last executing test programs:

12m25.805790285s ago: executing program 3 (id=230):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

12m21.092588908s ago: executing program 3 (id=239):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

12m15.328676936s ago: executing program 3 (id=244):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000050000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

12m11.890017992s ago: executing program 3 (id=248):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r3, r1, 0x0, 0x100000000)

12m9.73197295s ago: executing program 3 (id=253):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0)

12m5.824921804s ago: executing program 3 (id=259):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4c8e035fe9ad", 0x6)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69", 0x33}], 0x1}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000009c0)=""/4090, 0xffa}], 0x2}, 0x2)

11m50.61537068s ago: executing program 32 (id=259):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4c8e035fe9ad", 0x6)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69", 0x33}], 0x1}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000009c0)=""/4090, 0xffa}], 0x2}, 0x2)

7m43.715492614s ago: executing program 1 (id=599):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x8d})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000100))
open_tree(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd)
ioctl$TIOCOUTQ(r2, 0x5411, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7m43.027515114s ago: executing program 1 (id=602):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65)
madvise(&(0x7f0000bb5000/0x3000)=nil, 0x3000, 0x12)
migrate_pages(0x0, 0x9, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2)
mkdir(0x0, 0x76)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0xf7a}], 0x1)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x0, 0x6, 0x1, 0x3, 0xd, 0xe8, 0x5, 0x0, 0x6d, 0x3, 0x9, 0x6, 0x8, 0x1, 0x51}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080))

7m40.745738768s ago: executing program 1 (id=605):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

7m38.544195644s ago: executing program 1 (id=610):
kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6", 0x70, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca46", 0x15}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c38", 0x23}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7m35.101803477s ago: executing program 1 (id=613):
syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00')
syz_emit_ethernet(0x11, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3ff, 0x0)
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
socket(0x10, 0x3, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000340), 0x8)

7m32.307410805s ago: executing program 1 (id=616):
kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add0bb6", 0x80, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcece", 0xe0, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60", 0x1c}], 0x2, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7m15.384404999s ago: executing program 33 (id=616):
kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add0bb6", 0x80, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcece", 0xe0, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60", 0x1c}], 0x2, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6m50.482779409s ago: executing program 2 (id=665):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents64(r3, &(0x7f0000000240)=""/157, 0x9d)
getdents(r3, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m49.333595175s ago: executing program 2 (id=666):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(r0, 0x3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e28, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0x0, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108)
close_range(r3, 0xffffffffffffffff, 0x0)

6m46.855181088s ago: executing program 2 (id=669):
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x20, 0x2b, 0x1, @empty, @local, {[@hopopts={0x2b, 0x0, '\x00', [@generic={0x7}]}, @dstopts={0x5c, 0x0, '\x00', [@padn]}]}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
write$eventfd(r3, 0x0, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4)
execve(0x0, 0x0, 0x0)

6m42.50705748s ago: executing program 2 (id=674):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(r0, 0x3, 0x0)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e28, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0x0, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108)
close_range(r3, 0xffffffffffffffff, 0x0)

6m40.823318119s ago: executing program 2 (id=675):
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ptrace(0x10, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300), 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
gettid()
syz_clone(0x53881400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
syz_io_uring_setup(0x4f0e, 0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000))

6m38.658299879s ago: executing program 2 (id=677):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x8000005}, 0x94)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x8)

6m22.928475982s ago: executing program 34 (id=677):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x8000005}, 0x94)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x8)

3m44.736062453s ago: executing program 5 (id=889):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

3m43.679464222s ago: executing program 5 (id=893):
syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00')
syz_emit_ethernet(0x11, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3ff, 0x0)
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
socket(0x10, 0x3, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r4, &(0x7f0000000340), 0x8)

3m41.459874626s ago: executing program 5 (id=895):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x4ff, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x111, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040)
socket$inet(0x2, 0x2, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x3904e8a2, 0x400)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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")

3m31.191045996s ago: executing program 5 (id=909):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18)
r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]})
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=@v2, 0x14, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c})
close(r1)
setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000040)=0x4a, 0x4)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})

3m23.856257696s ago: executing program 5 (id=929):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)
getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$x25(r2, &(0x7f0000001080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
r5 = socket(0x10, 0x803, 0x8)
r6 = fsopen(&(0x7f0000000100)='proc\x00', 0x1)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0)
fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000000)='ro\x00', &(0x7f0000000040)='./file0\x00', r7)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000010c0)=@generic={0x0, 0x8, 0x6000000000000})
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r9, 0x89ea, &(0x7f0000000180))
sendmmsg(r8, &(0x7f0000000180), 0x4000190, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)
socket$packet(0x11, 0x3, 0x300)

3m15.294005898s ago: executing program 5 (id=926):
close(0xffffffffffffffff)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
capset(&(0x7f0000000180)={0x20071026, r0}, &(0x7f0000001040)={0x6fe4, 0x7, 0x401, 0x8, 0x4, 0x3})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61153c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf630000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b06795445f79b1f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

2m59.037938534s ago: executing program 35 (id=926):
close(0xffffffffffffffff)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
capset(&(0x7f0000000180)={0x20071026, r0}, &(0x7f0000001040)={0x6fe4, 0x7, 0x401, 0x8, 0x4, 0x3})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

2m29.901925124s ago: executing program 6 (id=974):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00')
lseek(r0, 0x1000000, 0x0)
recvmmsg$unix(r0, &(0x7f0000000600)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000000480)=""/225, 0xe1}], 0x3, &(0x7f00000005c0)}}], 0x1, 0x40, &(0x7f0000000640))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x44001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000))
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000100)=0x8001, 0x4)
bind$tipc(r4, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d70102030109021200010000"], 0x0)

2m25.278756423s ago: executing program 6 (id=981):
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd32924031de07", 0x10)
socket(0x2, 0x3, 0xff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f0000000840)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1}, 0x43)
socket$inet6_sctp(0xa, 0x1, 0x84)

2m24.209301849s ago: executing program 6 (id=983):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
write$binfmt_register(r3, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
inotify_init1(0x0)

2m21.646409068s ago: executing program 6 (id=986):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xfa255bb5a183eba4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0x55e, 0x4)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001400000000000000008140000001100"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
syz_open_procfs(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0)

2m19.088524592s ago: executing program 6 (id=989):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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")
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040)=0x10001, 0x4)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r3 = getpid()
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x48, r5, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0d2}, 0x24004080)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000640)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@bsdgroups}], [{@uid_eq}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_lt}, {@hash}, {@audit}, {@euid_gt}, {@audit}, {@smackfshat={'smackfshat', 0x3d, ')'}}]}, 0x0, 0x484, &(0x7f0000000980)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0x8, 0x2, 0x0, 0x0, 0x4000000}, {0x85, 0x0, 0x0, 0xc9}}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x0, 'veth0_macvtap\x00', {}, 0x6})

2m13.486903875s ago: executing program 6 (id=994):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001980000085000000060000009500000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000e000000000000008100000086dd0101fe800000000040000000000000000018fe8000"/52], 0x0)
close(r4)
r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x200c0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)

1m56.820677409s ago: executing program 36 (id=994):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001980000085000000060000009500000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000e000000000000008100000086dd0101fe800000000040000000000000000018fe8000"/52], 0x0)
close(r4)
r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x200c0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)

27.888196757s ago: executing program 4 (id=1120):
r0 = socket$kcm(0x29, 0x2, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
madvise(&(0x7f0000b44000/0x4000)=nil, 0x4000, 0x8)
r1 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000340))
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)="a6faaefe24274737bb56e5fc4b9d0682b524bf02e4f16711d0e7c26ff9d658e5b8fbcfc571f8fb3da997db784826e8730201f91a97a8bf0621830400bab405f32bae4b9eedc33349472d6b05f0890555e05ef21b67ebd49bc6c8d18c035640135bdee0fc5b68ce16036a09d43fa82a4b52d5868a4fb7caf9e18d323430a606becfc9109cb82ca27250f065b29fa6851c2d0ba324338ba5ba15274dff7c8a0dd254fd4ad3dfcce1f5a7636818311088dd5e772717d0dffcba0282ad5b8107b65faf7dd89cc41665693b851f70bba358c09b2c21b116683aa32f459b8e44e9d4394408f6dd9618bab4a005d5fa8f", 0xed}, {&(0x7f00000004c0)="c4388499be2b181929035b11d9960b7acaaee37a482f3af1a31ac9da51afe4d3b2bd99f556e2786bace6aebf1fee03eb0cc3050634c0f7e99811dca4", 0x3c}], 0x3}, 0x4001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {0xe, 0xc}, {0xfff1, 0x5}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x8004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc1521130076"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x40}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0xffffffffffffffff}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {0x400}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee, 0x2c}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {0x3ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {0xf33, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

16.069020444s ago: executing program 4 (id=1138):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0xc8, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xff}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000412}, 0x46810)
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
migrate_pages(0x0, 0x7f, 0x0, &(0x7f0000000040)=0x1)
symlinkat(0x0, r1, &(0x7f0000000140)='./file0\x00')
syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000004880)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @local, 0xc}, 0x1c, 0x0}}], 0x1, 0x240880d1)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040))
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000000)={0x18, r3, 0x0, 0x0, 0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x0)
syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000aa401042a00ff0f00001324030500010206020280000007001000d8000d24090202000000007b8f"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_type={0x1}]}, 0x58}, 0x1, 0x7}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x8a, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r5, 0x0, 0x0)

11.639003809s ago: executing program 4 (id=1141):
r0 = socket$inet(0x2, 0x802, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48})
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10, 0x8014}}], 0x1, 0x2000c810)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d0000bca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000414010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008850)
write(r0, &(0x7f0000000080)="08008edf773c80", 0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)

11.637224302s ago: executing program 0 (id=1142):
openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, 0x0, 0x20000000)
r6 = fanotify_init(0xf00, 0x1)
fanotify_mark(r6, 0x105, 0x40009975, r4, 0x0)
fallocate(r3, 0x0, 0x1000000, 0x3)

10.783469364s ago: executing program 4 (id=1143):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x4606, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
fchmod(r0, 0x1c2)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_open_dev$evdev(0x0, 0x3, 0x100)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

9.769892433s ago: executing program 4 (id=1144):
r0 = socket$inet(0x2, 0x802, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48})
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10, 0x8014}}], 0x1, 0x2000c810)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008850)
write(r0, &(0x7f0000000080)="08008edf773c80", 0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)

8.047155142s ago: executing program 7 (id=1145):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00')
lseek(r0, 0x1000000, 0x0)
recvmmsg$unix(r0, &(0x7f0000000600), 0x0, 0x40, &(0x7f0000000640))

7.946508038s ago: executing program 0 (id=1146):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0xc8, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xff}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000412}, 0x46810)
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
migrate_pages(0x0, 0x7f, 0x0, &(0x7f0000000040)=0x1)
symlinkat(0x0, r1, &(0x7f0000000140)='./file0\x00')
syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000004880)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @local, 0xc}, 0x1c, 0x0}}], 0x1, 0x240880d1)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040))
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000000)={0x18, r3, 0x0, 0x0, 0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x0)
syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000aa401042a00ff0f00001324030500010206020280000007001000d8000d24090202000000007b8f"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_type={0x1}]}, 0x58}, 0x1, 0x7}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x8a, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, 0x0)

7.417800557s ago: executing program 7 (id=1147):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811c000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000d30000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x162, &(0x7f00000005c0)="$eJzs2rFKw0AYB/BPGi3UzdGpUKkONkkTrbNjcXNzLG2uDV5sSQRpX0CcBIVz8CUEn8BHyOimi4MvEUlzhCQWzSDkhP9vyR++NPlyV77pOv7U67KgQ7Q/uzv92PKnXrNnHw1Zlw0o0SeiZhzCKHrQ6Zu3tB5GpK+4oVo7n8m1tTcWJzfM5Y5VdUsAAAAAAAAAAAAAAAAAAAAAAFBSuyFDYyK8a+Zyp5upBi3tfMC54wcVtVe5dlOe4SIm+GO8Pnb+hrNNGVxx7Md1M//7exl2J4K/F9fXuPRmRjBfdFxvMHbGzoVl2T3zwDQPLWP5LKP4xPaT7InC6NnUKZLSeua82WuZ82Zy/7VtV9xeFd8WzBdy/xUIa2q0UTLUiEiBNlQKfU2xf9S/CTVSoo1MSEfExsqpov06d1TRWE+uo7rdeonnnz6c8pEsLr+1Tn+0ZvJNlC9V9eEA8LOvAAAA//8Jlzfq")
mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x1c, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0)
socket(0x84000000002a, 0x1, 0xff)
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1, 0x0, 0x2}, 0x50)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb7249f, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

6.027799449s ago: executing program 7 (id=1148):
openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r5)
r6 = fanotify_init(0xf00, 0x1)
fanotify_mark(r6, 0x105, 0x40009975, r4, 0x0)
fallocate(r3, 0x0, 0x1000000, 0x3)

