm: emulating exchange as write
[  184.964820][ T6465] syz.0.184 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  185.161769][ T5243] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  185.190543][ T6461] loop3: detected capacity change from 0 to 8192
[  185.236975][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.257784][ T6461] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument
[  185.257784][ T6461] 
[  185.398812][   T51] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  185.490153][ T6471] netlink: 'syz.1.185': attribute type 11 has an invalid length.
[  185.648664][   T51] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  185.657809][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.715784][   T51] usb 1-1: config 0 descriptor??
[  185.785929][ T6474] loop3: detected capacity change from 0 to 256
[  185.883037][ T6479] fuse: Bad value for 'fd'
[  188.619728][ T6474] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[  188.827420][   T51] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  188.842937][   T51] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  189.826743][   T51] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  189.839852][   T51] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  189.888589][   T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  190.026780][   T51] asix 1-1:0.0 eth1: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, 76:87:c5:9d:aa:0f
[  190.487615][   T25] usb 3-1: device descriptor read/64, error -71
[  190.495404][   T51] usb 1-1: USB disconnect, device number 4
[  190.507838][   T51] asix 1-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet
[  191.703676][ T5246] Bluetooth: hci1: command 0x0406 tx timeout
[  192.069531][   T29] audit: type=1326 audit(1723796505.559:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  192.123093][   T29] audit: type=1326 audit(1723796505.569:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  192.294426][   T29] audit: type=1326 audit(1723796505.569:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e35578350 code=0x7ffc0000
[  192.408221][   T29] audit: type=1326 audit(1723796505.569:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  192.438681][   T29] audit: type=1326 audit(1723796505.569:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  192.465055][   T29] audit: type=1326 audit(1723796505.599:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  192.573378][ T6511] lo: entered allmulticast mode
[  192.583813][ T6511] lo: left allmulticast mode
[  193.274678][   T29] audit: type=1326 audit(1723796505.599:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  193.320426][   T29] audit: type=1326 audit(1723796505.599:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  193.525340][   T29] audit: type=1326 audit(1723796505.599:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  194.408692][   T29] audit: type=1326 audit(1723796505.599:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x7ffc0000
[  194.474372][ T6522] loop4: detected capacity change from 0 to 8
[  194.609405][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  194.616035][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  195.108686][ T5319] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  195.338989][ T5319] usb 5-1: device descriptor read/64, error -71
[  195.703184][ T5319] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  196.058749][ T5319] usb 5-1: device descriptor read/64, error -71
[  196.325955][ T5319] usb usb5-port1: attempt power cycle
[  197.199070][ T5319] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  197.232326][ T5319] usb 5-1: device descriptor read/8, error -71
[  197.658884][ T5319] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  198.592825][ T5243] Bluetooth: hci1: unexpected event for opcode 0x0c58
[  198.613726][ T5319] usb 5-1: device descriptor read/8, error -71
[  198.748965][ T5319] usb usb5-port1: unable to enumerate USB device
[  198.821696][ T6574] bridge0: entered promiscuous mode
[  199.969776][ T6577] loop3: detected capacity change from 0 to 8
[  200.365008][ T6571] block device autoloading is deprecated and will be removed.
[  200.375608][ T6570] bridge0: left promiscuous mode
[  200.885765][ T5243] Bluetooth: hci1: unexpected event for opcode 0x1408
[  200.909819][ T6596] netlink: 'syz.0.216': attribute type 11 has an invalid length.
[  201.448656][   T25] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  201.578882][ T5266] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  201.661267][   T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  201.674228][ T5281] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  201.698492][   T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  201.724093][   T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  201.735494][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  201.743603][   T25] usb 2-1: SerialNumber: syz
[  201.759010][ T5266] usb 5-1: device descriptor read/64, error -71
[  201.766071][   T25] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  201.807332][   T25] usb-storage 2-1:1.0: USB Mass Storage device detected
[  201.835799][   T25] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  201.857178][   T25] scsi host1: usb-storage 2-1:1.0
[  201.883041][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  201.904116][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  201.947557][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  201.969641][   T25] usb 2-1: USB disconnect, device number 8
[  201.979980][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  201.987996][ T5281] usb 3-1: SerialNumber: syz
[  202.025121][ T6619] loop3: detected capacity change from 0 to 2048
[  202.039604][ T5281] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  202.050852][ T5266] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  202.063229][ T5281] usb-storage 3-1:1.0: USB Mass Storage device detected
[  202.084801][ T5281] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  202.093861][ T5281] scsi host2: usb-storage 3-1:1.0
[  202.099873][ T6619]  loop3: p3 < > p4 < >
[  202.105816][ T6619] loop3: partition table partially beyond EOD, truncated
[  202.120431][ T6619] loop3: p3 start 4284289 is beyond EOD, truncated
[  202.218757][ T5266] usb 5-1: device descriptor read/64, error -71
[  202.289486][ T6611] loop2: detected capacity change from 0 to 512
[  202.304543][ T6611] EXT4-fs: Ignoring removed bh option
[  202.339768][ T6611] EXT4-fs (loop2): orphan cleanup on readonly fs
[  202.359001][ T5266] usb usb5-port1: attempt power cycle
[  202.361312][ T6611] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  202.391555][ T6611] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.222: invalid indirect mapped block 8 (level 2)
[  202.413874][ T6611] EXT4-fs (loop2): Remounting filesystem read-only
[  202.427228][ T6611] EXT4-fs (loop2): 1 truncate cleaned up
[  202.437839][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.701669][ T5281] usb 3-1: USB disconnect, device number 7
[  202.716257][ T6628] loop1: detected capacity change from 0 to 1024
[  202.799201][ T5266] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  202.808372][ T6628] hfsplus: unable to parse mount options
[  202.959417][ T5266] usb 5-1: device descriptor read/8, error -71
[  203.275314][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'.
[  203.337819][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  203.337844][   T29] audit: type=1326 audit(1723796516.829:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.1.226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7db799b9 code=0x0
[  203.392405][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.400017][ T5266] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  203.441872][ T5266] usb 5-1: device descriptor read/8, error -71
[  203.500786][ T6634] loop1: detected capacity change from 0 to 512
[  203.562361][ T5266] usb usb5-port1: unable to enumerate USB device
[  203.651115][ T6634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  203.669249][ T6638] loop3: detected capacity change from 0 to 8
[  203.737978][ T6634] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.877375][ T5243] Bluetooth: hci1: unexpected event for opcode 0x1408
[  203.880775][ T6646] netlink: 'syz.0.231': attribute type 11 has an invalid length.
[  204.065208][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  204.374871][ T6652] netlink: 664 bytes leftover after parsing attributes in process `syz.1.234'.
[  204.408807][   T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  204.466710][ T6654] netlink: 56 bytes leftover after parsing attributes in process `syz.4.235'.
[  204.795073][ T6661] loop3: detected capacity change from 0 to 128
[  205.500208][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  205.590906][   T25] usb 1-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12
[  205.642852][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.691680][   T25] usb 1-1: config 0 descriptor??
