last executing test programs:

10m5.608102673s ago: executing program 32 (id=3):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x3fc, 0x0, 0x82}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

8m56.549025357s ago: executing program 33 (id=101):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@overlay={0x9, 0x2, 0x4, 0x8, 0x413, {}, {0x4, 0x0, 0x81, 0xf6, 0x28, 0x1, "7a89c908"}, 0x101, 0x3, {}, 0x2})
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
acct(0x0)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x30, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x30}}, 0x0)

7m12.646223865s ago: executing program 34 (id=235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0xc)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000004c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)

4m45.557607612s ago: executing program 4 (id=433):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x60242, 0x0)
pwritev2(r1, 0x0, 0x0, 0x4, 0xff, 0x4)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000200)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)
sendmsg$sock(r7, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000000240)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, 0x0)
symlink(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0xf1)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)

4m41.208423824s ago: executing program 4 (id=438):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="a0dd4745fa0c1955517554cbda907cbba9749fd142644285f622900ea2b9c512f35ac81cbdac5fd7f3d2eb89c9e980b5c3c8740f67e264f1025d2962b91a64dc9b8be2d6404072e9b5de9b20", @ANYRESDEC], 0x1, 0x307, &(0x7f00000016c0)="$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")
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
chroot(&(0x7f0000000000)='./bus\x00')

4m37.597137204s ago: executing program 4 (id=444):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
wait4(0x0, 0x0, 0x40000000, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f00000003c0)={@any, 0x1})
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
poll(&(0x7f0000000100)=[{r5, 0x1a0}], 0x1, 0x4)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000001c0)=0x10001)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x270, 0x1a0, 0x1a0, 0x1a0, 0xd0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@private0, @remote, [0xff000000], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x10000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)

4m26.91943429s ago: executing program 4 (id=455):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xb, 0x6, 0x1)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x27)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r5 = add_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a1c2cb00e382b0936b1b000211b", 0x87, r4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffdfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYRESHEX=r4], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})

4m24.777160046s ago: executing program 4 (id=457):
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x45e, 0x101781)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
munlock(&(0x7f0000b06000/0x1000)=nil, 0x1000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

4m20.529787219s ago: executing program 4 (id=460):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x800001ff, 0x0, 0xffdffffc}, 0xeb2a})

4m19.304681732s ago: executing program 5 (id=464):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)={[{@mb_optimize_scan}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x3, 0x45c, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
close(r4)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ac1414aa000000000000000000000000000000001fff0000000020005c000000", @ANYRES32, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c000000ffff30e21c5500000000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff4c44c5d60000000000000000000000000000000000000010000000000000000000000000000000000400000000000000001000000000000000000000000000000000000000000000000000000000008000000000020001062c00000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x20044804)

4m15.625465336s ago: executing program 5 (id=470):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6d", 0x9)
r5 = accept4(r4, 0x0, 0x0, 0x800)
recvmmsg$unix(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}}], 0x1, 0x40004041, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a0914000600626f6e64300000000000000003000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)

4m12.76387624s ago: executing program 5 (id=475):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80082)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r3=>0x0, &(0x7f00000006c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

4m8.878372566s ago: executing program 5 (id=479):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
syz_io_uring_setup(0x6dbf, &(0x7f0000000200)={0x0, 0xa439, 0x80, 0x2, 0x1f1}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB, @ANYRES8=r0], 0x4}}, 0x20008000)
sendfile(r4, r3, 0x0, 0x100000002)

4m7.583797676s ago: executing program 5 (id=482):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
fsopen(0x0, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)

4m6.471309787s ago: executing program 5 (id=485):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x2, 0x200)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)
shutdown(r2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0218000e0c000000000000000000000005001700000000000a00000000000000000000000000000000000000000000000000000000000000f8001a00ff0200000001fc0200000000000000000000000000002900"], 0x60}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000100))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0)

4m4.455168812s ago: executing program 35 (id=460):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x800001ff, 0x0, 0xffdffffc}, 0xeb2a})

4m1.790769389s ago: executing program 7 (id=493):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$igmp(0x2, 0x3, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

3m59.432095823s ago: executing program 7 (id=494):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
syz_io_uring_setup(0x6dbf, &(0x7f0000000200)={0x0, 0xa439, 0x80, 0x2, 0x1f1}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB, @ANYRES8=r0], 0x4}}, 0x20008000)
sendfile(r4, r3, 0x0, 0x100000002)

3m56.289188206s ago: executing program 7 (id=501):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3})
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
syz_emit_ethernet(0x4c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa4bac0a17a4e486dd6000000000160600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="52947181fa"], 0x0)
r6 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESOCT=r6, @ANYBLOB=',cache'])
write$cgroup_pid(r6, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000001a00)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x4, 0x2, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff0000}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x643c1cee6c57665e)
recvmsg$unix(r6, &(0x7f0000000500)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/240, 0xf0}, {0x0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001800)=""/206, 0xce}, {&(0x7f0000001900)=""/204, 0xcc}], 0x5}, 0x40)