5.87553432s ago: executing program 0 (id=1149):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0xc8, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xff}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000412}, 0x46810)
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
migrate_pages(0x0, 0x7f, 0x0, &(0x7f0000000040)=0x1)
symlinkat(0x0, r1, &(0x7f0000000140)='./file0\x00')
syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000004880)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @local, 0xc}, 0x1c, 0x0}}], 0x1, 0x240880d1)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040))
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000000)={0x18, r3, 0x0, 0x0, 0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x0)
syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000aa401042a00ff0f00001324030500010206020280000007001000d8000d24090202000000007b8f"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_type={0x1}]}, 0x58}, 0x1, 0x7}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x8a, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r5, 0x0, 0x0)

4.1101557s ago: executing program 7 (id=1150):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d)
write$tun(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="000088a8006e2b6d3a00aa2aaaaaaa18810028000011aa0ed8"], 0x19)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x24040080)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r7)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000004c0)={[&(0x7f0000000180)='^\x00', &(0x7f0000000540)='AL<\x93\xc5\xa5\v\"\x81Q~qs\xc9\xbaA\xc5h\x93B>n\xbc\xc6\x00\xa1b<\x94b\x0f\x0fQ0\x9e\x0e~9[\xdd\x8c\x02\x98\xaf\x87\x9a\xe2\xd0\x1c\xd0U\x9d\xca+!\xbf\x9d\x9d\xb0\xd2m\xa1P\xa1f\xd1\xf3\xade\x1c\\', &(0x7f0000000440)='-[\x00', &(0x7f0000000480)='nl8R211\x00']}, &(0x7f0000000140), 0x400)

3.871813736s ago: executing program 0 (id=1151):
r0 = socket$inet(0x2, 0x802, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48})
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10, 0x8014}}], 0x1, 0x2000c810)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d0000bca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000414010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008850)
write(r0, &(0x7f0000000080)="08008edf773c80", 0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)

2.404140685s ago: executing program 0 (id=1152):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x4606, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
fchmod(r0, 0x1c2)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_open_dev$evdev(0x0, 0x3, 0x100)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

2.356491644s ago: executing program 4 (id=1153):
r0 = socket$inet(0x2, 0x802, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48})
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10, 0x8014}}], 0x1, 0x2000c810)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d0000bca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000414010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008850)
write(r0, &(0x7f0000000080)="08008edf773c80", 0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)

2.252976308s ago: executing program 0 (id=1154):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000"], 0x18}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
pipe(&(0x7f00000001c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x40080c1)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r7 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8)
bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f00010000", 0x23)

1.452308212s ago: executing program 7 (id=1155):
openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, 0x0, 0x20000000)
r6 = fanotify_init(0xf00, 0x1)
fanotify_mark(r6, 0x105, 0x40009975, r4, 0x0)
fallocate(r3, 0x0, 0x1000000, 0x3)

0s ago: executing program 7 (id=1156):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380))
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
sendmmsg$inet6(r2, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
write$sndseq(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