[  205.723310][   T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  205.954564][ T6666] loop3: detected capacity change from 0 to 256
[  206.783980][ T6666] vfat: Bad value for 'dmask'
[  206.866837][   T25] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  207.281523][ T6676] loop2: detected capacity change from 0 to 2048
[  207.349000][ T6676]  loop2: p3 < > p4 < >
[  207.385351][ T6676] loop2: partition table partially beyond EOD, truncated
[  207.399652][ T6676] loop2: p3 start 4284289 is beyond EOD, truncated
[  207.963902][ T6680] loop3: detected capacity change from 0 to 8
[  208.008153][ T6680] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾'
[  208.929003][ T6686] netlink: 'syz.4.242': attribute type 11 has an invalid length.
[  208.942185][ T6690] loop2: detected capacity change from 0 to 256
[  209.988702][ T5319] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  210.171378][ T5319] usb 5-1: device descriptor read/64, error -71
[  210.449512][ T5319] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  210.618592][ T5319] usb 5-1: device descriptor read/64, error -71
[  210.643574][ T5280] usb 1-1: USB disconnect, device number 5
[  210.668659][ T5283] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  210.771996][ T5319] usb usb5-port1: attempt power cycle
[  210.876611][ T5283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  210.898174][ T5283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  210.927076][ T5283] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  210.944471][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  210.968639][ T5283] usb 3-1: SerialNumber: syz
[  211.019537][ T5283] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  211.061074][ T5283] usb-storage 3-1:1.0: USB Mass Storage device detected
[  211.145625][ T5283] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  211.165814][ T5283] scsi host1: usb-storage 3-1:1.0
[  211.265189][ T6713] loop1: detected capacity change from 0 to 8
[  211.339208][ T6713] SQUASHFS error: Failed to read block 0x1ec: -5
[  211.346232][ T6713] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  211.832017][ T6715] loop2: detected capacity change from 0 to 512
[  211.876284][ T6715] EXT4-fs: Ignoring removed bh option
[  211.920423][ T6715] EXT4-fs (loop2): orphan cleanup on readonly fs
[  211.947573][ T6715] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  211.964478][ T5319] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  211.983375][ T6715] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.247: invalid indirect mapped block 8 (level 2)
[  212.006469][ T6715] EXT4-fs (loop2): Remounting filesystem read-only
[  212.014114][ T5319] usb 5-1: device descriptor read/8, error -71
[  212.018175][ T6715] EXT4-fs (loop2): 1 truncate cleaned up
[  212.040693][ T5281] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  212.067201][ T6715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  212.171619][ T5280] usb 3-1: USB disconnect, device number 8
[  212.261027][ T5281] usb 1-1: config 1 has an invalid interface number: 3 but max is 2
[  212.270980][ T5281] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  212.288118][ T5281] usb 1-1: config 1 has no interface number 1
[  212.301166][ T5319] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  212.303000][ T6689] syz.3.244 (6689) used greatest stack depth: 18448 bytes left
[  212.327273][ T5281] usb 1-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30
[  212.351845][ T5281] usb 1-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187
[  212.369877][ T5319] usb 5-1: device descriptor read/8, error -71
[  212.412930][ T5281] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  212.462386][ T5281] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  212.514259][ T5319] usb usb5-port1: unable to enumerate USB device
[  212.534883][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.573265][ T5281] usb 1-1: Product: syz
[  212.577625][ T5281] usb 1-1: Manufacturer: syz
[  212.582745][ T5281] usb 1-1: SerialNumber: syz
[  213.354030][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.547018][ T6727] loop4: detected capacity change from 0 to 8
[  213.556950][ T6726] vivid-000: kernel_thread() failed
[  213.698016][ T6727] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾'
[  213.726955][ T5281] hub 1-1:1.3: bad descriptor, ignoring hub
[  213.733301][ T5281] hub 1-1:1.3: probe with driver hub failed with error -5
[  214.012377][ T5281] usb 1-1: USB disconnect, device number 6
[  214.060393][ T6736] Zero length message leads to an empty skb
[  214.062651][ T6732] netlink: 'syz.3.256': attribute type 11 has an invalid length.
[  214.166676][ T6738] bond0: entered promiscuous mode
[  214.195366][ T5479] udevd[5479]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  214.230904][ T6738] bond_slave_0: entered promiscuous mode
[  214.263669][ T6738] bond_slave_1: entered promiscuous mode
[  214.282558][ T6739] netlink: 184876 bytes leftover after parsing attributes in process `syz.2.255'.
[  214.715985][ T6742] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  214.861298][ T6752] loop3: detected capacity change from 0 to 8
[  215.016195][ T6754] Unsupported ieee802154 address type: 0
[  216.049476][ T6751] SQUASHFS error: Failed to read block 0x1ec: -5
[  216.059443][ T6751] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  216.145607][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'.
[  216.155953][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'.
[  216.799816][ T6741] tipc: Failed to obtain node identity
[  216.805448][ T6741] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  216.822942][   T29] audit: type=1326 audit(1723796530.319:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28f99799b9 code=0x0
[  216.929632][ T6741] bond0: (slave bond_slave_0): Releasing backup interface
[  217.049630][ T6741] bond_slave_0: left promiscuous mode
[  217.090973][ T6762] loop3: detected capacity change from 0 to 512
[  217.677944][ T6762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.873311][ T6762] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.913273][ T6737] bond0: left promiscuous mode
[  217.918143][ T6737] bond_slave_1: left promiscuous mode
[  217.956746][ T6769] ip6gretap0 speed is unknown, defaulting to 1000
[  218.048784][ T5283] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  218.110410][   T29] audit: type=1326 audit(1723796531.609:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28f99799b9 code=0x0
[  218.203306][ T6763] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  218.230569][ T5283] usb 3-1: device descriptor read/64, error -71
[  218.242842][ T6763] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 511 with error 28
[  218.258266][ T6763] EXT4-fs (loop3): This should not happen!! Data will be lost
[  218.258266][ T6763] 
[  218.308791][ T6763] EXT4-fs (loop3): Total free blocks count 0
[  218.447852][ T6763] EXT4-fs (loop3): Free/Dirty block details
[  218.447925][ T6763] EXT4-fs (loop3): free_blocks=65280
[  218.447956][ T6763] EXT4-fs (loop3): dirty_blocks=511
[  218.447982][ T6763] EXT4-fs (loop3): Block reservation details
[  218.448000][ T6763] EXT4-fs (loop3): i_reserved_data_blocks=511
[  218.518699][ T5283] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  218.670339][ T5283] usb 3-1: device descriptor read/64, error -71
[  218.789039][ T5283] usb usb3-port1: attempt power cycle
[  219.198696][ T5283] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  219.585008][ T5364] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 0 with max blocks 3 with error 28
[  219.640683][ T5283] usb 3-1: device descriptor read/8, error -71
[  219.718762][ T6799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.269'.