3m52.237243656s ago: executing program 7 (id=506):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x74, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc, 0x10}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r7, 0x26, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd, r6})
r8 = socket(0xa, 0x3, 0xff)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c)
sendmmsg$inet6(r8, 0x0, 0x0, 0x4046040)
writev(r8, &(0x7f00000005c0), 0x34)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x0}, 0x20)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

3m50.858504081s ago: executing program 36 (id=485):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x2, 0x200)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)
shutdown(r2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0218000e0c000000000000000000000005001700000000000a00000000000000000000000000000000000000000000000000000000000000f8001a00ff0200000001fc0200000000000000000000000000002900"], 0x60}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000100))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0)

3m48.723096724s ago: executing program 7 (id=511):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtIxk5nEZDLHpr8fvDnve96TeZ4nJ5nzHpiTAJ5ak9mXNOJIRJxPIsbr+9OIGKj2hiLWa8c9vH91NmtJVCpv/5ZEEhEP7l+dbbxWUt+O1gdDEXH7tST+/VFr3OXVtcWZcrm0VB8fX7l45fjy6torCxdnLpQulC6dmn711PTp6eku1nr3yntfPPPDG89fv/nx1JufH/ouibMxVp9rrqNbJmNy42fSrBARM90OlpO+ej3NdSaFHBMCAKCjtGkN998Yj754vHgbj29/zDU5AAAAoCsqfREVAAAA4IBL3P8DAADAAdf4HMCD+1dnGy3fTyT01r1zETFRq7/xfHNtphDr1e1Q9EfEyO9JND/WmtS+bc8ms0hff1/KWmz3HPJwFwJusn4tIv6/1flPqvVPVJ/ibq0/jYipLsSf3DTu9e/fXuo/24X4edcPwNPp1rnahaz1+pfW1j+DtdHm619hi2vXbuR9/Wus/x62rP/SjfVfX5v131s7jHH00Uu32801r//e/eTnuSx+tt1TUX/DvWsRRwtb1Z9s1J+0qf/8DmOMzt690W4uqz+rt9F6XX/lZsSx6mqutf6GpNP/Jzo+v1AuTdW+bvH6q6c7x28+/1nL4jfuBXohO/8jsbvzf2WHMSb+9+uRdnPb15/+MpC8U+0N1Pd8OLOysnQiYiB5vXX/yc65NI5pvEZW/4vPdf7736r+7D1hvf5zyH57rtW32fj6ppijx05+tfv691dW/9wuz/+nO4zx5Tc33m83l3f9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwZ0ogYiyQtbvTTtFiMGI2I/8RIWr68vPLy/OUPLs1lcxET0Z/OL5RLUxExXhsn2fhEtf94fHLTeDoiDkfEZ+PD1XFx9nJ5Lu/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2DAaEWORpMWISCPij/E0LRbzzgoAAADouom8EwAAAAD2nft/AAAAOPha7v8LfxkN9TIXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqTDz966k0TE+pnhassM1Of6c80M2G/pzg4b2e88gN7ryzsBIDeFpn6lUqnkmArQY+7xgWSb+aG2M4NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf64Xjty6k0TE+pnhassM1Of6c80M2G9p3gkAuenrNJlsuwN4ghXyTgDIjXt8oLayf1SpaZ0favudg3uOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTY6zakrQYEWm1n6bFYsS/ImIi+pP5hXJpKiIORcRP4/2D2fhE3kkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQdcura4sz5XJpSUdHp4ud4ehZrOH6H3ObYwbbT3Xo5PzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALpZX1xZnyuXS0nLemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5W15dW5wpl0tL+9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzZwAAAP//0L4Jug==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000b00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x8000)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4b3, &(0x7f0000000580)="$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")
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000001b00)=""/245, &(0x7f0000000000)=0xf5)

3m46.787285611s ago: executing program 7 (id=514):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc})
openat$cgroup_procs(r3, 0x0, 0x2, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0xfffffffffffffffd})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
r9 = syz_io_uring_setup(0x245e, &(0x7f0000000840)={0x0, 0xdfef, 0x10100, 0x0, 0x40388}, &(0x7f0000000380)=<r10=>0x0, &(0x7f0000002100)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0)

3m31.537251946s ago: executing program 37 (id=514):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc})
openat$cgroup_procs(r3, 0x0, 0x2, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0xfffffffffffffffd})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
r9 = syz_io_uring_setup(0x245e, &(0x7f0000000840)={0x0, 0xdfef, 0x10100, 0x0, 0x40388}, &(0x7f0000000380)=<r10=>0x0, &(0x7f0000002100)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0)