sconnect, device number 9
[  525.453335][ T7568] udevd[7568]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  528.726570][ T5629] Bluetooth: hci5: command 0x0405 tx timeout
[  529.769227][ T8557] PKCS8: Unsupported PKCS#8 version
[  533.227393][ T8571] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  534.256468][ T6712] syz_tun (unregistering): left allmulticast mode
[  534.615553][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.615816][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.616097][ T8405] bridge_slave_0: entered allmulticast mode
[  534.647655][ T8405] bridge_slave_0: entered promiscuous mode
[  534.656069][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.656334][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.656593][ T8405] bridge_slave_1: entered allmulticast mode
[  534.686861][ T8405] bridge_slave_1: entered promiscuous mode
[  534.828919][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  534.869503][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  534.879601][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  534.965584][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  534.979336][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  535.238457][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.283016][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.799333][   T38] kauditd_printk_skb: 211 callbacks suppressed
[  535.799353][   T38] audit: type=1326 audit(1779464395.644:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962988ce59 code=0x7ffc0000
[  535.799401][   T38] audit: type=1326 audit(1779464395.644:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962988ce59 code=0x7ffc0000
[  535.799440][   T38] audit: type=1326 audit(1779464395.654:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f962984d68e code=0x7ffc0000
[  535.799479][   T38] audit: type=1326 audit(1779464395.654:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962988ce59 code=0x7ffc0000
[  535.799517][   T38] audit: type=1326 audit(1779464395.654:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962988ce59 code=0x7ffc0000
[  535.799554][   T38] audit: type=1326 audit(1779464395.664:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f962988ce59 code=0x7ffc0000
[  535.799591][   T38] audit: type=1326 audit(1779464395.664:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962988ce59 code=0x7ffc0000
[  535.799628][   T38] audit: type=1326 audit(1779464395.664:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962988ce59 code=0x7ffc0000
[  535.799667][   T38] audit: type=1326 audit(1779464395.664:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f962988ce59 code=0x7ffc0000
[  535.799705][   T38] audit: type=1326 audit(1779464395.674:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.641" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962988ce59 code=0x7ffc0000
[  537.119348][ T6555] Bluetooth: hci0: command tx timeout
[  537.191698][ T6555] Bluetooth: hci4: unexpected event for opcode 0x007f
[  537.967199][ T8405] team0: Port device team_slave_0 added
[  537.992927][ T8405] team0: Port device team_slave_1 added
[  539.200918][ T6555] Bluetooth: hci0: command tx timeout
[  539.410058][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.410074][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.410097][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.426693][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.426709][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.426732][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.299226][ T6555] Bluetooth: hci0: command tx timeout
[  543.011235][ T3326] bridge_slave_1: left allmulticast mode
[  543.011267][ T3326] bridge_slave_1: left promiscuous mode
[  543.011629][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.687377][ T6555] Bluetooth: hci0: command tx timeout
[  544.242503][ T3326] bridge_slave_0: left allmulticast mode
[  544.242537][ T3326] bridge_slave_0: left promiscuous mode
[  544.242826][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.195015][ T8647] syz.4.649 (8647): drop_caches: 2
[  545.680252][ T8650] loop4: detected capacity change from 0 to 32768
[  545.680961][ T8650] btrfs: Deprecated parameter 'usebackuproot'
[  545.680972][ T8650] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  545.701133][ T8650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.650 (8650)
[  545.715699][ T8650] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  545.715746][ T8650] BTRFS info (device loop4): using crc32c checksum algorithm
[  545.942302][ T8661] loop2: detected capacity change from 0 to 256
[  547.073277][ T3331] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  547.073388][ T8650] BTRFS error (device loop4): failed to load root extent
[  547.073414][ T8650] BTRFS warning (device loop4): try to load backup roots slot 1
[  547.074372][ T1026] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  547.076113][ T8650] BTRFS warning (device loop4): couldn't read tree root
[  547.076134][ T8650] BTRFS warning (device loop4): try to load backup roots slot 2
[  547.078523][ T3331] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  547.078611][ T8650] BTRFS warning (device loop4): couldn't read tree root
[  547.078623][ T8650] BTRFS warning (device loop4): try to load backup roots slot 3
[  547.095679][ T8650] BTRFS info (device loop4): rebuilding free space tree
[  547.499947][ T8650] BTRFS info (device loop4): checking UUID tree
[  547.509194][ T8650] BTRFS info (device loop4): enabling ssd optimizations
[  547.509220][ T8650] BTRFS info (device loop4): turning on async discard
[  547.509235][ T8650] BTRFS info (device loop4): enabling free space tree
[  547.509248][ T8650] BTRFS info (device loop4): force clearing of disk cache
[  547.509262][ T8650] BTRFS info (device loop4): enabling auto defrag
[  547.509275][ T8650] BTRFS info (device loop4): trying to use backup root at mount time
[  547.509291][ T8650] BTRFS info (device loop4): use zstd compression, level 3
[  548.623071][ T6555] Bluetooth: hci1: unexpected event for opcode 0x007f
[  548.647718][ T8681] loop2: detected capacity change from 0 to 256
[  550.534088][ T5626] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  551.114505][ T8694] loop2: detected capacity change from 0 to 512
[  551.156460][ T8694] EXT4-fs (loop2): Test dummy encryption mode enabled
[  551.156480][ T8694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  551.156496][ T8694] EXT4-fs (loop2): SIPHASH is not a valid default hash value
[  551.207154][ T3326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.468063][ T8694] loop2: detected capacity change from 0 to 2048
[  551.547616][ T3326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  552.287786][ T3326] bond0 (unregistering): Released all slaves
[  552.424120][ T8694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  552.548631][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[  553.076078][ T8405] hsr_slave_0: entered promiscuous mode
[  553.103350][ T8405] hsr_slave_1: entered promiscuous mode
[  553.108402][ T8405] debugfs: 'hsr0' already exists in 'hsr'
[  553.108429][ T8405] Cannot create hsr debugfs directory
[  554.499258][ T3326] hsr_slave_0: left promiscuous mode
[  554.505768][   T38] kauditd_printk_skb: 19 callbacks suppressed
[  554.505785][   T38] audit: type=1800 audit(1779464414.514:290): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.657" name="file1" dev="loop2" ino=1415 res=0 errno=0
[  555.314060][ T3326] hsr_slave_1: left promiscuous mode
[  555.314756][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.350336][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_1
[  556.034503][ T3326] team0 (unregistering): Port device team_slave_1 removed
[  556.104183][ T3326] team0 (unregistering): Port device team_slave_0 removed
[  556.334210][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'.
[  556.748683][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[  564.272605][ T5629] Bluetooth: hci0: command 0x0405 tx timeout
[  564.483452][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  564.483528][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  566.482439][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  566.535216][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  566.555210][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  566.558790][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  566.559811][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  566.845734][ T8792] loop2: detected capacity change from 0 to 512
[  567.100866][ T8792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  567.714758][ T8792] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.675: iget: bad i_size value: 38620345925642
[  567.715003][ T8792] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  567.721249][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  567.721267][    C1] EXT4-fs (loop2): initial error at time 1779464427: ext4_orphan_get:1397: inode 15
[  567.721286][    C1] EXT4-fs (loop2): last error at time 1779464427: ext4_orphan_get:1397: inode 15
[  567.785216][ T8792] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.675: couldn't read orphan inode 15 (err -117)
[  567.785247][ T8792] loop2: lost filesystem error report for type 5 error -117
[  567.789909][ T8792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.639554][ T5629] Bluetooth: hci2: command tx timeout
[  568.980625][ T3331] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:18: bg 0: block 5: invalid block bitmap
[  569.017511][ T3331] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  569.017544][ T3331] EXT4-fs (loop2): This should not happen!! Data will be lost
[  569.017544][ T3331] 
[  569.017557][ T3331] EXT4-fs (loop2): Total free blocks count 0
[  569.017569][ T3331] EXT4-fs (loop2): Free/Dirty block details
[  569.017610][ T3331] EXT4-fs (loop2): free_blocks=0
[  569.017648][ T3331] EXT4-fs (loop2): dirty_blocks=3808
[  569.017659][ T3331] EXT4-fs (loop2): Block reservation details
[  569.017669][ T3331] EXT4-fs (loop2): i_reserved_data_blocks=3808
[  570.385932][ T3331] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1752 with error 28
[  570.525200][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.525548][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.525816][ T8578] bridge_slave_0: entered allmulticast mode
[  570.552211][ T8578] bridge_slave_0: entered promiscuous mode
[  570.562652][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.563010][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.563274][ T8578] bridge_slave_1: entered allmulticast mode
[  570.566623][ T8578] bridge_slave_1: entered promiscuous mode
[  570.656317][ T8578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  570.680738][ T8578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  570.719500][ T5629] Bluetooth: hci2: command tx timeout
[  571.952869][ T5630] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  571.985805][ T8578] team0: Port device team_slave_0 added
[  572.308144][ T8578] team0: Port device team_slave_1 added
[  573.323790][ T5629] Bluetooth: Unknown LE signaling command 0x1d
[  573.323816][ T5629] Bluetooth: Wrong link type (-22)
[  573.371618][ T5629] Bluetooth: hci2: command tx timeout
[  573.622967][ T5630] EXT4-fs: 7 callbacks suppressed
[  573.622986][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.053113][ T8833] overlayfs: failed to resolve './file0': -2
[  575.439692][ T5629] Bluetooth: hci2: command tx timeout
[  584.733524][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.733540][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.733563][ T8578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.005067][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.005085][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  585.005111][ T8578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.464373][ T6555] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  586.378641][ T6555] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  586.406297][ T6555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  586.419726][ T6555] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  586.654748][ T6555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  586.684234][ T8872] fuse: fd is not a fuse device
[  591.462956][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'.
[  591.462971][ T8879] netlink: 60 bytes leftover after parsing attributes in process `syz.4.698'.
[  591.695146][ T5629] Bluetooth: hci6: command tx timeout
[  592.547010][ T8578] hsr_slave_0: entered promiscuous mode
[  592.552168][ T8578] hsr_slave_1: entered promiscuous mode
[  592.555983][ T8578] debugfs: 'hsr0' already exists in 'hsr'
[  592.556005][ T8578] Cannot create hsr debugfs directory
[  593.760375][ T5629] Bluetooth: hci6: command tx timeout
[  595.660349][ T6555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  595.722916][ T6555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  595.860120][ T6555] Bluetooth: hci6: command tx timeout
[  595.860223][ T6555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  595.876835][ T6555] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  595.880939][ T6555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  596.849338][ T8929] evm: overlay not supported
[  598.065751][ T6555] Bluetooth: hci6: command tx timeout
[  601.150453][ T6555] Bluetooth: hci4: command tx timeout
[  602.110633][ T1026] bridge_slave_1: left allmulticast mode
[  602.110682][ T1026] bridge_slave_1: left promiscuous mode
[  602.123736][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.292707][ T1026] bridge_slave_0: left allmulticast mode
[  602.292739][ T1026] bridge_slave_0: left promiscuous mode
[  602.292991][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.979965][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  603.080209][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  603.140826][ T1026] bond0 (unregistering): Released all slaves
[  603.289284][ T6555] Bluetooth: hci4: command tx timeout
[  603.639310][ T1026] hsr_slave_0: left promiscuous mode
[  603.679359][ T1026] hsr_slave_1: left promiscuous mode
[  603.680164][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  603.720768][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  603.939864][ T1026] team0 (unregistering): Port device team_slave_1 removed
[  603.979865][ T1026] team0 (unregistering): Port device team_slave_0 removed
[  604.214660][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.215262][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.215545][ T8784] bridge_slave_0: entered allmulticast mode
[  604.218699][ T8784] bridge_slave_0: entered promiscuous mode
[  604.227401][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.229070][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.229538][ T8784] bridge_slave_1: entered allmulticast mode
[  604.236597][ T8784] bridge_slave_1: entered promiscuous mode
[  604.402447][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.458160][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.625431][ T8784] team0: Port device team_slave_0 added
[  604.683815][ T8784] team0: Port device team_slave_1 added
[  604.770904][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.770919][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.770940][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.771683][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.771915][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.772167][ T8864] bridge_slave_0: entered allmulticast mode
[  604.775951][ T8864] bridge_slave_0: entered promiscuous mode
[  604.855183][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.855198][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.855216][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.856006][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.856376][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.856650][ T8864] bridge_slave_1: entered allmulticast mode
[  604.900119][ T8864] bridge_slave_1: entered promiscuous mode
[  605.077106][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.110892][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  605.163499][ T8784] hsr_slave_0: entered promiscuous mode
[  605.165502][ T8784] hsr_slave_1: entered promiscuous mode
[  605.166879][ T8784] debugfs: 'hsr0' already exists in 'hsr'
[  605.166899][ T8784] Cannot create hsr debugfs directory
[  605.237178][ T8864] team0: Port device team_slave_0 added
[  605.294960][ T8864] team0: Port device team_slave_1 added
[  605.359711][ T6555] Bluetooth: hci4: command tx timeout
[  605.622393][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.622615][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.622786][ T8909] bridge_slave_0: entered allmulticast mode
[  605.624628][ T8909] bridge_slave_0: entered promiscuous mode
[  605.667164][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.667438][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.667699][ T8909] bridge_slave_1: entered allmulticast mode
[  605.670991][ T8909] bridge_slave_1: entered promiscuous mode
[  605.696329][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  605.696338][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.696351][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  605.732330][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  605.732347][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.732370][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  605.797613][ T8909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.899498][ T1026] bridge_slave_1: left allmulticast mode
[  605.899533][ T1026] bridge_slave_1: left promiscuous mode
[  605.899799][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.000970][ T1026] bridge_slave_0: left allmulticast mode
[  606.000996][ T1026] bridge_slave_0: left promiscuous mode
[  606.006873][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.389947][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  606.469984][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.541891][ T1026] bond0 (unregistering): Released all slaves
[  606.564990][ T8909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.811597][ T8909] team0: Port device team_slave_0 added
[  606.874347][ T8864] hsr_slave_0: entered promiscuous mode
[  606.875615][ T8864] hsr_slave_1: entered promiscuous mode
[  606.876696][ T8864] debugfs: 'hsr0' already exists in 'hsr'
[  606.876717][ T8864] Cannot create hsr debugfs directory
[  606.904001][ T8909] team0: Port device team_slave_1 added
[  607.049343][ T1026] hsr_slave_0: left promiscuous mode
[  607.069271][ T1026] hsr_slave_1: left promiscuous mode
[  607.070066][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  607.110997][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  607.439484][ T6555] Bluetooth: hci4: command tx timeout
[  607.500883][ T1026] team0 (unregistering): Port device team_slave_1 removed
[  607.549843][ T1026] team0 (unregistering): Port device team_slave_0 removed
[  607.941055][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  607.941066][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  607.941080][ T8909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  608.066824][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.066840][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.066862][ T8909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  608.489006][ T8909] hsr_slave_0: entered promiscuous mode