[  219.880780][ T6804] loop3: detected capacity change from 0 to 8
[  219.904004][ T6804] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾'
[  219.949013][ T5283] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  220.010010][ T5283] usb 3-1: device descriptor read/8, error -71
[  220.150394][ T5283] usb usb3-port1: unable to enumerate USB device
[  221.345270][   T29] audit: type=1326 audit(1723796534.059:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.0.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x0
[  221.382191][ T6811] loop2: detected capacity change from 0 to 1024
[  221.598686][ T6811] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  221.687824][ T6822] loop3: detected capacity change from 0 to 8
[  221.723416][ T6822] SQUASHFS error: Failed to read block 0x1ec: -5
[  221.729919][ T6822] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  222.330137][ T6811] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  222.396273][ T6811] EXT4-fs (loop2): group descriptors corrupted!
[  222.595995][ T6828] loop4: detected capacity change from 0 to 2048
[  222.613480][ T6828] EXT4-fs: Ignoring removed mblk_io_submit option
[  222.713397][ T6828] EXT4-fs: Ignoring removed mblk_io_submit option
[  222.739734][ T6828] EXT4-fs: Ignoring removed i_version option
[  222.831022][ T6828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.923836][ T6834] loop3: detected capacity change from 0 to 4096
[  223.058747][ T5281] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  223.124919][ T6834] ntfs3: Unknown parameter 'umfY
[  223.124919][ T6834] ûN„ù0000000000000000003'
[  224.453050][ T5283] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  224.468538][ T5281] usb 3-1: device not accepting address 13, error -71
[  225.066890][ T6844] loop3: detected capacity change from 0 to 256
[  225.159445][ T5283] usb 5-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb
[  225.186001][ T6834] 9pnet_fd: Insufficient options for proto=fd
[  225.198231][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.225981][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[  225.247084][ T5283] usb 5-1: config 0 descriptor??
[  225.277210][ T5283] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  225.392615][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[  225.513336][   T25] usb 5-1: USB disconnect, device number 14
[  225.519870][ T6846] sch_tbf: burst 0 is lower than device syz_tun mtu (1514) !
[  225.773736][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.601695][ T6871] loop3: detected capacity change from 0 to 8
[  227.602345][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'.
[  227.618587][ T6871] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾'
[  227.631350][   T29] audit: type=1326 audit(227.599:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.4.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28f99799b9 code=0x0
[  228.058615][ T5582] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  228.072877][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'.
[  228.121546][ T6878] netlink: 'syz.2.284': attribute type 11 has an invalid length.
[  228.248594][ T5582] usb 2-1: device descriptor read/64, error -71
[  228.339969][ T6882] loop2: detected capacity change from 0 to 256
[  228.361452][ T6882] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[  228.828932][ T5582] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  228.998748][ T5582] usb 2-1: device descriptor read/64, error -71
[  229.531407][ T6884] loop4: detected capacity change from 0 to 512
[  229.538139][ T6884] EXT4-fs: Ignoring removed orlov option
[  229.656757][ T5582] usb usb2-port1: attempt power cycle
[  229.678066][ T6884] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  229.747456][ T6884] EXT4-fs (loop4): 1 truncate cleaned up
[  229.754951][ T6884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.933554][ T6895] loop3: detected capacity change from 0 to 8
[  230.063355][ T6893] loop2: detected capacity change from 0 to 8192
[  230.109992][ T5582] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  230.150779][ T5582] usb 2-1: device descriptor read/8, error -71
[  230.242227][ T5243] Bluetooth: hci1: unexpected event for opcode 0x1005
[  230.526357][ T5582] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  230.645353][   T29] audit: type=1326 audit(230.609:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x0
[  231.938750][ T5582] usb 2-1: device descriptor read/8, error -71
[  232.100537][ T5582] usb usb2-port1: unable to enumerate USB device
[  232.109919][ T6908] loop2: detected capacity change from 0 to 164
[  232.181112][ T6911] loop3: detected capacity change from 0 to 1024
[  232.215863][ T6912] loop1: detected capacity change from 0 to 8
[  232.223150][ T6908] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  232.257111][ T6912] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾'
[  232.357205][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'.
[  233.791835][ T5243] Bluetooth: hci1: unexpected event for opcode 0x1005
[  233.907021][ T6923] loop2: detected capacity change from 0 to 256
[  233.921000][   T29] audit: type=1326 audit(233.889:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.1.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7db799b9 code=0x0
[  233.997738][ T6923] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[  234.197257][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'.
[  238.745420][ T6951] loop2: detected capacity change from 0 to 256
[  238.975105][ T5243] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  238.983351][ T5243] Bluetooth: hci0: unexpected event for opcode 0x6a9b
[  239.120133][ T6951] exFAT-fs (loop2): IO charset cp936-dmask=00000000000000000IßR³6 not found
[  239.659669][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.688722][ T6967] loop1: detected capacity change from 0 to 8
[  239.751496][ T6967] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾'
[  240.120409][ T6972] loop1: detected capacity change from 0 to 512
[  240.207298][ T6972] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  240.341250][ T6972] EXT4-fs (loop1): 1 truncate cleaned up
[  240.503137][ T6972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.953081][ T6981] loop2: detected capacity change from 0 to 1024
[  240.978086][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  241.031252][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  241.041477][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  241.050638][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  241.060938][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  241.068342][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  241.218356][   T29] audit: type=1326 audit(241.179:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.3.312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x0
[  241.294593][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.690053][ T6982] ip6gretap0 speed is unknown, defaulting to 1000
[  242.008375][ T2990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.197251][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'.
[  242.344370][ T2990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.407672][ T7008] loop3: detected capacity change from 0 to 512
[  242.465820][ T7008] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.317: Invalid inode bitmap blk 4 in block_group 0
[  242.518585][   T51] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  242.537328][ T7008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.666871][ T2990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.680059][   T51] usb 2-1: device descriptor read/64, error -71
[  242.686523][   T29] audit: type=1326 audit(242.649:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.3.317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x0
[  242.787109][ T2990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.998779][   T51] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  243.120023][ T6982] chnl_net:caif_netlink_parms(): no params data found
[  243.138840][ T5246] Bluetooth: hci5: command tx timeout
[  243.180099][   T51] usb 2-1: device descriptor read/64, error -71
[  243.349022][   T51] usb usb2-port1: attempt power cycle
[  243.381018][ T2990] bridge_slave_1: left allmulticast mode
[  243.396197][ T2990] bridge_slave_1: left promiscuous mode
[  243.404597][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.492117][ T2990] bridge_slave_0: left allmulticast mode
[  243.515660][ T2990] bridge_slave_0: left promiscuous mode
[  243.525826][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.665219][ T5234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.778625][   T51] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  243.830034][   T51] usb 2-1: device descriptor read/8, error -71
[  244.148514][   T51] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  244.158108][ T5246] Bluetooth: hci0: unexpected event for opcode 0x0405
[  244.185514][   T51] usb 2-1: device descriptor read/8, error -71
[  244.309106][   T51] usb usb2-port1: unable to enumerate USB device
[  244.540561][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.579876][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.588697][   T51] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  244.611478][ T2990] bond0 (unregistering): Released all slaves
[  244.664064][ T7024] ip6gretap0 speed is unknown, defaulting to 1000
[  244.846472][   T51] usb 4-1: config 0 has an invalid interface number: 204 but max is 1
[  244.867114][   T51] usb 4-1: config 0 has no interface number 1
[  244.882028][ T7041] loop2: detected capacity change from 0 to 512
[  244.893842][ T7041] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.322: corrupted in-inode xattr: invalid ea_ino
[  244.907618][ T7041] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.322: couldn't read orphan inode 12 (err -117)
[  244.932613][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.942840][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.958039][   T51] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[  244.974515][ T7041] syz.2.322[7041] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.974617][ T7041] syz.2.322[7041] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.986351][ T7041] syz.2.322[7041] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.988740][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.008945][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.008974][   T51] usb 4-1: Product: syz
[  245.009000][   T51] usb 4-1: Manufacturer: syz
[  245.009018][   T51] usb 4-1: SerialNumber: syz
[  245.011642][   T51] usb 4-1: config 0 descriptor??