1m48.093848488s ago: executing program 1 (id=651):
syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24000840}, 0x40014)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffd, 0x7b, 0x5f, @buffer={0x0, 0xfb, &(0x7f0000000800)=""/251}, &(0x7f0000000a00)="1d62c413067c8ae1575526c9039cbff077eb2d253c598ae0f927743f7a6bfb4d9c40b261a76896b3066f0f63ff04873c71cb528627e95b1080c6f99e38c2f8002c23c4dbe14d2ca83b42b4020c5cb70b092f9f4b859b675b84738aaa7f855c18e7a604ced5b00034e3ee074462234b664b81fd765495d2374a024b", 0x0, 0xdf7a, 0x10002, 0x3, &(0x7f00000006c0)})
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
munlock(&(0x7f00007a7000/0x2000)=nil, 0x2000)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
fallocate(r4, 0x0, 0x2000000, 0x2c2)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe0000000)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000c80)={0x1, @bcast, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null]})
ioctl$SIOCRSSCAUSE(r5, 0x89e1, 0x0)
r6 = fcntl$dupfd(r1, 0x0, r4)
mmap$xdp(&(0x7f000064c000/0x2000)=nil, 0x2000, 0x2000001, 0x100010, r6, 0x100000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010028bd7000000000000a0000000082000900"], 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050)

1m45.004042437s ago: executing program 1 (id=656):
open(&(0x7f0000000240)='./bus\x00', 0x141b42, 0x0)
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x913e)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x4040)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@quota}]}, 0x1, 0x43d, &(0x7f0000000700)="$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")
setreuid(0xee01, 0xee01)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r8, 0x0, 0x0)
listen(r8, 0x90004)
ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000580)={0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c})
close_range(r1, 0xffffffffffffffff, 0x0)

1m41.595876447s ago: executing program 1 (id=658):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r6, 0x0, 0x20000023896)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xc100, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r7)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x28, r8, 0x1, 0x70bd35, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x3}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m39.527881832s ago: executing program 1 (id=659):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
io_setup(0x490, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
io_pgetevents(r3, 0xa5df, 0x80000000000002f, 0xfffffffffffffffe, 0x0, 0x0)
r5 = fanotify_init(0x20, 0x0)
writev(r5, &(0x7f0000000500)=[{&(0x7f0000000080)="88", 0x8}, {0x0}], 0x2)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000040), 0x4001)
io_submit(r3, 0x1, &(0x7f0000001880)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x5, r4, 0x0, 0x0, 0x8}])
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)
timer_settime(r7, 0x1, &(0x7f0000000200), &(0x7f0000000240))
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xc388)

1m37.966281326s ago: executing program 1 (id=661):
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0}, 0x18)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6)
unshare(0x22020600)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getcwd(0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]})
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
socket$inet(0x2, 0x3, 0x6)

1m35.546979126s ago: executing program 1 (id=662):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0xc)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000004c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0xf)
capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2)

1m19.740656543s ago: executing program 38 (id=662):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0xc)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000004c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0xf)
capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2)

38.745370494s ago: executing program 0 (id=703):
socket(0x2000000015, 0x80005, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1510c2, 0x11)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
pread64(r4, 0x0, 0x0, 0x78f2a36b)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000300)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xd, 0xf, &(0x7f0000002140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x186, 0x0, 0x0, 0x0, 0xa0c}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x93}, @generic={0x0, 0x8, 0x0, 0x4}, @ldst={0x2, 0x2, 0x4, 0x4, 0xa, 0x80, 0x10}, @jmp={0x5, 0x1, 0x6, 0x0, 0x1, 0x50, 0x4}, @generic={0xf, 0x9, 0x4, 0x2, 0x2}], &(0x7f0000001e80)='syzkaller\x00', 0x10000, 0x1b, &(0x7f0000002080)=""/27, 0x41000, 0x21, '\x00', 0x0, @sock_ops, r2, 0x8, &(0x7f00000023c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x0, 0xd, 0x6, 0x7ff}, 0x10, 0x0, r3, 0x0, &(0x7f0000002500)=[r2, r2, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0xd}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002700)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@audit}, {@smackfshat={'smackfshat', 0x3d, '/dev/fuse\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/ptmx\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/fuse\x00'}}, {@euid_lt}, {@obj_type={'obj_type', 0x3d, '/dev/dri/card#\x00'}}]}})
write$FUSE_INIT(r2, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

34.681831758s ago: executing program 0 (id=707):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x2be, &(0x7f0000000140)={0x0, 0x978, 0x80, 0x2, 0x1000111}, &(0x7f00000001c0)=<r0=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r1 = io_uring_setup(0x549d, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac14"], 0x14)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc989, 0x0, 0x1, 0x274, 0x0, r1}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
io_uring_enter(r4, 0x4e14, 0x912a, 0x41, 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0)
r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='+oet '], 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r7, &(0x7f0000002600)=[{0x0}], 0x1)

29.966813454s ago: executing program 8 (id=712):
r0 = socket$pppoe(0x18, 0x1, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$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")
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000001340), 0x0, 0x24048084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x60}}, 0xc0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9)
getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000080))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=")
ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

29.728720766s ago: executing program 0 (id=713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
close(r5)

29.665961894s ago: executing program 3 (id=715):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @empty, 0x1}, 0x1c)
listen(r0, 0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c)
r6 = dup(r5)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
write$eventfd(r6, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6)
close_range(r4, 0xffffffffffffffff, 0x0)