[  608.491909][ T8909] hsr_slave_1: entered promiscuous mode
[  608.493578][ T8909] debugfs: 'hsr0' already exists in 'hsr'
[  608.493600][ T8909] Cannot create hsr debugfs directory
[  608.956832][ T8784] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  609.007247][ T8784] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  609.033610][ T8784] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  609.093846][ T8784] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  609.157971][ T8784] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  609.198102][ T8784] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  609.254630][ T8784] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  609.305720][ T8784] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  609.528593][ T8864] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  609.576633][ T8864] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  609.592962][ T8864] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  609.622593][ T8864] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  609.628433][ T8864] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  609.667088][ T8864] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  609.708223][ T8864] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  609.738525][ T8864] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  610.028846][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.103580][ T8909] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  610.161612][ T8909] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  610.163832][ T8909] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  610.209422][ T8909] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  610.213874][ T8909] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  610.242777][ T8909] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  610.265296][ T8909] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  610.313592][ T8909] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  610.384950][ T8784] 8021q: adding VLAN 0 to HW filter on device team0
[  610.429943][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.430078][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.466863][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.466974][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.655227][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.766186][ T8864] 8021q: adding VLAN 0 to HW filter on device team0
[  610.870965][ T2515] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.871060][ T2515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.915001][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.946645][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.946810][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.084994][ T8909] 8021q: adding VLAN 0 to HW filter on device team0
[  611.138562][ T2515] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.138725][ T2515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.221394][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.221508][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.596741][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.417432][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.519971][ T8784] veth0_vlan: entered promiscuous mode
[  612.553580][ T8784] veth1_vlan: entered promiscuous mode
[  612.696455][ T8784] veth0_macvtap: entered promiscuous mode
[  612.722762][ T8784] veth1_macvtap: entered promiscuous mode
[  612.827881][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.860334][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.916565][ T7700] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.934410][ T7700] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.937474][ T3331] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.981396][ T8909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.981595][ T3331] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.061558][ T7705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.061576][ T7705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.131535][ T8864] veth0_vlan: entered promiscuous mode
[  614.198097][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.198116][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.236723][ T8864] veth1_vlan: entered promiscuous mode
[  614.406695][ T8909] veth0_vlan: entered promiscuous mode
[  614.484566][ T8909] veth1_vlan: entered promiscuous mode
[  614.581788][ T8864] veth0_macvtap: entered promiscuous mode
[  614.637882][ T8864] veth1_macvtap: entered promiscuous mode
[  614.797064][ T8909] veth0_macvtap: entered promiscuous mode
[  614.824325][ T8909] veth1_macvtap: entered promiscuous mode
[  614.841872][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.874966][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.257414][ T8352] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  615.271653][ T8352] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.274252][ T8352] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.278473][ T8352] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.296511][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.400277][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.506035][ T7700] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  615.694919][ T7700] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.707340][ T7700] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.763456][ T1076] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.827982][ T9099] syz.5.702 (9099): drop_caches: 2
[  624.532382][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  624.532456][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  624.980025][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.980041][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.766891][ T2515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.766920][ T2515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.897621][ T9131] sctp: [Deprecated]: syz.0.710 (pid 9131) Use of struct sctp_assoc_value in delayed_ack socket option.
[  625.897621][ T9131] Use struct sctp_sack_info instead
[  627.162037][ T9139] qrtr: Invalid version 0
[  629.678795][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.678816][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.319045][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.319065][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  636.974479][ T9172] loop5: detected capacity change from 0 to 128
[  642.779922][ T5745] IPVS: starting estimator thread 0...
[  642.869292][ T9197] IPVS: using max 8 ests per chain, 19200 per kthread
[  643.197569][ T9204] loop4: detected capacity change from 0 to 512
[  644.361937][ T9204] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  644.949798][ T9204] EXT4-fs (loop4): orphan cleanup on readonly fs
[  644.967692][ T9204] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.726: Allocating blocks 41-42 which overlap fs metadata
[  644.967728][ T9204] loop4: lost filesystem error report for type 5 error -117
[  644.974475][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  644.974499][    C0] EXT4-fs (loop4): initial error at time 1779464504: ext4_mb_mark_diskspace_used:4222
[  644.974519][    C0] EXT4-fs (loop4): last error at time 1779464504: ext4_mb_mark_diskspace_used:4222
[  645.173491][ T9204] Quota error (device loop4): write_blk: dquota write failed
[  645.173507][ T9204] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  645.173628][ T9204] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.726: Allocating blocks 41-42 which overlap fs metadata
[  645.173643][ T9204] loop4: lost filesystem error report for type 5 error -117
[  645.175305][ T9204] Quota error (device loop4): write_blk: dquota write failed
[  645.175649][ T9204] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  645.175708][ T9204] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.726: Failed to acquire dquot type 1
[  645.175729][ T9204] loop4: lost filesystem error report for type 5 error -117
[  645.181807][ T9204] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  645.182533][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.726: corrupted inode contents
[  645.182558][ T9204] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  645.336226][ T9204] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.726: mark_inode_dirty error
[  645.336262][ T9204] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  645.404889][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.726: corrupted inode contents
[  645.404934][ T9204] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  645.446676][ T9204] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.726: mark_inode_dirty error
[  645.446710][ T9204] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  645.449756][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.726: corrupted inode contents
[  645.449786][ T9204] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  645.477136][ T9204] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  645.477164][ T9204] loop4: lost filesystem error report for type 5 error -117
[  646.426673][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.726: corrupted inode contents
[  646.426709][ T9204] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  646.482596][ T9204] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.726: mark_inode_dirty error
[  646.482627][ T9204] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  646.525920][ T9204] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  646.525947][ T9204] loop4: lost filesystem error report for type 5 error -117
[  646.555244][ T9204] EXT4-fs (loop4): 1 truncate cleaned up
[  646.571573][ T9204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  646.708379][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.268842][ T9220] hub 8-0:1.0: USB hub found
[  647.366432][ T9219] loop7: detected capacity change from 0 to 16
[  647.403046][ T9220] hub 8-0:1.0: 1 port detected
[  648.510422][ T9219] erofs (device loop7): mounted with root inode @ nid 36.
[  648.562742][ T9218] bio_check_eod: 176 callbacks suppressed
[  648.562758][ T9218] syz.7.730: attempt to access beyond end of device
[  648.562758][ T9218] loop7: rw=524288, sector=8, nr_sectors = 24 limit=16
[  648.576868][ T9218] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  648.576906][ T9218] erofs (device loop7): read error -117 @ 0 of nid 89
[  648.577247][   T38] audit: type=1800 audit(1779464508.594:291): pid=9218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.730" name="file2" dev="loop7" ino=89 res=0 errno=0
[  648.580433][ T9218] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  648.580469][ T9218] erofs (device loop7): read error -117 @ 0 of nid 89
[  648.605980][ T9218] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  648.606023][ T9218] erofs (device loop7): read error -117 @ 1 of nid 89
[  648.606758][ T9218] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  648.606787][ T9218] erofs (device loop7): read error -117 @ 1 of nid 89
[  648.606979][ T9218] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  648.607005][ T9218] erofs (device loop7): read error -117 @ 1 of nid 89
[  648.607076][ T9218] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  648.607102][ T9218] erofs (device loop7): read error -117 @ 1 of nid 89
[  651.483934][ T9247] loop6: detected capacity change from 0 to 32768
[  651.485024][ T9247] btrfs: Deprecated parameter 'usebackuproot'
[  651.485043][ T9247] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  651.676660][ T9251] netlink: 60 bytes leftover after parsing attributes in process `syz.4.737'.
[  651.774143][ T9247] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.738 (9247)
[  653.728505][ T9247] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  653.728540][ T9247] BTRFS info (device loop6): using crc32c checksum algorithm
[  654.473344][ T1226] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  654.473521][ T9247] BTRFS error (device loop6): failed to load root extent
[  654.477674][ T9247] BTRFS warning (device loop6): try to load backup roots slot 1
[  654.483850][   T12] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  654.483935][ T9247] BTRFS warning (device loop6): couldn't read tree root
[  654.483952][ T9247] BTRFS warning (device loop6): try to load backup roots slot 2
[  654.484263][ T3349] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  654.484355][ T9247] BTRFS warning (device loop6): couldn't read tree root
[  654.484374][ T9247] BTRFS warning (device loop6): try to load backup roots slot 3
[  654.787308][ T9247] BTRFS error (device loop6): open_ctree failed: -4
[  655.813910][ T9294] syz.6.745 (9294): drop_caches: 2
[  656.150125][ T6555] Bluetooth: hci3: unexpected event for opcode 0x007f
[  660.815660][ T6555] Bluetooth: hci4: link tx timeout
[  660.816841][ T6555] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  661.339133][ T9331] trusted_key: encrypted_key: insufficient parameters specified
[  662.080981][ T9330] Process accounting resumed
[  663.021200][ T6555] Bluetooth: hci1: unexpected event for opcode 0x007f
[  663.116850][ T6555] Bluetooth: hci4: command 0x0406 tx timeout
[  668.059306][ T9388] overlayfs: missing 'lowerdir'
[  668.786988][ T5629] Bluetooth: hci3: unexpected event for opcode 0x007f
[  672.994118][ T9436] qrtr: Invalid version 0
[  676.229320][ T5629] Bluetooth: hci3: unexpected event for opcode 0x007f
[  679.244937][ T9447] loop6: detected capacity change from 0 to 512
[  682.406633][ T9487] loop6: detected capacity change from 0 to 4096
[  682.585503][ T9496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.795'.
[  682.887836][ T9500] overlayfs: failed to clone upperpath
[  683.115588][ T9503] sctp: [Deprecated]: syz.7.793 (pid 9503) Use of struct sctp_assoc_value in delayed_ack socket option.
[  683.115588][ T9503] Use struct sctp_sack_info instead
[  685.100934][ T9487] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  685.109281][ T9487] EXT4-fs: failed to create workqueue
[  685.109294][ T9487] EXT4-fs (loop6): mount failed
[  686.385805][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  686.387707][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  687.060877][ T9524] loop4: detected capacity change from 0 to 512
[  687.106672][ T9524] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  687.502575][ T9524] EXT4-fs (loop4): orphan cleanup on readonly fs
[  687.507614][ T9524] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.802: Allocating blocks 41-42 which overlap fs metadata
[  687.507645][ T9524] loop4: lost filesystem error report for type 5 error -117
[  687.509185][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  687.509203][    C1] EXT4-fs (loop4): initial error at time 1779464547: ext4_mb_mark_diskspace_used:4222
[  687.509221][    C1] EXT4-fs (loop4): last error at time 1779464547: ext4_mb_mark_diskspace_used:4222
[  687.524252][ T9524] Quota error (device loop4): write_blk: dquota write failed
[  687.524274][ T9524] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  687.548714][ T9524] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  687.548829][ T9524] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.802: Failed to acquire dquot type 1
[  687.548844][ T9524] loop4: lost filesystem error report for type 5 error -117
[  687.648095][ T9524] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  687.648406][ T9524] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.802: corrupted inode contents
[  687.648431][ T9524] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  687.649514][ T9524] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.802: mark_inode_dirty error
[  687.649541][ T9524] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  687.661565][ T9524] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.802: corrupted inode contents
[  687.661598][ T9524] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  687.674043][ T9524] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.802: mark_inode_dirty error
[  687.674078][ T9524] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  687.674702][ T9524] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.802: corrupted inode contents
[  687.674728][ T9524] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  687.675258][ T9524] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  687.675277][ T9524] loop4: lost filesystem error report for type 5 error -117
[  687.675826][ T9524] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.802: corrupted inode contents
[  687.675859][ T9524] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  687.676387][ T9524] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.802: mark_inode_dirty error
[  687.676431][ T9524] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  687.677065][ T9524] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  687.677084][ T9524] loop4: lost filesystem error report for type 5 error -117
[  687.722259][ T9524] EXT4-fs (loop4): 1 truncate cleaned up
[  688.031208][ T9524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  688.288173][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.023124][ T6555] Bluetooth: hci2: command 0x0406 tx timeout
[  700.137976][ T9608] loop6: detected capacity change from 0 to 32768
[  701.483317][ T9607] loop7: detected capacity change from 0 to 32768
[  703.248059][ T9607] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.823 (9607)
[  703.475992][ T9608] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  705.016025][ T9608] syz.6.819 (9608) used greatest stack depth: 18744 bytes left
[  706.481861][ T9647] loop5: detected capacity change from 0 to 1024
[  707.573066][ T9647] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  707.673195][ T9648] tipc: Started in network mode
[  707.673221][ T9648] tipc: Node identity 2007ff, cluster identity 4711
[  707.673232][ T9648] tipc: Node number set to 2099199
[  713.114839][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  713.886415][ T5629] Bluetooth: hci6: command 0x0406 tx timeout
[  713.968649][ T8909] ocfs2: Unmounting device (7,6) on (node local)
[  714.129194][   T10] usb 5-1: Using ep0 maxpacket: 8
[  714.133103][   T10] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  714.133130][   T10] usb 5-1: config 0 has no interface number 0
[  714.133172][   T10] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  714.133192][   T10] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  714.133216][   T10] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  714.133238][   T10] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  714.133260][   T10] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  714.143812][   T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  714.143839][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.143858][   T10] usb 5-1: Product: syz
[  714.143870][   T10] usb 5-1: Manufacturer: syz
[  714.143882][   T10] usb 5-1: SerialNumber: syz
[  715.288511][   T10] usb 5-1: config 0 descriptor??