[  245.109540][ T6982] bridge_slave_0: entered allmulticast mode
[  245.151434][ T6982] bridge_slave_0: entered promiscuous mode
[  245.221117][ T5246] Bluetooth: hci5: command tx timeout
[  245.306974][   T51] snd-usb-audio 4-1:0.204: probe with driver snd-usb-audio failed with error -22
[  245.386969][ T7049] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.322: Directory hole found for htree leaf block 0
[  245.600785][ T7050] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.322: Directory hole found for htree leaf block 0
[  246.336248][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.353375][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.365595][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.204/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  246.368866][ T6982] bridge_slave_1: entered allmulticast mode
[  246.398910][ T6982] bridge_slave_1: entered promiscuous mode
[  246.426880][ T7057] netlink: 'syz.1.323': attribute type 11 has an invalid length.
[  246.467388][   T25] usb 4-1: USB disconnect, device number 4
[  246.541388][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.660918][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.827239][ T6982] team0: Port device team_slave_0 added
[  246.857892][ T2990] hsr_slave_0: left promiscuous mode
[  246.881978][ T2990] hsr_slave_1: left promiscuous mode
[  246.908172][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.916770][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.944404][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.952468][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.983513][ T2990] veth1_macvtap: left promiscuous mode
[  246.997314][ T2990] veth0_macvtap: left promiscuous mode
[  247.012640][ T2990] veth1_vlan: left promiscuous mode
[  247.024604][ T2990] veth0_vlan: left promiscuous mode
[  247.200905][   T29] audit: type=1326 audit(247.149:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x0
[  247.298860][ T5246] Bluetooth: hci5: command tx timeout
[  247.812547][ T2990] team0 (unregistering): Port device team_slave_1 removed
[  247.926134][ T2990] team0 (unregistering): Port device team_slave_0 removed
[  247.949904][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.136305][ T7086] loop3: detected capacity change from 0 to 8
[  249.186441][ T7086] SQUASHFS error: Failed to read block 0x1ec: -5
[  249.193129][ T7086] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  249.383358][ T5246] Bluetooth: hci5: command tx timeout
[  249.816366][ T6982] team0: Port device team_slave_1 added
[  250.003923][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.030746][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.104352][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.369457][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.376466][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.489143][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.912849][ T7096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'.
[  252.099734][ T6982] hsr_slave_0: entered promiscuous mode
[  252.132875][ T6982] hsr_slave_1: entered promiscuous mode
[  252.168155][ T6982] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  252.185747][ T6982] Cannot create hsr debugfs directory
[  252.200070][   T51] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  252.258008][ T7105] netlink: 'syz.3.333': attribute type 11 has an invalid length.
[  252.368910][   T51] usb 3-1: device descriptor read/64, error -71
[  252.618666][   T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  252.658651][   T51] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  252.733402][ T7119] loop3: detected capacity change from 0 to 256
[  252.781057][ T7119] exfat: Bad value for 'dmask'
[  252.829302][   T51] usb 3-1: device descriptor read/64, error -71
[  253.061751][   T51] usb usb3-port1: attempt power cycle
[  253.071914][   T25] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  254.409874][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'.
[  254.520895][   T25] usb 2-1: unable to read config index 3 descriptor/all
[  254.529433][   T29] audit: type=1326 audit(254.469:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7130 comm="syz.3.337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x0
[  254.562378][ T7137] futex_wake_op: syz.2.338 tries to shift op by 32; fix this program
[  254.793286][   T25] usb 2-1: can't read configurations, error -71
[  254.818961][ T7141] netlink: 5 bytes leftover after parsing attributes in process `syz.1.339'.
[  255.520159][ T7141] ip6gretap0 speed is unknown, defaulting to 1000
[  255.736360][ T7152] loop2: detected capacity change from 0 to 512
[  255.949285][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  255.955861][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  256.096033][ T7158] loop3: detected capacity change from 0 to 8
[  259.588265][ T7158] SQUASHFS error: Failed to read block 0x1ec: -5
[  259.594780][ T7158] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  259.967556][ T5246] Bluetooth: hci0: unexpected event for opcode 0x1408
[  260.566061][ T7168] netlink: 'syz.2.344': attribute type 11 has an invalid length.
[  261.290863][ T6982] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  262.319282][ T6982] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  262.336440][   T29] audit: type=1326 audit(262.289:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.0.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49b77799b9 code=0x0
[  262.394777][ T6982] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  263.358334][ T6982] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  264.173523][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.225078][ T6982] 8021q: adding VLAN 0 to HW filter on device team0
[  264.283759][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.290977][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.373457][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.380651][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.669740][   T25] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  264.807650][ T7215] sctp: [Deprecated]: syz.1.353 (pid 7215) Use of int in max_burst socket option deprecated.
[  264.807650][ T7215] Use struct sctp_assoc_value instead
[  264.898726][   T25] usb 3-1: device descriptor read/64, error -71
[  265.179455][   T25] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  265.221478][ T5246] Bluetooth: hci1: unexpected event for opcode 0x1005
[  265.296379][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.368599][   T25] usb 3-1: device descriptor read/64, error -71
[  265.508547][ T5280] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  265.517325][   T25] usb usb3-port1: attempt power cycle
[  265.749227][ T5280] usb 2-1: Using ep0 maxpacket: 32
[  265.792227][ T5280] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  265.868040][ T5280] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  265.931128][ T5280] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  265.972961][ T5280] usb 2-1: Manufacturer: syz
[  265.978835][   T25] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  266.002649][ T5280] usb 2-1: config 0 descriptor??
[  266.071299][   T25] usb 3-1: device descriptor read/8, error -71
[  266.339483][ T6982] veth0_vlan: entered promiscuous mode
[  266.378573][   T25] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  266.402616][ T6982] veth1_vlan: entered promiscuous mode
[  266.429399][   T25] usb 3-1: device descriptor read/8, error -71
[  266.504889][ T6982] veth0_macvtap: entered promiscuous mode
[  266.529506][ T6982] veth1_macvtap: entered promiscuous mode
[  266.559220][   T25] usb usb3-port1: unable to enumerate USB device
[  266.629214][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.697516][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.717946][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.761734][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.806913][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.849025][ T7257] netlink: 'syz.3.357': attribute type 11 has an invalid length.