28.421480946s ago: executing program 0 (id=716):
r0 = open(&(0x7f0000000180)='./file0\x00', 0x102, 0x9e)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x10002000})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
recvmmsg(r1, &(0x7f0000001400), 0x0, 0x2100, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(r4, 0x0)
getdents(r6, &(0x7f0000000040)=""/227, 0xe3)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000440)={@local, 0x1})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), 0x0, &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0)
r8 = syz_open_procfs(r3, &(0x7f00000062c0)='smaps\x00')
read$FUSE(r8, &(0x7f0000004280)={0x2020}, 0x2020)

27.088150247s ago: executing program 3 (id=718):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0xb, &(0x7f0000000740)={0x0, 0x5884, 0x10100, 0x3, 0x32, 0x0, r2}, &(0x7f0000000600)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x1685, 0x4000, 0x5, 0x0, 0x0)
r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r6, &(0x7f0000000700)=[{&(0x7f0000000200)=""/103, 0x67}], 0x1)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x8, 0x1, 0xa, 0xffffffffffff8005, 0x3], 0x1, 0x0, 0x0, [{}]}, 0x88)
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$caif_seqpacket(0x25, 0x5, 0x3)
ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x5, 0xf03, 0xffff, 0x10100, 0xffffffffffffffff, 0x1b3e7c4b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50)
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
close(r8)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
mount$9p_fd(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0)
read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x2020)
timer_create(0x2, 0x0, &(0x7f0000bbdffc)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@debug}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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")

25.16183958s ago: executing program 8 (id=719):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0x13}, 0x2c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r4 = socket(0x200000000000011, 0x2, 0xd)
getsockopt$packet_int(r4, 0x107, 0xe, 0x0, &(0x7f00000000c0))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"})
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000)
pread64(r5, &(0x7f0000000100)=""/48, 0x30, 0x20000000000040)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x0, 0x2}, 0x18)

25.157014443s ago: executing program 0 (id=730):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r5, &(0x7f0000004280)={0x2020, 0x0, <r6=>0x0}, 0xffe7)
syz_fuse_handle_req(r5, 0x0, 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0xff, 0x2, 0x0, 0x0, 0x100}}, 0x50)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close_range(r4, r5, 0x0)
read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)

23.377864007s ago: executing program 2 (id=720):
socket(0x2000000015, 0x80005, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1510c2, 0x11)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
pread64(r4, 0x0, 0x0, 0x78f2a36b)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000300)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xd, 0xf, &(0x7f0000002140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x186, 0x0, 0x0, 0x0, 0xa0c}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x93}, @generic={0x0, 0x8, 0x0, 0x4}, @ldst={0x2, 0x2, 0x4, 0x4, 0xa, 0x80, 0x10}, @jmp={0x5, 0x1, 0x6, 0x0, 0x1, 0x50, 0x4}, @generic={0xf, 0x9, 0x4, 0x2, 0x2}], &(0x7f0000001e80)='syzkaller\x00', 0x10000, 0x1b, &(0x7f0000002080)=""/27, 0x41000, 0x21, '\x00', 0x0, @sock_ops, r2, 0x8, &(0x7f00000023c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x0, 0xd, 0x6, 0x7ff}, 0x10, 0x0, r3, 0x0, &(0x7f0000002500)=[r2, r2, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0xd}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002700)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@audit}, {@smackfshat={'smackfshat', 0x3d, '/dev/fuse\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/ptmx\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/fuse\x00'}}, {@euid_lt}, {@obj_type={'obj_type', 0x3d, '/dev/dri/card#\x00'}}]}})
write$FUSE_INIT(r2, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

22.293353376s ago: executing program 0 (id=722):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3})
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
r6 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESOCT=r6, @ANYBLOB=',cache'])
write$cgroup_pid(r6, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000001a00)={0x60, r8, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x4, 0x2, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff0000}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x643c1cee6c57665e)
recvmsg$unix(r6, &(0x7f0000000500)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/240, 0xf0}, {0x0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001800)=""/206, 0xce}, {&(0x7f0000001900)=""/204, 0xcc}], 0x5}, 0x40)