[  715.517023][   T10] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  715.580638][ T6555] Bluetooth: hci1: unexpected event for opcode 0x007f
[  721.003102][ T9175] usb 5-1: USB disconnect, device number 10
[  725.901282][   T10] IPVS: starting estimator thread 0...
[  726.011510][ T9760] IPVS: using max 10 ests per chain, 24000 per kthread
[  726.108068][ T6555] Bluetooth: hci1: unexpected event for opcode 0x007f
[  728.738642][ T9773] syz.6.864 (9773) used greatest stack depth: 18080 bytes left
[  731.461527][ T9794] cgroup: subsys name conflicts with all
[  733.013371][ T9809] loop4: detected capacity change from 0 to 32768
[  733.014656][ T9809] btrfs: Deprecated parameter 'usebackuproot'
[  733.014679][ T9809] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  733.738520][ T9809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.874 (9809)
[  734.965335][ T9809] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  734.965375][ T9809] BTRFS info (device loop4): using crc32c checksum algorithm
[  735.588340][ T8350] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  735.588463][ T9809] BTRFS error (device loop4): failed to load root extent
[  735.588500][ T9809] BTRFS warning (device loop4): try to load backup roots slot 1
[  735.632833][ T1516] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  735.632949][ T9809] BTRFS warning (device loop4): couldn't read tree root
[  735.632968][ T9809] BTRFS warning (device loop4): try to load backup roots slot 2
[  735.644213][   T12] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  735.647316][ T9809] BTRFS warning (device loop4): couldn't read tree root
[  735.647342][ T9809] BTRFS warning (device loop4): try to load backup roots slot 3
[  735.778075][ T6555] Bluetooth: hci4: unexpected event for opcode 0x007f
[  735.856525][ T9809] BTRFS error (device loop4): open_ctree failed: -4
[  739.902289][ T9866] loop6: detected capacity change from 0 to 512
[  740.144030][ T9866] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  740.802726][ T9866] EXT4-fs (loop6): orphan cleanup on readonly fs
[  741.102233][ T9866] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.885: Allocating blocks 41-42 which overlap fs metadata
[  741.102444][ T9866] loop6: lost filesystem error report for type 5 error -117
[  741.127773][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  741.127891][    C1] EXT4-fs (loop6): initial error at time 1779464601: ext4_mb_mark_diskspace_used:4222
[  741.127981][    C1] EXT4-fs (loop6): last error at time 1779464601: ext4_mb_mark_diskspace_used:4222
[  741.155100][ T9866] Quota error (device loop6): write_blk: dquota write failed
[  741.155123][ T9866] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  741.155262][ T9866] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.885: Allocating blocks 41-42 which overlap fs metadata
[  741.155296][ T9866] loop6: lost filesystem error report for type 5 error -117
[  741.179423][ T9866] Quota error (device loop6): write_blk: dquota write failed
[  741.179508][ T9866] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  741.179543][ T9866] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.885: Failed to acquire dquot type 1
[  741.179556][ T9866] loop6: lost filesystem error report for type 5 error -117
[  741.201175][ T9866] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  741.204463][ T9866] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.885: corrupted inode contents
[  741.204483][ T9866] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  741.231837][ T9866] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.885: mark_inode_dirty error
[  741.231870][ T9866] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  741.241421][ T9866] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.885: corrupted inode contents
[  741.241458][ T9866] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  741.250879][ T9866] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.885: mark_inode_dirty error
[  741.250912][ T9866] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  741.259394][ T9866] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.885: corrupted inode contents
[  741.259426][ T9866] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  741.295095][ T9866] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  741.295120][ T9866] loop6: lost filesystem error report for type 5 error -117
[  741.299636][ T9866] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.885: corrupted inode contents
[  741.299665][ T9866] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  741.300038][ T9866] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.885: mark_inode_dirty error
[  741.300063][ T9866] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  741.300391][ T9866] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  741.300411][ T9866] loop6: lost filesystem error report for type 5 error -117
[  741.304403][ T9866] EXT4-fs (loop6): 1 truncate cleaned up
[  741.630834][ T9866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  742.532062][ T8909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.579825][ T9893] loop6: detected capacity change from 0 to 1024
[  744.580534][ T9893] EXT4-fs: Ignoring removed mblk_io_submit option
[  744.630451][ T6555] Bluetooth: hci3: unexpected event for opcode 0x0c26
[  745.924121][ T9893] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  745.967150][ T5629] Bluetooth: hci3: unexpected event for opcode 0x007f
[  747.746361][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  747.746455][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  747.839231][ T5629] Bluetooth: hci4: command 0x0406 tx timeout
[  748.570816][ T9911] netlink: 68 bytes leftover after parsing attributes in process `syz.7.898'.
[  751.570288][ T9943] loop5: detected capacity change from 0 to 512
[  751.920131][ T9945] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003
[  752.459900][ T9945] loop7: detected capacity change from 0 to 4096
[  753.094782][ T9943] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  753.281288][ T9943] EXT4-fs (loop5): orphan cleanup on readonly fs
[  753.517177][ T9943] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.895: Allocating blocks 41-42 which overlap fs metadata
[  753.517212][ T9943] loop5: lost filesystem error report for type 5 error -117
[  753.519589][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  753.519612][    C1] EXT4-fs (loop5): initial error at time 1779464613: ext4_mb_mark_diskspace_used:4222
[  753.519629][    C1] EXT4-fs (loop5): last error at time 1779464613: ext4_mb_mark_diskspace_used:4222
[  753.558922][ T9943] Quota error (device loop5): write_blk: dquota write failed
[  753.558944][ T9943] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  753.560659][ T9943] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.895: Allocating blocks 41-42 which overlap fs metadata
[  753.560689][ T9943] loop5: lost filesystem error report for type 5 error -117
[  753.623609][ T9945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  753.676666][ T9943] Quota error (device loop5): write_blk: dquota write failed
[  753.676794][ T9943] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  753.676849][ T9943] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.895: Failed to acquire dquot type 1
[  753.676870][ T9943] loop5: lost filesystem error report for type 5 error -117
[  753.831805][ T9943] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  753.831931][ T9943] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.895: corrupted inode contents
[  753.831953][ T9943] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  753.836768][ T9943] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.895: mark_inode_dirty error
[  753.836798][ T9943] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  753.920910][ T9943] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.895: corrupted inode contents
[  753.920944][ T9943] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  753.942128][ T9944] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.904: corrupted inode contents
[  753.962918][ T9944] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #15: comm syz.7.904: mark_inode_dirty error
[  753.971150][ T9944] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.904: corrupted inode contents
[  753.973450][ T9944] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.904: mark_inode_dirty error
[  753.979126][ T9944] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.904: corrupted inode contents
[  753.980019][ T9944] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.904: mark_inode_dirty error
[  753.980794][ T9944] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.904: corrupted inode contents
[  753.998058][ T9944] EXT4-fs error (device loop7): ext4_truncate:4690: inode #15: comm syz.7.904: mark_inode_dirty error
[  754.025172][ T9944] EXT4-fs error (device loop7) in ext4_setattr:6120: Corrupt filesystem
[  754.505136][ T9943] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.895: mark_inode_dirty error
[  754.505171][ T9943] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  754.526123][ T9943] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.895: corrupted inode contents
[  754.526157][ T9943] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  754.539261][ T9943] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  754.539289][ T9943] loop5: lost filesystem error report for type 5 error -117
[  754.549265][ T9943] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.895: corrupted inode contents
[  754.549296][ T9943] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  754.559232][ T9943] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.895: mark_inode_dirty error
[  754.559278][ T9943] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  754.576064][ T9943] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  754.576092][ T9943] loop5: lost filesystem error report for type 5 error -117
[  754.589307][ T9943] EXT4-fs (loop5): 1 truncate cleaned up
[  754.592223][ T9943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  756.002645][ T8784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  756.041107][ T8864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  763.426756][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.7.917'.
[  764.125039][T10018] loop6: detected capacity change from 0 to 512
[  764.319899][T10013] netlink: 'syz.5.929': attribute type 1 has an invalid length.
[  764.804718][T10018] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  764.944493][T10018] EXT4-fs (loop6): orphan cleanup on readonly fs
[  765.313344][T10018] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.919: Allocating blocks 41-42 which overlap fs metadata
[  765.313401][T10018] loop6: lost filesystem error report for type 5 error -117
[  765.320801][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  765.320847][    C1] EXT4-fs (loop6): initial error at time 1779464625: ext4_mb_mark_diskspace_used:4222
[  765.320893][    C1] EXT4-fs (loop6): last error at time 1779464625: ext4_mb_mark_diskspace_used:4222
[  765.685675][T10018] Quota error (device loop6): write_blk: dquota write failed
[  765.685705][T10018] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  765.685845][T10018] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.919: Allocating blocks 41-42 which overlap fs metadata
[  765.685869][T10018] loop6: lost filesystem error report for type 5 error -117
[  765.903341][T10018] Quota error (device loop6): write_blk: dquota write failed
[  765.903461][T10018] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  765.903513][T10018] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.919: Failed to acquire dquot type 1
[  765.903534][T10018] loop6: lost filesystem error report for type 5 error -117
[  765.911659][T10018] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  765.911773][T10018] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.919: corrupted inode contents
[  765.911795][T10018] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  765.916360][T10018] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.919: mark_inode_dirty error
[  765.916392][T10018] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  765.923317][T10018] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.919: corrupted inode contents
[  765.923347][T10018] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  765.929315][T10018] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.919: mark_inode_dirty error
[  765.929344][T10018] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  765.940316][T10018] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.919: corrupted inode contents
[  765.940344][T10018] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  765.987658][T10018] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  765.987688][T10018] loop6: lost filesystem error report for type 5 error -117
[  765.994454][T10018] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.919: corrupted inode contents
[  765.994483][T10018] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  766.000465][T10018] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.919: mark_inode_dirty error
[  766.000496][T10018] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  766.002695][T10018] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  766.002719][T10018] loop6: lost filesystem error report for type 5 error -117
[  766.005783][T10018] EXT4-fs (loop6): 1 truncate cleaned up
[  766.012525][T10018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  767.825355][T10013] bond1: (slave gretap1): making interface the new active one
[  768.857722][T10040] loop7: detected capacity change from 0 to 4096
[  768.936484][T10013] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  771.914270][ T8909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.525390][T10053] overlayfs: failed to clone lowerpath
[  778.437890][T10075] loop6: detected capacity change from 0 to 512
[  778.579639][T10075] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  778.652517][T10075] EXT4-fs (loop6): orphan cleanup on readonly fs
[  778.667103][T10075] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.933: Allocating blocks 41-42 which overlap fs metadata
[  778.667137][T10075] loop6: lost filesystem error report for type 5 error -117
[  778.667736][T10075] Quota error (device loop6): write_blk: dquota write failed
[  778.667756][T10075] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  778.667892][T10075] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.933: Allocating blocks 41-42 which overlap fs metadata
[  778.667917][T10075] loop6: lost filesystem error report for type 5 error -117
[  778.669958][T10075] Quota error (device loop6): write_blk: dquota write failed
[  778.670085][T10075] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  778.670137][T10075] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.933: Failed to acquire dquot type 1
[  778.670157][T10075] loop6: lost filesystem error report for type 5 error -117
[  778.670365][    C0] EXT4-fs (loop6): error count since last fsck: 3
[  778.670382][    C0] EXT4-fs (loop6): initial error at time 1779464638: ext4_mb_mark_diskspace_used:4222
[  778.670402][    C0] EXT4-fs (loop6): last error at time 1779464638: ext4_acquire_dquot:7034
[  778.670676][T10075] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  778.670764][T10075] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.933: corrupted inode contents
[  778.670787][T10075] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  778.671152][T10075] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.933: mark_inode_dirty error
[  778.671176][T10075] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  778.671540][T10075] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.933: corrupted inode contents
[  778.671565][T10075] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  778.671909][T10075] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.933: mark_inode_dirty error
[  778.671934][T10075] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  778.672325][T10075] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.933: corrupted inode contents
[  778.672351][T10075] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  778.672965][T10075] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  778.672984][T10075] loop6: lost filesystem error report for type 5 error -117
[  778.673346][T10075] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.933: corrupted inode contents
[  778.673371][T10075] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  778.673679][T10075] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.933: mark_inode_dirty error
[  778.673703][T10075] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  778.674030][T10075] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  778.674053][T10075] loop6: lost filesystem error report for type 5 error -117
[  778.674622][T10075] EXT4-fs (loop6): 1 truncate cleaned up
[  780.107147][T10075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  781.067176][ T8909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  781.513394][T10090] loop7: detected capacity change from 0 to 512
[  781.668177][T10090] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  781.772967][T10090] EXT4-fs (loop7): orphan cleanup on readonly fs
[  781.813058][T10090] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.936: Allocating blocks 41-42 which overlap fs metadata
[  781.813150][T10090] loop7: lost filesystem error report for type 5 error -117
[  782.106270][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  782.106324][    C1] EXT4-fs (loop7): initial error at time 1779464641: ext4_mb_mark_diskspace_used:4222
[  782.106391][    C1] EXT4-fs (loop7): last error at time 1779464641: ext4_mb_mark_diskspace_used:4222
[  782.195603][T10090] Quota error (device loop7): write_blk: dquota write failed
[  782.195625][T10090] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[  782.197216][T10090] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.936: Allocating blocks 41-42 which overlap fs metadata
[  782.197244][T10090] loop7: lost filesystem error report for type 5 error -117
[  782.390445][T10090] Quota error (device loop7): write_blk: dquota write failed
[  782.390566][T10090] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  782.390618][T10090] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.936: Failed to acquire dquot type 1
[  782.390640][T10090] loop7: lost filesystem error report for type 5 error -117
[  782.436509][T10090] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  782.436616][T10090] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.936: corrupted inode contents
[  782.436630][T10090] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  782.441256][T10090] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #12: comm syz.7.936: mark_inode_dirty error
[  782.441288][T10090] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  782.442223][T10090] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.936: corrupted inode contents
[  782.442241][T10090] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  782.442673][T10090] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #12: comm syz.7.936: mark_inode_dirty error