[  266.871648][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.887212][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.948365][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.991767][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.137313][ T7258] ip6gretap0 speed is unknown, defaulting to 1000
[  267.137859][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.218978][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.266454][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.323002][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.373854][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.404739][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.425552][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.457546][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.503251][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.588692][ T5281] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  267.851826][ T5283] usb 2-1: USB disconnect, device number 19
[  268.349910][ T5281] usb 1-1: config 0 has an invalid interface number: 204 but max is 1
[  269.240151][ T6982] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.254637][ T5281] usb 1-1: config 0 has no interface number 1
[  269.275231][ T6982] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.303842][ T6982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.313110][ T5281] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[  269.323158][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.325693][ T6982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.345467][ T5281] usb 1-1: Product: syz
[  269.353018][ T5281] usb 1-1: Manufacturer: syz
[  269.357658][ T5281] usb 1-1: SerialNumber: syz
[  269.466970][ T5281] usb 1-1: config 0 descriptor??
[  269.527114][ T5281] snd-usb-audio 1-1:0.204: probe with driver snd-usb-audio failed with error -22
[  269.643049][   T29] audit: type=1326 audit(269.609:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.2.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e355799b9 code=0x0
[  269.658979][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.733527][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.736007][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.204/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  269.839262][   T25] usb 1-1: USB disconnect, device number 7
[  269.887314][ T5361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.902038][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'.
[  269.919839][ T5361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.920018][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'.
[  270.045661][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[  270.077697][ T7286] loop3: detected capacity change from 0 to 64
[  270.191560][ T7286] hfs: unable to load iocharset "macromamP?oyn"
[  270.195091][ T7290] loop1: detected capacity change from 0 to 512
[  270.213764][ T7286] hfs: unable to parse mount options
[  270.225986][ T7289] loop4: detected capacity change from 0 to 8
[  270.230881][ T7290] EXT4-fs: Ignoring removed oldalloc option
[  270.332452][ T7290] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.363: Parent and EA inode have the same ino 15
[  270.364414][ T7290] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  270.403907][ T7290] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.363: Parent and EA inode have the same ino 15
[  270.424610][ T7290] EXT4-fs (loop1): 1 orphan inode deleted
[  270.483501][ T7290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.642916][ T5246] Bluetooth: hci1: unexpected event for opcode 0x1005
[  270.673614][ T7295] loop2: detected capacity change from 0 to 512
[  270.710517][ T7295] ext4: Unknown parameter 'noacl'
[  271.573745][   T29] audit: type=1804 audit(271.009:169): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.363" name="/newroot/78/file0/file0/file0" dev="loop1" ino=13 res=1 errno=0
[  271.616140][   T29] audit: type=1800 audit(271.429:170): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.363" name="file0" dev="loop1" ino=13 res=0 errno=0
[  271.616698][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'.
[  271.800938][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.897717][ T7305] netlink: 'syz.3.367': attribute type 11 has an invalid length.
[  271.949000][   T29] audit: type=1326 audit(271.899:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.1.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7db799b9 code=0x0
[  272.118564][ T5283] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  272.452126][ T7322] loop2: detected capacity change from 0 to 1024
[  272.748183][ T7322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.821550][ T7322] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  272.961893][ T5283] usb 5-1: device descriptor read/64, error -71
[  273.192420][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.201995][ T7313] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0)
[  273.280793][ T5283] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  273.453031][ T5283] usb 5-1: device descriptor read/64, error -71
[  273.584804][ T5283] usb usb5-port1: attempt power cycle
[  273.631225][ T7334] loop1: detected capacity change from 0 to 512
[  273.658374][ T7334] EXT4-fs: Ignoring removed mblk_io_submit option
[  273.667146][ T7334] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent
[  273.748587][ T5281] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  273.970747][ T5281] usb 3-1: Using ep0 maxpacket: 16
[  273.978782][ T5281] usb 3-1: config 0 has an invalid interface number: 153 but max is 0
[  273.998762][ T5281] usb 3-1: config 0 has no interface number 0
[  274.007508][ T5281] usb 3-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64
[  274.023906][ T5283] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  274.031648][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.046146][ T5281] usb 3-1: Product: syz
[  274.050500][ T5281] usb 3-1: Manufacturer: syz
[  274.055132][ T5281] usb 3-1: SerialNumber: syz
[  274.062505][ T5281] usb 3-1: config 0 descriptor??
[  274.070739][ T5281] sierra 3-1:0.153: Sierra USB modem converter detected
[  274.078294][ T5283] usb 5-1: device descriptor read/8, error -71
[  274.349039][ T5283] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  274.366614][ T7332] loop2: detected capacity change from 0 to 1764
[  274.382266][ T7332] iso9660: Bad value for 'block'
[  274.415375][ T5283] usb 5-1: device descriptor read/8, error -71
[  274.464678][ T7332] loop2: detected capacity change from 0 to 512
[  274.490664][ T7332] EXT4-fs: Ignoring removed oldalloc option
[  274.549321][ T5283] usb usb5-port1: unable to enumerate USB device
[  274.572331][ T7332] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.373: Parent and EA inode have the same ino 15
[  274.599508][ T7332] EXT4-fs (loop2): Remounting filesystem read-only
[  274.606779][   T29] audit: type=1326 audit(274.569:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7db799b9 code=0x0
[  274.608372][ T7332] EXT4-fs warning (device loop2): ext4_evict_inode:254: couldn't mark inode dirty (err -5)
[  274.640457][ T7332] EXT4-fs (loop2): 1 orphan inode deleted
[  274.649799][ T7332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.743509][ T5281] usb 3-1: USB disconnect, device number 22
[  275.763629][ T5281] sierra 3-1:0.153: device disconnected
[  277.082481][ T7347] loop1: detected capacity change from 0 to 256
[  277.113626][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.157929][ T7347] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  277.242321][   T29] audit: type=1800 audit(277.209:173): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.377" name="file1" dev="loop1" ino=1048637 res=0 errno=0
[  277.752594][ T7371] loop2: detected capacity change from 0 to 1024
[  277.897479][ T7371] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  278.635732][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.688782][   T51] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  278.923657][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.949780][   T51] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  278.988502][   T51] usb 1-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36
[  279.018598][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.053499][   T51] usb 1-1: config 0 descriptor??
[  279.079138][   T51] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  279.113510][ T7377] loop1: detected capacity change from 0 to 512
[  279.197121][   T51] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  279.233853][ T7377] EXT4-fs (loop1): Test dummy encryption mode enabled
[  279.274698][ T7377] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.386: casefold flag without casefold feature
[  279.323540][   T29] audit: type=1326 audit(279.279:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6031b799b9 code=0x0
[  279.347020][ T7377] EXT4-fs (loop1): get root inode failed
[  279.525276][ T7377] EXT4-fs (loop1): mount failed
[  279.539188][    C0] Illegal XDP return value 268435456 on prog  (id 132) dev team_slave_1, expect packet loss!