22.224920918s ago: executing program 9 (id=488):
r0 = socket$netlink(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000002216a10844cf4c39879d2824e26c8d0dec68a9988f77dadda82e"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_enter(r6, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
shutdown(r7, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000780)=ANY=[@ANYBLOB='allow_utime=00000000000000000001777,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errorsTcontinue,errors=continue,iocharset=iso8859-9,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c7530423030303030303031303030303030322c757466382c000000000000000000008b336403b96de83683bb09c7f90a25c6be1daa424f4b2ed609c35a51a0f51ad25dbd49d44fb9371a4e7a1cd52bf28355d91ea3356b1bfa34c15d60aafc95e54a1b399d59eb5c5ad939023b5bcee1f866b10aca7efb95aa098340deadc7edad8f0a8376ab21b3e833ceb8223d518314fda36f5635dd6c013654017501d396e7ebfc45b089a26f76467480c23ece37be6ec1cd23eadd818556932d9c911272a8"], 0x1, 0x152d, &(0x7f0000001f80)="$eJzs3AuYTtUaOPD3XWvtMSS+JrkMa6138yWXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSXLLLVn/Z8Lf6dT5dy79j/OceX/Psx/rtfZa+93f+13W3jPzfddlSK3Gtas3JCL4t+CFf5IAIBYABgBAXgAIAKB8XPm4rP6cEpP+vYOwP9dDqVc6A3Ylcf2zN65/9sb1z964/tkb1z974/pnb1z/7I3rz1h2tnFqoWt4y74b3//Pzvjz/39IZpkxX60uc11XgJh/dAjXP3vj+v/PCv6Rnbj+2RvXP7uKvdIJsP8C/PrPDnL83R6uf/bG9WcsO7vS95+v9AaR/7LH4HDOC4X5T50/Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH2H3DaX6YA4FL7SufFGGOMMcYYY4yxP4/PcaUzYIwxxhhjjDHG2P9/CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgP7ocHoAE8CA3hIWgED0NjeASawKPQFJpBc2gBLf+l8S9AD3gRekIvSILe0Adegr7QD/rDyzAAXoGB8CoMgtcgGQbDEHgdhsIbMAzehOEwAkbCWzAK3obRMAbGwjhIgfEwAd6BifAuTIL3YDJMgVSYCtPgfZgOM2AmfACz4EOYDXNgLsyDNPgI5sMCSIePYSF8AhmwCBbDElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDt8CjvgM9gJu2A3fA574It/cvypvxnfFQEBBQpUqDAGYzAWYzEX5sLcmBvzYB6MYATjMA7zYT7Mj/mxIBbEeIzHIlgEDRokJCyKRTGKUSyOxbEElsBSWAodOkzABCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2rY3WsgTWwFtbCu/Au7I11sS7Ww3pYH+tfuj2FDbEhNsJG2BgbYxNsgk2xKTbH5tgSW2IrbIWtsTW2xbbYDtthe2yPiZiIHbADdsSO2Ak7YWfsjF2wC3bFbtgt84UcgC/ii9gLa4je2Af7YF9MztEfX8aX8RUciK/iq/gaJuNgHIKv4+v4Bg7DkzgcR+BIHIlVxds4GscgiXGYgik4ASfgRJyIWYm+h1MwFafiNJyG03EGzsAPcBZ+iB/iHJyD8zAN03A+LsB0TMeFeAozcBEuxiW4FJfhUlyBK3EFrsY1uBrX4TrcgBtwE27CLbgFt+E2/BQVAH6Gu3AXJuMe3IN7cS/uw324H/djJmbiATyAB/EgHsJDeBgP4xE8isfwKJ7AE3gST+FpPI1n8Syew+fiv2n0aclVySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBP5RD6RX+QXBUVBES/iRRFRRBhhBIkwBgBEVERFcVFclBAlRClRSjjhRIJIEGVFWVFOlBPlxS2igrhVVBSVRBtXRVQRVUVbV03cIaqL6qKGqClqidqitqgj6oi6oq6oJ+qJ+qK+uF88IBqI3tgfHxJZlWksBmMTMQSbimZCXnwHayWGYWvRRrQVT4gROBzbi1YuUTwtOojR2FH8RYzBZ0VnMQ67iOdFV9FNdBcviB6itespeolJ2Fv0EVOwr+gn+ouXxXSsKT7AWTlriddEshgshojXxTx8QwwTb4rhYoQYKd4So8TbYrQYI8aKcSJFjBcTxDtionhXTBLvicliikgVU8U08b6YLmaImeIDMUt8KGaLOWKumCfSxEdivlgg0sXHYqH4RGSIRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is4iFrWKb2C4+FTvEZ2Kn2CV2i8/FHvGF2Cu+FPvEV2K/+Fpkim/EAfGtOCi+E4fE9+Kw+EEcEUfFMXFcnBA/ipPilDgtzoiz4idxTvwszgsvQKIUUkolAxkjc8hYmVPmklfJ3DK4+OheI+PktTKfvE7mlwVkQVlIxsvCsojU0kgrSYayqCwmo/J6WVzeIEvIkrKULC2dLCMT5I2yrLxJlpM3y/LyFllB3iorykqysqwib5NV5e0SIheOUUPWlLVkbXmXTIK7ZV15j6wn75X15X3yfvmAbCAflA3lQ7KRfFg2lo/IJvJR2VQ2k81lC9lSPiZbycdla9lGtpVPyHbySdlePiUT5dOyg/QXnyLPys7yOdlFPi+7ym6yu/xZnpde9pS9JPQG2Ue+JPvKfrJ/LADIV+RA+aocJF+TyXKwHCJfl0PlG3KYfFMOlyPkSPmWHCXflqPlGDlWjpMpcrycIN+RE+W7cpJ8T06WU2SqnCr7ywG/zDRTyj8c/87vjB/0y9E3yI1yk9wst8itcpvcLj+VO+QOuVPulLvlbrlH7pF75V65T+6T++V+mSkz5QF5QB6UB+UheUgeloflEXlUnpHH5Qn5ozwpT8lT8ow8K8/KcxcfA1CohJJKqUDFqBwqVuVUudRVKre6WuVReVVEXaPi1LUqn7pO5VcFVEFVSMWrwqqI0sooq0iFqqgqpqLqerz4hFGlVGnlVBmVoG78Z8ar4uoGVUKV/NX4S/kl/Z38WqqWqpVqpVqr1qqtaqvaqXaqvWqvElWi6qA6qI6qo+qkOqnOqrPqorqorqqr6q66qx6qh+qpeqoklaT6qJdUX9VP9VcvqwHqFTVQDVSD1CCVrJLVEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVYpKURPUBDVRTVST1CQ1WU1WqSpVTVPT1HQ1Xc1UM9UsNUvNVrPVXDVXpak0NV/NV+kqXS1UC1WGWqQWqSVqiVqmlqkVaoVapVapNWqNWqfWqQy1UW1Um9VmtVVtVdvVdrVD7VA7xU61W+1We9QetVftVfvUPrVf7VeZKlMdUAfUQXVQHVKH1GF1WB1RR9QxdUydUCfUSXVSnVan1Vl1Vp1T59R5dT5r2ReIQAQqUEFMEBPEBrFBriBXkDvIHeQJ8gSRIBLEBXFBvuC6IH9QICgYFArig8JBkUAHJrCBuFj0aHB9UDy4ISgRlAxKBaUDF5QJEoIbg7LBTUG54OagfHBLUCG4NagYVAoqB1WC24Kqwe1BteCOoHpwZ1AjqBnUCmoHdwV1gruDusE9Qb3g3qB+cF9wf/BA0CB4MGgYPBQ0Ch4OGgePBE2CR4OmQbOgedAiaPmnzu/9yQKPu566l07SvXUf/ZLuq/vp/vplPUC/ogfqV/Ug/ZpO1oP1EP26Hqrf0MP0m3q4HqFH6rf0KP22Hq3H6LF6nE7R4/UE/Y6eqN/Vk/R7erKeolP1VD1Nv6+n6xl6pv5Az9If6tl6jp6r5+k0/ZGerxfodP2xXqg/0Rl6kV6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1Tv0Z3qn3qV368/1Hv2F3qu/1Pv0V3q//lpn6m/0Af2tPqi/04f09/qw/kEf0Uf1MX1cn9A/6pP6lD6tz+iz+id9Tv+sz2uftbjP+ng3yigTY2JMrIk1uUwuk9vkNnlMHhMxERNn4kw+k8/kN/lNQVPQxJt4U8QUMVnIkClqipqoiZriprgpYUqYUqaUccaZBJNgypqyppwpZ8qb8qaCqWAqmoqmsqlsbjO3mdvN7eYOc4e509xpapqaprapbeqYOqauqWvqmXqmvqlv7jf3mwamgWloGppGppFpbBqbJqaJaWqamuamuWlpWppWppVpbVqbtqataWfamfamvUk0iaaD6WA6mo6mk+lkOpvOpovpYrqarqa76W56mB6mp+lpkkyS6WP6mL6mr+lv+psBZoAZaAaaQWaQSTbJZogZYoaaoWaYGWaGmxFmZNZC1bxtRpsxZqwZZ1JMiplgJpiJZqKZZCaZyWaySTWpZpqZZqab6WammWlmmVlmtplt5pq5Js2kmflmvkk36WahWWgyTIZZbBabpWapWW6Wm5VmpVltVpu1sNasN+vNRrPRbDabzVaz1Ww3280Os8PsNDvNbrPb7DF7zF6z1+wz+8x+s99kmkxzwBwwB81Bc8gcMofNYXPEHDHHzDFzwpwwJ81Jc9qcNmdNgYufl97E2pw2l73K5rZX2zw2r/3buKAtZONtYVvEapvfFvhVbKy1JWxJW8qWts6WsQn2xt/EFW0lW9lWsbfZqvZ2W+03cR17t61r77H17L22tr3rV3F9e5/NWp00QASwzWwj28I2to/YJvZR29Q2s81tC9vOPmnb26dson3adrDP/CaebxfYlXaVXW3X2J12lz1tz9iD9jt71v5ke9pedoB9xQ60r9pB9jWbbAf/Jh5p37Kj7Nt2tB1jx9pxv4kn2yk21U610+z7drqd8Zs4zX5kZ9l0O9vOsXPtvF/irJzS7cd2of3EZtgAFtsldqldZpfbFZdy9XntOrvebrA77Gd2s91it9ptdvulhbDdZXfbz+0e+4U9YL+1++xXdr89ZDPtN7/EWed3yH5vD9sf7BF71B6zx+0J+6O6NDrr3I/bn+156y0QEpAkRQHFUA6KpZyUi66i3HQ15aG8FKFrKI6upXx0HeWnAlSQClE8FaYipMmQJaKQilIxitL1dCm9UlSaHJWhBLqRytJNVI5upvJ0C1WgW6kiVaLKVIVuo6p0O1WjO6g63Uk1qCbVotp0F9Whu6ku3UP16F6qT/fR/fQANaAHqSE9RI3oYWpMj1ATepSaUjNqTi2oJT1Grehxak1tqC09Qe3oSWpPT1EiPU0d6BnqSH+hTvQsdabnqAs9T12pG3WnF6gHvUg9qRclUW/qQy9RX+pH/ellGkCv0EB6lQbRa5RMg2kIvU5D6Q0aRm/ScBpBI+ktGkVv02gaQ2NpHKXQeJpA79BEepcm0Xs0maZQKk2lafQ+TacZNJM+oFn0Ic2mOTSX5lEafUTzaQGl08e0kD6hDFpEi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6lHfQZ7aRdtJs+pz30BSF9SfvoK9pPX1MmfUMH6Fs6SN/RIfre96If6AgdpWN0nE7Qj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBHGhjnDXOFVYe7w6jBPmDeMhNeEceG1Yb7wujB/WCAsGBYK48PCYZFQhya0IYVhWDQsFkbD68Pi4Q1hibBkWCosHbqwTJgQ3hiWDW8Ky4U3h+XDW8IK4a1hxbBS+Mi9VcLbwqrh7WG18I6wenhnWCOsGdYKa4d3hXXCu8O64T1hvfDesFx4X3h/+EDYIHwwbBg+FDYKHw4bh4+ETcJHw6Zhs7B52CJsGT4WtgofD1uHbcK24RNhu/DJsH34VJgYPh12CJ/5pf++BX+/PynsHfYJXwpfCr2/R86NzoumRT+Kzo8uiKZHP44ujH4SzYguii6OLokujS6LLo+uiK6Mroqujq6Jro2ui66Pboh6XzsHOHTCSadc4GJcDhfrcrpc7iqX213t8ri8LuKucXHuWpfPXefyuwKuoCvk4l1hV8RpZ5x15EJX1BVzUXe9K+5ucCVcSVfKlXbOlXEJroVr6Vq6Vu5x19q1cW3dE+4J96R70j3lnnJPuw7uGdfR/cV1cs+6zu4595x73nV13Vx394Lr4cbnufCaTHJ9XB/X1/V1/V1/N8ANcAPdQDfIDXLJLtkNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbgUN8FNcBPdRDfJTXKT3WSX6lLdNDfNTXfTXdUZF44y2812c91cl+bS3HyXtWZMdwvdQpfhMtxit9gtdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9xOn/fCpG6P2+v2un1un9vvvnaZ7ht3wH3rDrrv3CH3vTvsfnBH3FF3zB13J9yP7qQ75U67M+6s+8mdcz+78867lMj4yITIO5GJkXcjkyLvRSZHpkRSI1Mj0yLvR6ZHZkRmRj6IzIp8GJkdmROZG5kXSYt8FJkfWRBJj3wcWRj5JJIRWRRZHFkSWRpZFvG+8ObQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+qa+mW/uW/iW/jHfyj/uW/s2vq1/wrfzT/r2/imf6J/2HfwzvqP/i+/kn/Wd/XO+i3/ed/XdfHf/gu/hX/Q9fS+f5Hv7Pv4l39f38/39y36Af8UP9K/6Qf41n+wH+yH+dT/Uv+GH+Tf9cD/Cj4x5y4+6dIkM43yKH+8n+Hf8RP+un+Tf85P9FJ/qp/pp/n0/3c/wM/0Hfpb/0M/2c/xcP8+n+Y/8fL/Ap/uP/UL/ic/wiy7dVPbL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/z2/2nfof/zO/0u/xu/7nf47/we/2Xfp//yu/3X/tM/40/4L/1B/13/pD/3h/2P/gj/qg/5o/7E/5Hf9Kf8qf9GX/W/+TP+Z/9ef6bNcYYY4yxf8j4y03x654Lt/N7/84Y8Vc79wGAq7cUyvzr/qwV5dr8F9r9RHy7CAA83avLQ5e2GjWSkpIu7pshISg2B+DST4KyxMDleBG0hSchEdpA2d/Nv5/odpb+YP7oLQC5/mpMLFyOL8//JQAm/c78jz0xcn6F8HTc/2P+OQAlil0ekxMux4ug7S/3V9pAub+Tf4FWf5B/zq9SAFr/1ZjccDm+nH8CPA7PQOKv9mSMMcYYY4wxxi7oJyp3unT9eek3Pn/v+jxeXR6TAy7Hf3R9zhhjjDHGGGOMsSvv2W7dn3osMbFNp3++Ue2P91H/2sy/NJrAv5oYN/6lhvcA/7dwAPBvTgiQ1ZD/ybPY9B85VvLFl87fdi094wP47yjln9G4wm9MjDHGGGOMsT/d5UX/r/9fXamEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxbOjf/Y43+Ae+pe9KnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2pf2fAAAA//+Bqfni")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r8, 0x5425, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, 0x0)
ioctl$TCSETSW2(r9, 0x5408, &(0x7f0000000240)={0x6c99, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r8, 0x5437, 0x0)