[  782.443968][T10090] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.936: corrupted inode contents
[  782.445943][T10090] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  782.445956][T10090] loop7: lost filesystem error report for type 5 error -117
[  782.451169][T10090] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.936: corrupted inode contents
[  782.462218][T10090] EXT4-fs error (device loop7): ext4_truncate:4690: inode #12: comm syz.7.936: mark_inode_dirty error
[  782.464415][T10090] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  782.464438][T10090] loop7: lost filesystem error report for type 5 error -117
[  782.472085][T10090] EXT4-fs (loop7): 1 truncate cleaned up
[  782.506033][T10090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  782.822675][ T8864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  787.135830][T10114] overlayfs: missing 'lowerdir'
[  787.313190][T10115] loop6: detected capacity change from 0 to 4096
[  787.313750][T10115] EXT4-fs: Ignoring removed i_version option
[  787.313761][T10115] EXT4-fs: Ignoring removed oldalloc option
[  788.988594][T10115] EXT4-fs (loop6): Test dummy encryption mode enabled
[  788.991143][T10115] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  791.607987][T10133] loop4: detected capacity change from 0 to 512
[  791.663506][T10133] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  792.612826][T10133] EXT4-fs (loop4): orphan cleanup on readonly fs
[  792.695638][T10133] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.947: Allocating blocks 41-42 which overlap fs metadata
[  792.695673][T10133] loop4: lost filesystem error report for type 5 error -117
[  792.709363][T10133] Quota error (device loop4): write_blk: dquota write failed
[  792.709388][T10133] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  792.709515][T10133] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.947: Allocating blocks 41-42 which overlap fs metadata
[  792.709542][T10133] loop4: lost filesystem error report for type 5 error -117
[  792.710820][T10133] Quota error (device loop4): write_blk: dquota write failed
[  792.710920][T10133] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  792.710968][T10133] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.947: Failed to acquire dquot type 1
[  792.710989][T10133] loop4: lost filesystem error report for type 5 error -117
[  792.712179][T10133] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  792.712281][T10133] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.947: corrupted inode contents
[  792.712305][T10133] fserror_report: 4 callbacks suppressed
[  792.712314][T10133] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  792.712836][T10133] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.947: mark_inode_dirty error
[  792.712891][T10133] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  792.713390][T10133] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.947: corrupted inode contents
[  792.713414][T10133] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  792.713839][T10133] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.947: mark_inode_dirty error
[  792.713865][T10133] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  792.714356][T10133] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.947: corrupted inode contents
[  792.714381][T10133] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  792.725218][T10133] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  792.725243][T10133] loop4: lost filesystem error report for type 5 error -117
[  792.776026][T10133] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.947: corrupted inode contents
[  792.776067][T10133] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  792.908162][    C1] EXT4-fs (loop4): error count since last fsck: 11
[  792.908185][    C1] EXT4-fs (loop4): initial error at time 1779464652: ext4_mb_mark_diskspace_used:4222
[  792.908212][    C1] EXT4-fs (loop4): last error at time 1779464652: ext4_do_update_inode:5690: inode 12
[  793.092768][T10133] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.947: mark_inode_dirty error
[  793.092802][T10133] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  793.285044][T10133] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  793.285074][T10133] loop4: lost filesystem error report for type 5 error -117
[  793.316983][T10133] EXT4-fs (loop4): 1 truncate cleaned up
[  793.319954][T10133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  796.357557][T10151] loop7: detected capacity change from 0 to 512
[  796.991015][T10151] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  797.114216][T10151] EXT4-fs (loop7): orphan cleanup on readonly fs
[  797.196475][T10151] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.950: Allocating blocks 41-42 which overlap fs metadata
[  797.196551][T10151] loop7: lost filesystem error report for type 5 error -117
[  797.254226][T10151] Quota error (device loop7): write_blk: dquota write failed
[  797.254296][T10151] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[  797.256440][T10151] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.950: Allocating blocks 41-42 which overlap fs metadata
[  797.256514][T10151] loop7: lost filesystem error report for type 5 error -117
[  797.390447][T10151] Quota error (device loop7): write_blk: dquota write failed
[  797.390570][T10151] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  797.390632][T10151] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.950: Failed to acquire dquot type 1
[  797.390652][T10151] loop7: lost filesystem error report for type 5 error -117
[  797.408703][T10151] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  797.408819][T10151] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.950: corrupted inode contents
[  797.408844][T10151] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  797.470111][T10151] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #12: comm syz.7.950: mark_inode_dirty error
[  797.470144][T10151] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  797.515168][T10151] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.950: corrupted inode contents
[  797.515199][T10151] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  797.545873][    C1] EXT4-fs (loop7): error count since last fsck: 7
[  797.545897][    C1] EXT4-fs (loop7): initial error at time 1779464657: ext4_mb_mark_diskspace_used:4222
[  797.545917][    C1] EXT4-fs (loop7): last error at time 1779464657: ext4_do_update_inode:5690: inode 12
[  797.685492][T10151] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #12: comm syz.7.950: mark_inode_dirty error
[  797.710275][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  797.797042][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  797.812995][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  797.871465][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  797.888464][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  798.014023][T10151] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.950: corrupted inode contents
[  798.014056][T10151] fserror_report: 1 callbacks suppressed
[  798.014066][T10151] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  798.019675][T10151] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  798.019702][T10151] loop7: lost filesystem error report for type 5 error -117
[  798.027063][T10151] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.950: corrupted inode contents
[  798.027094][T10151] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  798.048309][T10151] EXT4-fs error (device loop7): ext4_truncate:4690: inode #12: comm syz.7.950: mark_inode_dirty error
[  798.048340][T10151] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  798.050217][T10151] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  798.050240][T10151] loop7: lost filesystem error report for type 5 error -117
[  798.055091][T10151] EXT4-fs (loop7): 1 truncate cleaned up
[  798.061275][T10151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  799.321705][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.564943][ T8864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  800.464792][ T6555] Bluetooth: hci0: command tx timeout
[  803.070469][ T6555] Bluetooth: hci0: command tx timeout
[  806.100897][ T5629] Bluetooth: hci0: command tx timeout
[  806.100929][ T5629] Bluetooth: hci4: command 0x0406 tx timeout
[  807.181590][ T6555] Bluetooth: hci6: unexpected event for opcode 0x007f
[  808.506754][T10207] uprobe: syz.4.961:10207 failed to unregister, leaking uprobe
[  808.524067][ T6555] Bluetooth: hci0: command tx timeout
[  808.996206][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  809.004279][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  809.604060][T10217] loop6: detected capacity change from 0 to 512
[  810.557943][T10217] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  811.115262][T10217] EXT4-fs (loop6): orphan cleanup on readonly fs
[  811.116443][T10217] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.963: Allocating blocks 41-42 which overlap fs metadata
[  811.116463][T10217] loop6: lost filesystem error report for type 5 error -117
[  811.116970][T10217] Quota error (device loop6): write_blk: dquota write failed
[  811.116982][T10217] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  811.117058][T10217] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.963: Allocating blocks 41-42 which overlap fs metadata
[  811.117072][T10217] loop6: lost filesystem error report for type 5 error -117
[  811.117480][T10217] Quota error (device loop6): write_blk: dquota write failed
[  811.117549][T10217] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  811.117578][T10217] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.963: Failed to acquire dquot type 1
[  811.117589][T10217] loop6: lost filesystem error report for type 5 error -117
[  811.118042][T10217] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  811.118098][T10217] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.963: corrupted inode contents
[  811.118110][T10217] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  811.118408][T10217] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.963: mark_inode_dirty error
[  811.118434][T10217] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  811.119153][    C0] EXT4-fs (loop6): error count since last fsck: 6
[  811.119172][    C0] EXT4-fs (loop6): initial error at time 1779464671: ext4_mb_mark_diskspace_used:4222
[  811.119193][    C0] EXT4-fs (loop6): last error at time 1779464671: ext4_dirty_inode:6587: inode 12
[  811.356840][T10217] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.963: corrupted inode contents
[  811.356871][T10217] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  811.357477][T10217] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.963: mark_inode_dirty error
[  811.357503][T10217] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  811.358039][T10217] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.963: corrupted inode contents
[  811.358065][T10217] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  811.358511][T10217] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  811.358530][T10217] loop6: lost filesystem error report for type 5 error -117
[  811.371090][T10217] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.963: corrupted inode contents
[  811.371126][T10217] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  811.393410][T10217] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.963: mark_inode_dirty error
[  811.393439][T10217] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  811.394039][T10217] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  811.394060][T10217] loop6: lost filesystem error report for type 5 error -117
[  811.394943][T10217] EXT4-fs (loop6): 1 truncate cleaned up
[  811.397728][T10217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  811.726568][ T8909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.025053][T10249] loop6: detected capacity change from 0 to 512
[  816.284485][T10249] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  816.361109][T10249] EXT4-fs (loop6): orphan cleanup on readonly fs
[  816.423785][T10249] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.973: Allocating blocks 41-42 which overlap fs metadata
[  816.423832][T10249] loop6: lost filesystem error report for type 5 error -117
[  816.608290][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  816.608372][    C1] EXT4-fs (loop6): initial error at time 1779464676: ext4_mb_mark_diskspace_used:4222
[  816.608441][    C1] EXT4-fs (loop6): last error at time 1779464676: ext4_mb_mark_diskspace_used:4222
[  816.897131][T10249] Quota error (device loop6): write_blk: dquota write failed
[  816.897155][T10249] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  816.897293][T10249] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.973: Allocating blocks 41-42 which overlap fs metadata
[  816.897318][T10249] loop6: lost filesystem error report for type 5 error -117
[  816.910972][T10249] Quota error (device loop6): write_blk: dquota write failed
[  816.911090][T10249] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  816.911142][T10249] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.973: Failed to acquire dquot type 1
[  816.911162][T10249] loop6: lost filesystem error report for type 5 error -117
[  816.924477][T10249] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  816.924599][T10249] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.973: corrupted inode contents
[  816.924622][T10249] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  816.925279][T10249] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.973: mark_inode_dirty error
[  816.925304][T10249] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  816.925811][T10249] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.973: corrupted inode contents
[  816.925836][T10249] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  816.926317][T10249] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.973: mark_inode_dirty error
[  816.926341][T10249] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  816.926906][T10249] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.973: corrupted inode contents
[  816.926930][T10249] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  816.927435][T10249] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  816.927454][T10249] loop6: lost filesystem error report for type 5 error -117
[  816.930094][T10249] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.973: corrupted inode contents
[  816.930123][T10249] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  816.930614][T10249] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.973: mark_inode_dirty error
[  816.930638][T10249] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  816.931112][T10249] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  816.931130][T10249] loop6: lost filesystem error report for type 5 error -117
[  816.931981][T10249] EXT4-fs (loop6): 1 truncate cleaned up
[  816.973750][T10249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  817.472271][ T1026] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.530596][ T8909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  817.719295][ T6555] Bluetooth: hci1: unexpected event for opcode 0x007f
[  820.579389][  T821] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  820.741044][  T821] usb 8-1: Using ep0 maxpacket: 32
[  820.751836][  T821] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  820.751867][  T821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.783992][  T821] usb 8-1: config 0 descriptor??
[  821.126841][ T1026] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.160590][  T821] as10x_usb: device has been detected
[  821.166433][  T821] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  821.180248][T10268] loop6: detected capacity change from 0 to 32768
[  821.209349][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  821.257212][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  821.258001][T10277] tmpfs: Bad value for 'nr_blocks'
[  821.336700][T10277] netlink: 'syz.7.977': attribute type 29 has an invalid length.
[  821.398164][  T821] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  821.703084][T10268] (syz.6.974,10268,1):ocfs2_initialize_super:2226 ERROR: status = -12
[  821.761722][T10268] (syz.6.974,10268,1):ocfs2_fill_super:1177 ERROR: status = -12
[  821.892918][  T821] as10x_usb: error during firmware upload part1
[  821.893620][  T821] Registered device nBox DVB-T Dongle
[  823.093196][  T821] usb 8-1: USB disconnect, device number 2
[  824.444998][T10306] loop7: detected capacity change from 0 to 512
[  825.379151][T10306] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  825.548820][T10306] EXT4-fs (loop7): orphan cleanup on readonly fs
[  825.589471][T10306] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.984: Allocating blocks 41-42 which overlap fs metadata
[  825.589547][T10306] loop7: lost filesystem error report for type 5 error -117
[  825.608742][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  825.608810][    C1] EXT4-fs (loop7): initial error at time 1779464685: ext4_mb_mark_diskspace_used:4222
[  825.608874][    C1] EXT4-fs (loop7): last error at time 1779464685: ext4_mb_mark_diskspace_used:4222
[  825.865924][T10306] Quota error (device loop7): write_blk: dquota write failed
[  825.865997][T10306] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[  825.884321][T10306] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.984: Allocating blocks 41-42 which overlap fs metadata
[  825.884396][T10306] loop7: lost filesystem error report for type 5 error -117
[  826.013916][T10306] Quota error (device loop7): write_blk: dquota write failed
[  826.017436][T10306] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  826.017673][T10306] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.984: Failed to acquire dquot type 1
[  826.017714][T10306] loop7: lost filesystem error report for type 5 error -117
[  826.126201][T10306] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  826.126319][T10306] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.984: corrupted inode contents
[  826.126341][T10306] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  826.151266][T10306] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #12: comm syz.7.984: mark_inode_dirty error
[  826.151297][T10306] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  826.157260][T10306] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.984: corrupted inode contents
[  826.157290][T10306] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  826.217075][T10306] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #12: comm syz.7.984: mark_inode_dirty error
[  826.217107][T10306] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  826.251724][T10306] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.984: corrupted inode contents
[  826.251760][T10306] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  826.262612][T10306] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  826.262640][T10306] loop7: lost filesystem error report for type 5 error -117
[  826.281056][T10306] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.984: corrupted inode contents