[  280.196313][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  280.372431][   T25] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  280.429896][   T51] usb 1-1: USB disconnect, device number 8
[  281.851076][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  281.998915][ T7398] loop3: detected capacity change from 0 to 8
[  282.010231][ T7398] Filesystem uses "unknown" compression. This is not supported
[  282.160501][ T7398] loop3: detected capacity change from 0 to 512
[  282.188824][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  282.300063][ T7398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.317354][   T25] usb 3-1: string descriptor 0 read error: -71
[  282.337206][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  282.349699][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  282.362536][   T25] usb 3-1: can't set config #1, error -71
[  282.371372][   T25] usb 3-1: USB disconnect, device number 23
[  283.287349][ T7411] loop2: detected capacity change from 0 to 164
[  283.552525][ T5234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.748157][ T7420] Cannot find del_set index 0 as target
[  283.806177][ T7424] loop3: detected capacity change from 0 to 16
[  283.820285][ T7424] erofs: Unknown parameter '/dev/vcsa'
[  283.865122][ T7425] loop1: detected capacity change from 0 to 164
[  284.061167][ T7425] Unable to read rock-ridge attributes
[  284.200083][ T7427] loop3: detected capacity change from 0 to 256
[  285.175158][ T7427] loop3: detected capacity change from 0 to 40427
[  285.304319][ T7427] F2FS-fs (loop3): invalid crc value
[  285.377802][ T7429] Unable to read rock-ridge attributes
[  285.491854][ T7430] Unable to read rock-ridge attributes
[  285.528492][ T7430] iso9660: Corrupted directory entry in block 4 of inode 1792
[  285.568910][ T7427] F2FS-fs (loop3): Found nat_bits in checkpoint
[  285.611922][ T7429] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  285.915024][ T7427] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  286.215224][ T1127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.411803][ T1127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.696203][ T1127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.744552][ T7445] loop1: detected capacity change from 0 to 164
[  288.720565][ T1127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.078751][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'.
[  289.212171][ T7457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.406'.
[  289.759687][ T7465] loop2: detected capacity change from 0 to 8
[  289.805480][ T7465] SQUASHFS error: Failed to read block 0x1ec: -5
[  289.811961][ T7465] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  290.235107][ T1127] bridge_slave_1: left allmulticast mode
[  290.273100][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.287160][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.301840][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.347658][ T1127] bridge_slave_1: left promiscuous mode
[  290.348067][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.354762][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.398606][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  290.414598][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  290.514917][ T1127] bridge_slave_0: left allmulticast mode
[  290.529669][ T1127] bridge_slave_0: left promiscuous mode
[  290.538116][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.752837][ T5246] Bluetooth: hci0: unexpected event for opcode 0x202f
[  291.217053][ T7469] loop1: detected capacity change from 0 to 32768
[  291.244277][ T7469] XFS: ikeep mount option is deprecated.
[  291.407217][ T7469] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.549518][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.595301][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.621553][ T1127] bond0 (unregistering): Released all slaves
[  291.645533][ T7469] XFS (loop1): Ending clean mount
[  291.667376][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'.
[  291.673684][ T7469] XFS (loop1): Quotacheck needed: Please wait.
[  291.823475][ T7485] bridge0: port 3(erspan0) entered disabled state
[  291.831112][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.839346][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.928848][ T7492] loop2: detected capacity change from 0 to 512
[  291.938035][ T7469] XFS (loop1): Quotacheck: Done.
[  291.982706][ T7485] bridge0: port 3(erspan0) entered blocking state
[  291.990795][ T7485] bridge0: port 3(erspan0) entered forwarding state
[  291.999247][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.006377][ T7485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.013754][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.020893][ T7485] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.065758][ T7492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.139608][ T7485] team0: Port device bridge0 added
[  292.343449][ T7495] ------------[ cut here ]------------
[  292.349367][ T7495] WARNING: CPU: 0 PID: 7495 at include/linux/memcontrol.h:373 folio_memcg+0x111/0x220
[  292.359367][ T7495] Modules linked in:
[  292.363309][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz.0.411 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0
[  292.373723][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  292.383854][ T7495] RIP: 0010:folio_memcg+0x111/0x220
[  292.389193][ T7495] Code: 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e2 2f f8 ff 48 8b 1b 48 89 d8 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 eb ce 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 55 ff ff ff
[  292.408988][ T7495] RSP: 0018:ffffc900020ae9e0 EFLAGS: 00010246
[  292.415067][ T7495] RAX: 0000000000000000 RBX: ffff888012516280 RCX: 0000000080000000
[  292.423973][ T7495] RDX: 0000000000000000 RSI: ffffffff8c0adfc0 RDI: ffffffff8c60a8c0
[  292.432054][ T7495] RBP: ffffea00015a8008 R08: ffffffff9018c5af R09: 1ffffffff20318b5
[  292.440079][ T7495] R10: dffffc0000000000 R11: fffffbfff20318b6 R12: dffffc0000000000
[  292.448295][ T7495] R13: 0000000000400018 R14: ffffea00015a8000 R15: ffffea00015a8030
[  292.456463][ T7495] FS:  00007f49b85b06c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  292.465451][ T7495] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  292.472320][ T7495] CR2: 00007f8e34fffd58 CR3: 000000002fdbc000 CR4: 00000000003506f0