[  826.281088][T10306] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  826.285548][T10306] EXT4-fs error (device loop7): ext4_truncate:4690: inode #12: comm syz.7.984: mark_inode_dirty error
[  826.285582][T10306] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  826.286217][T10306] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  826.286237][T10306] loop7: lost filesystem error report for type 5 error -117
[  826.328252][T10306] EXT4-fs (loop7): 1 truncate cleaned up
[  826.331075][T10306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  826.804856][ T8864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  826.953838][  T821] Unregistered device nBox DVB-T Dongle
[  826.956358][  T821] as10x_usb: device has been disconnected
[  826.984598][ T1026] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.107750][T10323] loop4: detected capacity change from 0 to 512
[  829.472365][T10324] loop6: detected capacity change from 0 to 32768
[  830.318751][T10323] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  830.333222][T10323] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  830.333284][T10323] EXT4-fs: failed to create workqueue
[  830.333292][T10323] EXT4-fs (loop4): mount failed
[  830.336921][T10324] (syz.6.989,10324,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  830.352568][T10324] (syz.6.989,10324,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  830.391760][T10324] JBD2: Ignoring recovery information on journal
[  830.441472][T10324] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  831.778118][T10347] loop4: detected capacity change from 0 to 512
[  832.383281][T10347] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  832.434248][T10347] EXT4-fs (loop4): orphan cleanup on readonly fs
[  832.597818][T10347] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.991: Allocating blocks 41-42 which overlap fs metadata
[  832.597854][T10347] loop4: lost filesystem error report for type 5 error -117
[  833.188466][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  833.188492][    C0] EXT4-fs (loop4): initial error at time 1779464692: ext4_mb_mark_diskspace_used:4222
[  833.188516][    C0] EXT4-fs (loop4): last error at time 1779464692: ext4_mb_mark_diskspace_used:4222
[  833.197620][T10347] Quota error (device loop4): write_blk: dquota write failed
[  833.197644][T10347] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  833.197778][T10347] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.991: Allocating blocks 41-42 which overlap fs metadata
[  833.197802][T10347] loop4: lost filesystem error report for type 5 error -117
[  833.200860][T10347] Quota error (device loop4): write_blk: dquota write failed
[  833.200982][T10347] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  833.201034][T10347] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.991: Failed to acquire dquot type 1
[  833.201055][T10347] loop4: lost filesystem error report for type 5 error -117
[  833.207254][T10347] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  833.207355][T10347] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.991: corrupted inode contents
[  833.207376][T10347] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  833.214274][T10347] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.991: mark_inode_dirty error
[  833.214306][T10347] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  833.214960][T10347] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.991: corrupted inode contents
[  833.214986][T10347] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  833.215608][T10347] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.991: mark_inode_dirty error
[  833.215632][T10347] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  833.217950][ T1026] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  833.218382][T10347] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.991: corrupted inode contents
[  833.218407][T10347] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  833.218871][T10347] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  833.218890][T10347] loop4: lost filesystem error report for type 5 error -117
[  833.226008][T10347] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.991: corrupted inode contents
[  833.226037][T10347] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  833.232639][T10347] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.991: mark_inode_dirty error
[  833.232670][T10347] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  833.234238][T10347] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  833.234258][T10347] loop4: lost filesystem error report for type 5 error -117
[  833.237748][T10347] EXT4-fs (loop4): 1 truncate cleaned up
[  833.351155][T10347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  833.871022][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  834.014478][T10353] overlayfs: failed to clone upperpath
[  840.916019][ T8909] ocfs2: Unmounting device (7,6) on (node local)
[  841.943792][T10386] netlink: 'syz.7.1001': attribute type 3 has an invalid length.
[  841.943814][T10386] netlink: 'syz.7.1001': attribute type 1 has an invalid length.
[  841.943826][T10386] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1001'.
[  841.943902][T10386] NCSI netlink: No device for ifindex 0
[  848.299369][T10149] bridge0: port 1(bridge_slave_0) entered blocking state
[  848.299645][T10149] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.299975][T10149] bridge_slave_0: entered allmulticast mode
[  848.316553][T10149] bridge_slave_0: entered promiscuous mode
[  848.322599][T10149] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.322858][T10149] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.324947][T10149] bridge_slave_1: entered allmulticast mode
[  848.342542][T10149] bridge_slave_1: entered promiscuous mode
[  851.938611][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  852.956983][T10455] loop4: detected capacity change from 0 to 32768
[  854.909110][T10460] syz.0.1013 (10460) used greatest stack depth: 18040 bytes left
[  855.151562][T10455] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  856.021684][ T8921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  856.057016][ T8921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  856.079181][ T8921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  856.155104][ T8921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  857.327162][ T8921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  858.900136][T10489] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003
[  859.661089][ T8921] Bluetooth: hci2: command tx timeout
[  859.736764][ T1026] bridge_slave_1: left allmulticast mode
[  859.736799][ T1026] bridge_slave_1: left promiscuous mode
[  859.737072][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.872183][ T6555] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  859.970556][ T6555] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  859.992431][ T6555] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  859.993952][ T6555] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  860.111199][ T6555] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  860.263847][T10494] syz.0.1021 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  860.694749][ T1026] bridge_slave_0: left allmulticast mode
[  860.694778][ T1026] bridge_slave_0: left promiscuous mode
[  860.695002][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.848722][ T5626] ocfs2: Unmounting device (7,4) on (node local)
[  861.883795][ T8921] Bluetooth: hci2: command tx timeout
[  863.582190][ T8921] Bluetooth: hci5: command tx timeout
[  863.824771][ T8921] Bluetooth: hci3: unexpected event for opcode 0x007f
[  864.153896][ T8921] Bluetooth: hci2: command tx timeout
[  864.603452][T10527] overlayfs: failed to clone upperpath
[  866.027497][ T6555] Bluetooth: hci5: command tx timeout
[  866.329578][ T6555] Bluetooth: hci2: command tx timeout
[  868.242024][ T6555] Bluetooth: hci5: command tx timeout
[  869.033788][ T1026] bond1 (unregistering): (slave gretap1): Releasing active interface
[  870.416326][ T6555] Bluetooth: hci6: unexpected event for opcode 0x007f
[  870.435235][ T6555] Bluetooth: hci5: command tx timeout
[  870.636281][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  871.648247][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  871.648323][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  871.681271][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  871.892658][ T1026] bond0 (unregistering): Released all slaves
[  871.914449][ T1026] bond1 (unregistering): Released all slaves
[  872.934992][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[  873.580045][T10599] loop7: detected capacity change from 0 to 32768
[  873.751277][T10599] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  875.309598][ T8864] ocfs2: Unmounting device (7,7) on (node local)
[  877.044380][T10632] loop7: detected capacity change from 0 to 512
[  877.077491][T10632] EXT4-fs: Ignoring removed mblk_io_submit option
[  877.090310][T10632] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  877.317211][T10632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  877.317539][T10632] EXT4-fs (loop7): orphan cleanup on readonly fs
[  877.346790][T10632] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1053: bg 0: block 361: padding at end of block bitmap is not set
[  877.346824][T10632] loop7: lost filesystem error report for type 5 error -117
[  877.366166][    C0] EXT4-fs (loop7): initial error at time 1779464735: ext4_validate_block_bitmap:441
[  877.366198][    C0] EXT4-fs (loop7): last error at time 1779464735: ext4_validate_block_bitmap:441
[  877.568596][T10632] EXT4-fs (loop7): Remounting filesystem read-only
[  877.604319][T10632] EXT4-fs (loop7): 1 truncate cleaned up
[  877.607070][T10632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  878.033915][T10650] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1053: dx entry: limit 0 != root limit 125
[  878.034021][T10650] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1053: Corrupt directory, running e2fsck is recommended
[  878.071367][T10651] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1053'.
[  878.795748][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'.
[  879.642364][T10649] 8021q: adding VLAN 0 to HW filter on device team1
[  879.776435][ T8864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  879.782497][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[  882.227849][ T6555] Bluetooth: hci3: unexpected event for opcode 0x007f
[  883.914095][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1063'.
[  886.390734][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7
[  889.475234][ T6555] Bluetooth: hci6: unexpected event for opcode 0x007f
[  890.734106][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'.
[  893.597376][ T1026] hsr_slave_0: left promiscuous mode
[  893.644247][ T1026] hsr_slave_1: left promiscuous mode
[  893.645431][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  893.645454][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  893.691582][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  893.691608][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  893.774012][ T1026] veth1_macvtap: left promiscuous mode
[  893.774113][ T1026] veth0_macvtap: left promiscuous mode
[  893.774394][ T1026] veth1_vlan: left promiscuous mode
[  893.774576][ T1026] veth0_vlan: left promiscuous mode
[  898.217796][ T1026] team0 (unregistering): Port device team_slave_1 removed
[  898.537505][ T1026] team0 (unregistering): Port device team_slave_0 removed
[  899.494181][T10749] batadv_slave_1: entered promiscuous mode
[  899.494942][T10751] batadv_slave_1: left promiscuous mode
[  900.469994][T10465] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.470286][T10465] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.470596][T10465] bridge_slave_0: entered allmulticast mode
[  900.473686][T10465] bridge_slave_0: entered promiscuous mode
[  900.652381][T10465] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.660338][T10465] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.660676][T10465] bridge_slave_1: entered allmulticast mode
[  900.679211][T10465] bridge_slave_1: entered promiscuous mode
[  901.098275][ T6555] Bluetooth: hci1: unexpected event for opcode 0x007f
[  904.476811][T10465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  907.743994][T10465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  908.862095][T10484] bridge0: port 1(bridge_slave_0) entered blocking state
[  908.862924][T10484] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.863579][T10484] bridge_slave_0: entered allmulticast mode
[  908.871553][T10484] bridge_slave_0: entered promiscuous mode
[  910.292422][T10484] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.293042][T10484] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.299526][T10484] bridge_slave_1: entered allmulticast mode
[  911.447278][T10484] bridge_slave_1: entered promiscuous mode
[  912.299886][T10824] loop7: detected capacity change from 0 to 512
[  912.318310][T10824] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  912.325268][T10824] EXT4-fs (loop7): orphan cleanup on readonly fs
[  912.331140][T10824] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1091: Allocating blocks 41-42 which overlap fs metadata
[  912.331207][T10824] loop7: lost filesystem error report for type 5 error -117
[  912.408458][T10824] Quota error (device loop7): write_blk: dquota write failed
[  912.408510][T10824] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[  912.408781][T10824] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1091: Allocating blocks 41-42 which overlap fs metadata
[  912.408839][T10824] loop7: lost filesystem error report for type 5 error -117
[  912.472363][T10832] loop4: detected capacity change from 0 to 512
[  912.477725][T10465] team0: Port device team_slave_0 added
[  912.503022][T10465] team0: Port device team_slave_1 added
[  913.112868][    C1] EXT4-fs (loop7): error count since last fsck: 2
[  913.112889][    C1] EXT4-fs (loop7): initial error at time 1779464768: ext4_mb_mark_diskspace_used:4222
[  913.112907][    C1] EXT4-fs (loop7): last error at time 1779464768: ext4_mb_mark_diskspace_used:4222
[  913.572407][T10484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  913.718498][T10824] Quota error (device loop7): write_blk: dquota write failed
[  913.723222][T10824] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  913.723725][T10824] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.1091: Failed to acquire dquot type 1
[  913.723795][T10824] loop7: lost filesystem error report for type 5 error -117
[  913.927891][T10832] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  913.966733][T10824] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  913.966820][T10824] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.1091: corrupted inode contents
[  913.966838][T10824] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  914.029804][T10824] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #12: comm syz.7.1091: mark_inode_dirty error
[  914.029838][T10824] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  914.057700][T10824] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.1091: corrupted inode contents
[  914.057765][T10824] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  914.061371][T10824] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #12: comm syz.7.1091: mark_inode_dirty error
[  914.061400][T10824] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  914.062012][T10824] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.1091: corrupted inode contents
[  914.062037][T10824] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  914.062664][T10824] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  914.062684][T10824] loop7: lost filesystem error report for type 5 error -117
[  914.063424][T10824] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.1091: corrupted inode contents
[  914.063464][T10824] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  914.065506][T10824] EXT4-fs error (device loop7): ext4_truncate:4690: inode #12: comm syz.7.1091: mark_inode_dirty error
[  914.065533][T10824] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  914.066315][T10824] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  914.066334][T10824] loop7: lost filesystem error report for type 5 error -117
[  914.070376][T10824] EXT4-fs (loop7): 1 truncate cleaned up
[  914.193152][T10484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  914.259859][T10832] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  914.259934][T10832] EXT4-fs: failed to create workqueue
[  914.259944][T10832] EXT4-fs (loop4): mount failed
[  914.348212][T10824] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  914.828945][ T8864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  916.027024][ T8921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  916.071408][T10465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  916.071424][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  916.071443][T10465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  916.165026][ T8921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  916.178012][ T8921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  916.202001][ T8921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  916.210377][ T8921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  916.352267][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8
[  918.658780][ T8921] Bluetooth: hci0: command tx timeout
[  919.157670][ T6555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  919.245045][ T6555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  919.312341][ T6555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  919.329990][ T6555] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  919.334063][ T6555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  919.974850][ T8921] Bluetooth: hci6: unexpected event for opcode 0x007f
[  920.887877][ T8921] Bluetooth: hci0: command tx timeout
[  922.548186][ T8921] Bluetooth: hci4: command tx timeout
[  923.179655][ T8921] Bluetooth: hci0: command tx timeout
[  924.720940][ T8921] Bluetooth: hci4: command tx timeout
[  925.401786][ T8921] Bluetooth: hci0: command tx timeout
[  926.261916][  T821] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  926.373516][   T74] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.427911][  T821] usb 5-1: Using ep0 maxpacket: 8
[  926.430681][  T821] usb 5-1: unable to get BOS descriptor or descriptor too short
[  926.435885][  T821] usb 5-1: New USB device found, idVendor=0499, idProduct=1029, bcdDevice= 0.40
[  926.435913][  T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.435930][  T821] usb 5-1: Product: syz
[  926.435942][  T821] usb 5-1: Manufacturer: syz
[  926.435955][  T821] usb 5-1: SerialNumber: syz
[  926.544065][ T5727] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  926.788581][ T5727] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  926.788611][ T5727] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  926.788630][ T5727] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  926.788745][ T5727] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  926.840342][ T5727] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  926.840370][ T5727] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  926.840447][ T5727] usb 8-1: Product: syz