[  292.480384][ T7495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  292.488530][ T7495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  292.496504][ T7495] Call Trace:
[  292.499894][ T7495]  <TASK>
[  292.502829][ T7495]  ? __warn+0x163/0x4e0
[  292.506990][ T7495]  ? folio_memcg+0x111/0x220
[  292.511662][ T7495]  ? report_bug+0x2b3/0x500
[  292.516187][ T7495]  ? folio_memcg+0x111/0x220
[  292.520847][ T7495]  ? handle_bug+0x60/0x90
[  292.525185][ T7495]  ? exc_invalid_op+0x1a/0x50
[  292.529914][ T7495]  ? asm_exc_invalid_op+0x1a/0x20
[  292.534945][ T7495]  ? folio_memcg+0x111/0x220
[  292.539580][ T7495]  split_page_memcg+0x58/0x3f0
[  292.544661][ T7495]  ? split_page+0x205/0x230
[  292.549325][ T7495]  __vmalloc_node_range_noprof+0xa63/0x1400
[  292.555262][ T7495]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  292.561630][ T7495]  ? rcu_is_watching+0x15/0xb0
[  292.566401][ T7495]  ? trace_kmalloc+0x1f/0xd0
[  292.571321][ T7495]  ? __kmalloc_node_noprof+0x247/0x440
[  292.576833][ T7495]  ? __kvmalloc_node_noprof+0x72/0x1b0
[  292.580164][ T5246] Bluetooth: hci2: command tx timeout
[  292.582412][ T7495]  __kvmalloc_node_noprof+0x142/0x1b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  292.593485][ T7495]  ? hash_ipmac_create+0x356/0x1040
[  292.598859][ T7495]  hash_ipmac_create+0x356/0x1040
[  292.603948][ T7495]  ? __pfx_hash_ipmac_create+0x10/0x10
[  292.610067][ T7495]  ip_set_create+0xa5c/0x1900
[  292.614810][ T7495]  ? ip_set_create+0x45e/0x1900
[  292.619770][ T7495]  ? __pfx___mutex_trylock_common+0xa/0x10
[  292.625637][ T7495]  ? __pfx_ip_set_create+0x10/0x10
[  292.630971][ T7495]  ? trace_contention_end+0x3c/0x120
[  292.636348][ T7495]  ? nfnetlink_rcv_msg+0x225/0x1180
[  292.641665][ T7495]  nfnetlink_rcv_msg+0xbec/0x1180
[  292.647025][ T7495]  ? nfnetlink_rcv_msg+0x225/0x1180
[  292.652445][ T7495]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  292.657923][ T7495]  ? stack_trace_save+0x118/0x1d0
[  292.663083][ T7495]  ? dev_hard_start_xmit+0x27a/0x7e0
[  292.668491][ T7495]  ? __dev_queue_xmit+0x1b63/0x3e90
[  292.673731][ T7495]  ? __netlink_deliver_tap+0x54d/0x7c0
[  292.679240][ T7495]  ? netlink_deliver_tap+0x19d/0x1b0
[  292.684542][ T7495]  ? netlink_unicast+0x7c4/0x990
[  292.689716][ T7495]  ? netlink_sendmsg+0x8e4/0xcb0
[  292.694788][ T7495]  ? __sock_sendmsg+0x221/0x270
[  292.699689][ T7495]  ? ____sys_sendmsg+0x525/0x7d0
[  292.704628][ T7495]  ? __sys_sendmsg+0x298/0x390
[  292.709476][ T7495]  netlink_rcv_skb+0x1e3/0x430
[  292.714251][ T7495]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  292.719830][ T7495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.725188][ T7495]  ? apparmor_capable+0x13b/0x1b0
[  292.730308][ T7495]  ? bpf_lsm_capable+0x9/0x10
[  292.734993][ T7495]  ? security_capable+0x90/0xb0
[  292.739924][ T7495]  nfnetlink_rcv+0x297/0x2ad0
[  292.744617][ T7495]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  292.750852][ T7495]  ? __dev_queue_xmit+0x2da/0x3e90
[  292.756019][ T7495]  ? __dev_queue_xmit+0x1763/0x3e90
[  292.761533][ T7495]  ? kasan_save_track+0x51/0x80
[  292.766434][ T7495]  ? do_syscall_64+0xf3/0x230
[  292.771260][ T7495]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  292.772992][ T7467] ip6gretap0 speed is unknown, defaulting to 1000
[  292.776406][ T7495]  ? __dev_queue_xmit+0x2da/0x3e90
[  292.788079][ T7495]  ? __pfx___dev_queue_xmit+0x10/0x10
[  292.793578][ T7495]  ? ref_tracker_free+0x643/0x7e0
[  292.798697][ T7495]  ? __asan_memcpy+0x40/0x70
[  292.803314][ T7495]  ? __pfx_ref_tracker_free+0x10/0x10
[  292.808821][ T7495]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.814073][ T7495]  ? skb_clone+0x240/0x390
[  292.818614][ T7495]  ? __pfx_lock_release+0x10/0x10
[  292.823651][ T7495]  ? __netlink_deliver_tap+0x77e/0x7c0
[  292.829184][ T7495]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.834397][ T7495]  netlink_unicast+0x7f6/0x990
[  292.839238][ T7495]  ? __pfx_netlink_unicast+0x10/0x10
[  292.844530][ T7495]  ? __virt_addr_valid+0x183/0x530
[  292.849791][ T7495]  ? __check_object_size+0x49c/0x900
[  292.855444][ T7495]  ? bpf_lsm_netlink_send+0x9/0x10
[  292.860884][ T7495]  netlink_sendmsg+0x8e4/0xcb0
[  292.865727][ T7495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.871128][ T7495]  ? __import_iovec+0x536/0x820
[  292.875999][ T7495]  ? aa_sock_msg_perm+0x91/0x160
[  292.881005][ T7495]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  292.886306][ T7495]  ? security_socket_sendmsg+0x87/0xb0
[  292.891846][ T7495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.897142][ T7495]  __sock_sendmsg+0x221/0x270
[  292.901984][ T7495]  ____sys_sendmsg+0x525/0x7d0
[  292.906769][ T7495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.912142][ T7495]  __sys_sendmsg+0x298/0x390
[  292.916830][ T7495]  ? __pfx___sys_sendmsg+0x10/0x10
[  292.922020][ T7495]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  292.928567][ T7495]  ? do_syscall_64+0x100/0x230
[  292.933366][ T7495]  ? do_syscall_64+0xb6/0x230
[  292.938068][ T7495]  do_syscall_64+0xf3/0x230
[  292.942677][ T7495]  ? clear_bhb_loop+0x35/0x90
[  292.947371][ T7495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.953359][ T7495] RIP: 0033:0x7f49b77799b9
[  292.958036][ T7495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.977909][ T7495] RSP: 002b:00007f49b85b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.986411][ T7495] RAX: ffffffffffffffda RBX: 00007f49b7916130 RCX: 00007f49b77799b9
[  292.994483][ T7495] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a
[  293.002533][ T7495] RBP: 00007f49b77e78d8 R08: 0000000000000000 R09: 0000000000000000
[  293.010610][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  293.018619][ T7495] R13: 0000000000000000 R14: 00007f49b7916130 R15: 00007ffc2a5ad968
[  293.026606][ T7495]  </TASK>
[  293.029691][ T7495] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  293.036971][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz.0.411 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0
[  293.047040][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  293.057101][ T7495] Call Trace:
[  293.060383][ T7495]  <TASK>
[  293.063322][ T7495]  dump_stack_lvl+0x241/0x360
[  293.068010][ T7495]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.073218][ T7495]  ? __pfx__printk+0x10/0x10
[  293.077819][ T7495]  ? vscnprintf+0x5d/0x90