[  926.840460][ T5727] usb 8-1: Manufacturer: syz
[  926.952509][ T8921] Bluetooth: hci4: command tx timeout
[  927.042819][ T5727] cdc_wdm 8-1:1.0: skipping garbage
[  927.042838][ T5727] cdc_wdm 8-1:1.0: skipping garbage
[  927.042921][ T5727] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  927.072892][  T821] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  927.073402][  T821] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  927.135862][  T821] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  927.161113][  T821] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2
[  927.224897][  T821] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  927.375265][   T32] usb 8-1: USB disconnect, device number 3
[  927.653620][  T821] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2
[  927.772275][  T821] usb 5-1: USB disconnect, device number 11
[  927.828797][T10826] udevd[10826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  928.679751][   T74] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.730712][ T8921] Bluetooth: hci4: command tx timeout
[  934.063762][T10975] loop7: detected capacity change from 0 to 32768
[  934.183250][T10975] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  934.430652][   T74] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.500760][  T821] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  935.673094][  T821] usb 8-1: no configurations
[  935.673107][  T821] usb 8-1: can't read configurations, error -22
[  935.846907][  T821] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  936.152599][  T821] usb 8-1: no configurations
[  936.152618][  T821] usb 8-1: can't read configurations, error -22
[  936.154445][  T821] usb usb8-port1: attempt power cycle
[  936.291775][T10995] overlayfs: failed to clone upperpath
[  937.322683][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  937.322775][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  937.592239][   T74] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.947461][ T8864] ocfs2: Unmounting device (7,7) on (node local)
[  938.577832][T10847] bridge0: port 1(bridge_slave_0) entered blocking state
[  938.578129][T10847] bridge0: port 1(bridge_slave_0) entered disabled state
[  938.578406][T10847] bridge_slave_0: entered allmulticast mode
[  938.587014][T10847] bridge_slave_0: entered promiscuous mode
[  938.669379][T10847] bridge0: port 2(bridge_slave_1) entered blocking state
[  938.669640][T10847] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.669871][T10847] bridge_slave_1: entered allmulticast mode
[  938.671930][T10847] bridge_slave_1: entered promiscuous mode
[  939.089232][T10847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  939.118371][T10847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  939.541948][T10847] team0: Port device team_slave_0 added
[  939.547035][T10871] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.548442][T10871] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.548805][T10871] bridge_slave_0: entered allmulticast mode
[  939.553220][T10871] bridge_slave_0: entered promiscuous mode
[  939.727589][T10847] team0: Port device team_slave_1 added
[  939.728946][T10871] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.729492][T10871] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.729755][T10871] bridge_slave_1: entered allmulticast mode
[  939.767149][  T822] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  939.769352][T10871] bridge_slave_1: entered promiscuous mode
[  940.976988][  T822] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  940.977006][  T822] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  940.977016][  T822] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  940.977043][  T822] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  940.980277][  T822] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  940.980305][  T822] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  940.980323][  T822] usb 5-1: Product: syz
[  940.980335][  T822] usb 5-1: Manufacturer: syz
[  941.054758][  T822] cdc_wdm 5-1:1.0: skipping garbage
[  941.054777][  T822] cdc_wdm 5-1:1.0: skipping garbage
[  941.054909][  T822] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  941.388224][   T74] bridge_slave_1: left allmulticast mode
[  941.388259][   T74] bridge_slave_1: left promiscuous mode
[  941.388540][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.570852][   T74] bridge_slave_0: left allmulticast mode
[  941.570875][   T74] bridge_slave_0: left promiscuous mode
[  941.571993][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.880408][   T74] bridge_slave_1: left allmulticast mode
[  941.880482][   T74] bridge_slave_1: left promiscuous mode
[  941.882219][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  942.009467][   T74] bridge_slave_0: left allmulticast mode
[  942.009493][   T74] bridge_slave_0: left promiscuous mode
[  942.009695][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  942.521581][T11056] overlayfs: failed to clone upperpath
[  944.542898][   T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  944.836591][T11064] loop7: detected capacity change from 0 to 32768
[  944.926570][T11064] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  945.034157][T11070] overlayfs: failed to clone upperpath
[  945.762205][   T74] bond0 (unregistering): Released all slaves
[  949.553738][ T8864] ocfs2: Unmounting device (7,7) on (node local)
[  950.044885][T11085] overlayfs: failed to clone upperpath
[  950.237535][   T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  950.311424][   T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  950.358051][   T74] bond0 (unregistering): Released all slaves
[  950.821722][T10847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  950.821738][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  950.821761][T10847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  950.933884][ T9175] usb 5-1: USB disconnect, device number 12
[  951.091061][T10871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  951.108444][T10847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  951.108461][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  951.108485][T10847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  951.163205][T10871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  951.479919][T10871] team0: Port device team_slave_0 added
[  951.485447][T10871] team0: Port device team_slave_1 added
[  951.666664][T10847] hsr_slave_0: entered promiscuous mode
[  951.668652][T10847] hsr_slave_1: entered promiscuous mode
[  951.670617][T10847] debugfs: 'hsr0' already exists in 'hsr'
[  951.670639][T10847] Cannot create hsr debugfs directory
[  951.768542][ T9175] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  952.000994][T10871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  952.001009][T10871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  952.001031][T10871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  953.138209][ T9175] usb 5-1: unable to get BOS descriptor or descriptor too short
[  953.139504][ T9175] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  953.139521][ T9175] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  953.142083][ T9175] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  953.142098][ T9175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.142107][ T9175] usb 5-1: Product: syz
[  953.142114][ T9175] usb 5-1: Manufacturer: syz
[  953.142121][ T9175] usb 5-1: SerialNumber: syz
[  953.172555][ T9175] usb 5-1: selecting invalid altsetting 1
[  953.173715][ T9175] usb 5-1: unit 6 not found!
[  954.020546][ T9175] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  955.384845][T10871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  955.384860][T10871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  955.384881][T10871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  957.248115][ T9175] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  957.281709][ T9175] usb 5-1: USB disconnect, device number 13
[  957.377347][T10983] udevd[10983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  958.233235][T11143] overlayfs: failed to clone upperpath
[  959.083339][T10871] hsr_slave_0: entered promiscuous mode
[  959.092326][T10871] hsr_slave_1: entered promiscuous mode
[  959.102553][T10871] debugfs: 'hsr0' already exists in 'hsr'
[  959.102571][T10871] Cannot create hsr debugfs directory
[  960.331858][T11155] loop7: detected capacity change from 0 to 24
[  960.988849][   T74] hsr_slave_0: left promiscuous mode
[  961.162454][   T74] hsr_slave_1: left promiscuous mode
[  961.163236][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  961.163252][   T74] batman_adv: batadv0: Removing interface: batadv_slave_0
[  961.354318][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  961.354336][   T74] batman_adv: batadv0: Removing interface: batadv_slave_1
[  961.803914][   T74] veth1_macvtap: left promiscuous mode
[  961.804017][   T74] veth0_macvtap: left promiscuous mode
[  961.804296][   T74] veth1_vlan: left promiscuous mode
[  961.804475][   T74] veth0_vlan: left promiscuous mode
[  963.619123][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1150'.
[  963.771248][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1150'.
[  965.111590][   T74] team0 (unregistering): Port device team_slave_1 removed
[  965.141898][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'.
[  965.146307][   T74] team0 (unregistering): Port device team_slave_0 removed
[  965.511686][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9
[  967.605155][T11199] ==================================================================
[  967.605171][T11199] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380
[  967.605202][T11199] Read of size 8 at addr ffff88803c1d8528 by task syz.0.1154/11199
[  967.605217][T11199] 
[  967.605231][T11199] CPU: 1 UID: 0 PID: 11199 Comm: syz.0.1154 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  967.605256][T11199] Tainted: [L]=SOFTLOCKUP
[  967.605263][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  967.605274][T11199] Call Trace:
[  967.605281][T11199]  <TASK>
[  967.605290][T11199]  dump_stack_lvl+0xe8/0x150
[  967.605315][T11199]  print_address_description+0x55/0x1e0
[  967.605339][T11199]  ? clear_tfile_check_list+0x114/0x380
[  967.605361][T11199]  print_report+0x58/0x70
[  967.605380][T11199]  kasan_report+0x117/0x150
[  967.605402][T11199]  ? clear_tfile_check_list+0x114/0x380
[  967.605428][T11199]  clear_tfile_check_list+0x114/0x380
[  967.605450][T11199]  ? clear_tfile_check_list+0x22/0x380
[  967.605473][T11199]  do_epoll_ctl_file+0x8fd/0xed0
[  967.605493][T11199]  ? do_epoll_ctl_file+0xac3/0xed0
[  967.605512][T11199]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  967.605531][T11199]  ? __fget_files+0x3a6/0x420
[  967.605548][T11199]  ? __fget_files+0x2a/0x420
[  967.605576][T11199]  __se_sys_epoll_ctl+0x14e/0x210
[  967.605600][T11199]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  967.605626][T11199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.605642][T11199]  do_syscall_64+0x15f/0x560
[  967.605658][T11199]  ? trace_irq_disable+0x3b/0x140
[  967.605677][T11199]  ? clear_bhb_loop+0x40/0x90
[  967.605695][T11199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.605711][T11199] RIP: 0033:0x7f962988ce59
[  967.605727][T11199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  967.605742][T11199] RSP: 002b:00007f9627681028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  967.605760][T11199] RAX: ffffffffffffffda RBX: 00007f9629b06270 RCX: 00007f962988ce59
[  967.605775][T11199] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000009
[  967.605787][T11199] RBP: 00007f9629922d6f R08: 0000000000000000 R09: 0000000000000000
[  967.605798][T11199] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  967.605809][T11199] R13: 00007f9629b06308 R14: 00007f9629b06270 R15: 00007ffdd8300608
[  967.605829][T11199]  </TASK>
[  967.605835][T11199] 
[  967.605839][T11199] Allocated by task 11194:
[  967.605848][T11199]  kasan_save_track+0x3e/0x80
[  967.605865][T11199]  __kasan_slab_alloc+0x6c/0x80
[  967.605882][T11199]  kmem_cache_alloc_noprof+0x33b/0x680
[  967.605899][T11199]  ep_insert+0x512/0x1820
[  967.605915][T11199]  do_epoll_ctl_file+0x8bb/0xed0
[  967.605930][T11199]  __se_sys_epoll_ctl+0x14e/0x210
[  967.605946][T11199]  do_syscall_64+0x15f/0x560
[  967.605960][T11199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.605975][T11199] 
[  967.605978][T11199] Freed by task 11189:
[  967.605985][T11199]  kasan_save_track+0x3e/0x80
[  967.606000][T11199]  kasan_save_free_info+0x46/0x50
[  967.606020][T11199]  __kasan_slab_free+0x5c/0x80
[  967.606041][T11199]  kmem_cache_free+0x187/0x6c0
[  967.606059][T11199]  eventpoll_release_file+0xc2/0x240
[  967.606076][T11199]  __fput+0x83c/0xa70
[  967.606090][T11199]  task_work_run+0x1d9/0x270
[  967.606109][T11199]  exit_to_user_mode_loop+0xf3/0x4d0
[  967.606128][T11199]  do_syscall_64+0x33e/0x560
[  967.606143][T11199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.606159][T11199] 
[  967.606163][T11199] The buggy address belongs to the object at ffff88803c1d8520
[  967.606163][T11199]  which belongs to the cache ep_head of size 16
[  967.606178][T11199] The buggy address is located 8 bytes inside of
[  967.606178][T11199]  freed 16-byte region [ffff88803c1d8520, ffff88803c1d8530)
[  967.606195][T11199] 
[  967.606200][T11199] The buggy address belongs to the physical page:
[  967.606221][T11199] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803c1d8540 pfn:0x3c1d8
[  967.606243][T11199] memcg:ffff8880606c6801
[  967.606251][T11199] flags: 0x80000000000200(workingset|node=0|zone=1)
[  967.606272][T11199] page_type: f5(slab)
[  967.606288][T11199] raw: 0080000000000200 ffff888140ae6000 ffffea0000d55490 ffff88801b316088
[  967.606305][T11199] raw: ffff88803c1d8540 0000000800800064 00000000f5000000 ffff8880606c6801
[  967.606315][T11199] page dumped because: kasan: bad access detected
[  967.606327][T11199] page_owner tracks the page as allocated
[  967.606333][T11199] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4995, tgid 4995 (udevd), ts 40941430659, free_ts 40582688092
[  967.606365][T11199]  post_alloc_hook+0x1f9/0x250
[  967.606384][T11199]  get_page_from_freelist+0x265c/0x26e0
[  967.606406][T11199]  __alloc_frozen_pages_noprof+0x18d/0x380
[  967.606426][T11199]  allocate_slab+0x74/0x5e0
[  967.606446][T11199]  refill_objects+0x33c/0x3d0
[  967.606464][T11199]  __pcs_replace_empty_main+0x373/0x720
[  967.606482][T11199]  kmem_cache_alloc_noprof+0x433/0x680
[  967.606497][T11199]  ep_insert+0x512/0x1820
[  967.606513][T11199]  do_epoll_ctl_file+0x8bb/0xed0
[  967.606528][T11199]  __se_sys_epoll_ctl+0x14e/0x210
[  967.606545][T11199]  do_syscall_64+0x15f/0x560
[  967.606566][T11199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.606581][T11199] page last free pid 4993 tgid 4993 stack trace:
[  967.606591][T11199]  __free_frozen_pages+0x10af/0x1190
[  967.606609][T11199]  __slab_free+0x252/0x2a0
[  967.606624][T11199]  qlist_free_all+0x99/0x100
[  967.606638][T11199]  kasan_quarantine_reduce+0x148/0x160
[  967.606655][T11199]  __kasan_slab_alloc+0x22/0x80
[  967.606672][T11199]  kmem_cache_alloc_noprof+0x33b/0x680
[  967.606688][T11199]  __pmd_alloc+0xa4/0x5e0
[  967.606702][T11199]  copy_pmd_range+0x510f/0x5550
[  967.606718][T11199]  copy_page_range+0xb3f/0x1150
[  967.606738][T11199]  dup_mmap+0xf5a/0x1d70
[  967.606755][T11199]  copy_mm+0x11a/0x480
[  967.606769][T11199]  copy_process+0x1e30/0x43d0
[  967.606791][T11199]  kernel_clone+0x2d7/0x940
[  967.606805][T11199]  __x64_sys_clone+0x1b6/0x230
[  967.606821][T11199]  do_syscall_64+0x15f/0x560
[  967.606837][T11199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.606853][T11199] 
[  967.606857][T11199] Memory state around the buggy address:
[  967.606867][T11199]  ffff88803c1d8400: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  967.606879][T11199]  ffff88803c1d8480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  967.606891][T11199] >ffff88803c1d8500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  967.606900][T11199]                                   ^
[  967.606909][T11199]  ffff88803c1d8580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  967.606920][T11199]  ffff88803c1d8600: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  967.606928][T11199] ==================================================================
[  967.606967][T11199] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  967.606987][T11199] CPU: 1 UID: 0 PID: 11199 Comm: syz.0.1154 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  967.607012][T11199] Tainted: [L]=SOFTLOCKUP
[  967.607019][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  967.607028][T11199] Call Trace:
[  967.607035][T11199]  <TASK>
[  967.607042][T11199]  vpanic+0x56c/0xa60
[  967.607067][T11199]  ? __pfx_vpanic+0x10/0x10
[  967.607088][T11199]  ? __pfx___schedule+0x10/0x10
[  967.607111][T11199]  panic+0xc5/0xd0
[  967.607133][T11199]  ? __pfx_panic+0x10/0x10
[  967.607154][T11199]  ? preempt_schedule_thunk+0x16/0x40
[  967.607174][T11199]  ? clear_tfile_check_list+0x114/0x380
[  967.607195][T11199]  check_panic_on_warn+0x89/0xb0
[  967.607216][T11199]  ? clear_tfile_check_list+0x114/0x380
[  967.607236][T11199]  end_report+0x73/0x170
[  967.607257][T11199]  ? clear_tfile_check_list+0x114/0x380
[  967.607276][T11199]  kasan_report+0x128/0x150
[  967.607297][T11199]  ? clear_tfile_check_list+0x114/0x380
[  967.607320][T11199]  clear_tfile_check_list+0x114/0x380
[  967.607341][T11199]  ? clear_tfile_check_list+0x22/0x380
[  967.607362][T11199]  do_epoll_ctl_file+0x8fd/0xed0
[  967.607382][T11199]  ? do_epoll_ctl_file+0xac3/0xed0
[  967.607402][T11199]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  967.607420][T11199]  ? __fget_files+0x3a6/0x420
[  967.607436][T11199]  ? __fget_files+0x2a/0x420
[  967.607455][T11199]  __se_sys_epoll_ctl+0x14e/0x210
[  967.607476][T11199]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  967.607500][T11199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.607518][T11199]  do_syscall_64+0x15f/0x560
[  967.607536][T11199]  ? trace_irq_disable+0x3b/0x140
[  967.607552][T11199]  ? clear_bhb_loop+0x40/0x90
[  967.607580][T11199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.607596][T11199] RIP: 0033:0x7f962988ce59
[  967.607613][T11199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  967.607629][T11199] RSP: 002b:00007f9627681028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  967.607649][T11199] RAX: ffffffffffffffda RBX: 00007f9629b06270 RCX: 00007f962988ce59
[  967.607662][T11199] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000009
[  967.607672][T11199] RBP: 00007f9629922d6f R08: 0000000000000000 R09: 0000000000000000
[  967.607683][T11199] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  967.607693][T11199] R13: 00007f9629b06308 R14: 00007f9629b06270 R15: 00007ffdd8300608
[  967.607712][T11199]  </TASK>
[  967.608054][T11199] Kernel Offset: disabled