[  293.082153][ T7495]  panic+0x349/0x870
[  293.086053][ T7495]  ? __warn+0x172/0x4e0
[  293.090218][ T7495]  ? __pfx_panic+0x10/0x10
[  293.094653][ T7495]  __warn+0x346/0x4e0
[  293.098638][ T7495]  ? folio_memcg+0x111/0x220
[  293.103233][ T7495]  report_bug+0x2b3/0x500
[  293.107567][ T7495]  ? folio_memcg+0x111/0x220
[  293.112160][ T7495]  handle_bug+0x60/0x90
[  293.116322][ T7495]  exc_invalid_op+0x1a/0x50
[  293.120834][ T7495]  asm_exc_invalid_op+0x1a/0x20
[  293.125787][ T7495] RIP: 0010:folio_memcg+0x111/0x220
[  293.130996][ T7495] Code: 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e2 2f f8 ff 48 8b 1b 48 89 d8 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 eb ce 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 55 ff ff ff
[  293.150610][ T7495] RSP: 0018:ffffc900020ae9e0 EFLAGS: 00010246
[  293.156689][ T7495] RAX: 0000000000000000 RBX: ffff888012516280 RCX: 0000000080000000
[  293.164717][ T7495] RDX: 0000000000000000 RSI: ffffffff8c0adfc0 RDI: ffffffff8c60a8c0
[  293.172699][ T7495] RBP: ffffea00015a8008 R08: ffffffff9018c5af R09: 1ffffffff20318b5
[  293.180706][ T7495] R10: dffffc0000000000 R11: fffffbfff20318b6 R12: dffffc0000000000
[  293.188694][ T7495] R13: 0000000000400018 R14: ffffea00015a8000 R15: ffffea00015a8030
[  293.196714][ T7495]  split_page_memcg+0x58/0x3f0
[  293.201500][ T7495]  ? split_page+0x205/0x230
[  293.206021][ T7495]  __vmalloc_node_range_noprof+0xa63/0x1400
[  293.211945][ T7495]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  293.218278][ T7495]  ? rcu_is_watching+0x15/0xb0
[  293.223081][ T7495]  ? trace_kmalloc+0x1f/0xd0
[  293.227682][ T7495]  ? __kmalloc_node_noprof+0x247/0x440
[  293.233147][ T7495]  ? __kvmalloc_node_noprof+0x72/0x1b0
[  293.238623][ T7495]  __kvmalloc_node_noprof+0x142/0x1b0
[  293.244003][ T7495]  ? hash_ipmac_create+0x356/0x1040
[  293.249239][ T7495]  hash_ipmac_create+0x356/0x1040
[  293.254311][ T7495]  ? __pfx_hash_ipmac_create+0x10/0x10
[  293.259778][ T7495]  ip_set_create+0xa5c/0x1900
[  293.264470][ T7495]  ? ip_set_create+0x45e/0x1900
[  293.269333][ T7495]  ? __pfx___mutex_trylock_common+0xa/0x10
[  293.275149][ T7495]  ? __pfx_ip_set_create+0x10/0x10
[  293.280269][ T7495]  ? trace_contention_end+0x3c/0x120
[  293.285579][ T7495]  ? nfnetlink_rcv_msg+0x225/0x1180
[  293.290787][ T7495]  nfnetlink_rcv_msg+0xbec/0x1180
[  293.295823][ T7495]  ? nfnetlink_rcv_msg+0x225/0x1180
[  293.301044][ T7495]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  293.306510][ T7495]  ? stack_trace_save+0x118/0x1d0
[  293.311559][ T7495]  ? dev_hard_start_xmit+0x27a/0x7e0
[  293.316878][ T7495]  ? __dev_queue_xmit+0x1b63/0x3e90
[  293.322103][ T7495]  ? __netlink_deliver_tap+0x54d/0x7c0
[  293.327570][ T7495]  ? netlink_deliver_tap+0x19d/0x1b0
[  293.332861][ T7495]  ? netlink_unicast+0x7c4/0x990
[  293.337800][ T7495]  ? netlink_sendmsg+0x8e4/0xcb0
[  293.342746][ T7495]  ? __sock_sendmsg+0x221/0x270
[  293.347605][ T7495]  ? ____sys_sendmsg+0x525/0x7d0
[  293.352628][ T7495]  ? __sys_sendmsg+0x298/0x390
[  293.357441][ T7495]  netlink_rcv_skb+0x1e3/0x430
[  293.362217][ T7495]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  293.367699][ T7495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  293.373005][ T7495]  ? apparmor_capable+0x13b/0x1b0
[  293.378037][ T7495]  ? bpf_lsm_capable+0x9/0x10
[  293.382742][ T7495]  ? security_capable+0x90/0xb0
[  293.387610][ T7495]  nfnetlink_rcv+0x297/0x2ad0
[  293.392404][ T7495]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  293.398140][ T7495]  ? __dev_queue_xmit+0x2da/0x3e90
[  293.403261][ T7495]  ? __dev_queue_xmit+0x1763/0x3e90
[  293.408469][ T7495]  ? kasan_save_track+0x51/0x80
[  293.413354][ T7495]  ? do_syscall_64+0xf3/0x230
[  293.418042][ T7495]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  293.423164][ T7495]  ? __dev_queue_xmit+0x2da/0x3e90
[  293.428279][ T7495]  ? __pfx___dev_queue_xmit+0x10/0x10
[  293.433666][ T7495]  ? ref_tracker_free+0x643/0x7e0
[  293.438702][ T7495]  ? __asan_memcpy+0x40/0x70
[  293.443294][ T7495]  ? __pfx_ref_tracker_free+0x10/0x10
[  293.448706][ T7495]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.453911][ T7495]  ? skb_clone+0x240/0x390
[  293.458332][ T7495]  ? __pfx_lock_release+0x10/0x10
[  293.463371][ T7495]  ? __netlink_deliver_tap+0x77e/0x7c0
[  293.468854][ T7495]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.474096][ T7495]  netlink_unicast+0x7f6/0x990
[  293.478874][ T7495]  ? __pfx_netlink_unicast+0x10/0x10
[  293.484161][ T7495]  ? __virt_addr_valid+0x183/0x530
[  293.489277][ T7495]  ? __check_object_size+0x49c/0x900
[  293.494573][ T7495]  ? bpf_lsm_netlink_send+0x9/0x10
[  293.499694][ T7495]  netlink_sendmsg+0x8e4/0xcb0
[  293.504473][ T7495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.509769][ T7495]  ? __import_iovec+0x536/0x820
[  293.514626][ T7495]  ? aa_sock_msg_perm+0x91/0x160
[  293.519578][ T7495]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  293.524874][ T7495]  ? security_socket_sendmsg+0x87/0xb0
[  293.530336][ T7495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.535628][ T7495]  __sock_sendmsg+0x221/0x270
[  293.540323][ T7495]  ____sys_sendmsg+0x525/0x7d0
[  293.545095][ T7495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.550491][ T7495]  __sys_sendmsg+0x298/0x390
[  293.555098][ T7495]  ? __pfx___sys_sendmsg+0x10/0x10
[  293.560251][ T7495]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.566592][ T7495]  ? do_syscall_64+0x100/0x230
[  293.571467][ T7495]  ? do_syscall_64+0xb6/0x230
[  293.576159][ T7495]  do_syscall_64+0xf3/0x230
[  293.580672][ T7495]  ? clear_bhb_loop+0x35/0x90
[  293.585355][ T7495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.591346][ T7495] RIP: 0033:0x7f49b77799b9
[  293.595764][ T7495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.615378][ T7495] RSP: 002b:00007f49b85b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.623808][ T7495] RAX: ffffffffffffffda RBX: 00007f49b7916130 RCX: 00007f49b77799b9
[  293.631785][ T7495] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a
[  293.639855][ T7495] RBP: 00007f49b77e78d8 R08: 0000000000000000 R09: 0000000000000000
[  293.647845][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  293.655822][ T7495] R13: 0000000000000000 R14: 00007f49b7916130 R15: 00007ffc2a5ad968
[  293.663809][ T7495]  </TASK>
[  293.667155][ T7495] Kernel Offset: disabled
[  293.671563][ T7495] Rebooting in 86400 seconds..