20.137057822s ago: executing program 9 (id=723):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$igmp(0x2, 0x3, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

20.043000865s ago: executing program 3 (id=724):
socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x25, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808)
syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000900)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000844)
shutdown(r2, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x11a48e442ac74de4}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x800003, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x80000000, 0xc, 0xff, 0xffff, 0xffffffff, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dc, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x200, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x100, 0x7, 0x2, 0x32, 0x9, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x5d41, 0x1, 0x4, 0x0, 0xb, 0x7, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0x8, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0x6, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0xd, 0x2, 0x1, 0x9, 0x0, 0xf, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x1000, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x488}, 0x1, 0x0, 0x0, 0xc0c3}, 0x800)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)

19.985603417s ago: executing program 2 (id=725):
r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x5, 0x388}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCSETSW2(r3, 0x402c542c, 0x0)
io_uring_setup(0x3ef, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4000000)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1})

17.945616971s ago: executing program 9 (id=726):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x20044000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7)
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0xf17, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000007c0)={@void, @val={0x2, 0x4, 0x8, 0x4, 0xfff, 0xc}, @x25={0x3, 0xc, 0xf1, "416f0e7b5274246d595d5703f0e565"}}, 0x1c)

16.404008623s ago: executing program 6 (id=727):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r7}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x38dc68d3d6e0aeb0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, &(0x7f0000003780))
timer_create(0x3, &(0x7f0000000140)={0x0, 0x2e, 0x2, @thr={&(0x7f0000000080)="86d6a9f135832f72517903001729aa125aa5cee17480a102b9426b30f58c659b9a5103", 0x0}}, 0x0)

15.494363926s ago: executing program 3 (id=728):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001480)={'wg2\x00'})
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1281013, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@nobarrier}, {@nobarrier}, {@noblock_validity}, {@nobarrier}, {@acl}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@sb={'sb', 0x3d, 0xc6}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10000}}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x4}}]}, 0x1, 0x56c, &(0x7f0000000700)="$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")
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x3bd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3, 0x4, 0xfffff801, 0x3, 0xba1, <r2=>0xffffffffffffffff})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
r5 = msgget$private(0x0, 0x100)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
msgsnd(r5, 0x0, 0xfd1, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
syz_mount_image$squashfs(&(0x7f0000000400), &(0x7f0000000200)='./file0\x00', 0x3004000, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x2, 0x198, &(0x7f0000000240)="$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")
r7 = request_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080)='].\x00', 0xffffffffffffffff)
request_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, r7)
cachestat(r1, 0x0, 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x1000}, 0x10)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)

15.493788119s ago: executing program 9 (id=729):
r0 = socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x3, @vifc_lcl_ifindex, @multicast2}, 0x10)
mmap(&(0x7f0000e86000/0x1000)=nil, 0x1000, 0x100000a, 0x4010, 0xffffffffffffffff, 0xd03b8000)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140))
fcntl$getown(r2, 0x9)
r3 = syz_clone(0x24008000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000e85000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_open_procfs(r4, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x0, 0x1, 0x102, 0x0, @local, @loopback, 0x7, 0x8, 0x0, 0x6}})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32, @ANYBLOB="000002040000000000000000000000000000001218", @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x27, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r10, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

15.493423529s ago: executing program 2 (id=731):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001b00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$evdev(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x5)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4)
execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00')
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x4}, 0xc)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0)

14.388924557s ago: executing program 6 (id=732):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)
sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840)
mkdirat(0xffffffffffffff9c, 0x0, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r8, 0x4b46, 0x0)
r9 = syz_open_dev$evdev(0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x28, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x4)
ioctl$EVIOCREVOKE(r9, 0x40044591, 0x0)

13.257266347s ago: executing program 2 (id=733):
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f00000002c0)="d2ff03", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r4 = gettid()
r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, 0x0, &(0x7f00000001c0))
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})

11.521072865s ago: executing program 6 (id=734):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20240, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000004b40)=@newlink={0x60, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x440, 0x80}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x400000000000000}, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
write$uinput_user_dev(r5, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)

10.208723388s ago: executing program 3 (id=735):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x6fe, &(0x7f0000000b00)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffddf)
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
eventfd2(0x97, 0x80000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sched_switch\x00', r4}, 0x18)
pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
r5 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0)
dup3(r5, r0, 0x0)
finit_module(r5, 0x0, 0x0)
unshare(0x22020600)
creat(&(0x7f0000000580)='./file1\x00', 0x0)
setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1)
socket$netlink(0x10, 0x3, 0xc)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8993, 0x0)

10.207759678s ago: executing program 8 (id=737):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x88)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, 0x0)
setitimer(0x0, 0x0, 0x0)
alarm(0x38)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000780)={[], [{@smackfshat}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, '('}}, {@context={'context', 0x3d, 'staff_u'}}, {@dont_hash}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_gt}, {@euid_eq}]}, 0x0, 0x47a, &(0x7f0000000180)="$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")
chdir(0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)

8.518011559s ago: executing program 8 (id=738):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040)={0x6}, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
poll(&(0x7f0000000040), 0x0, 0x7)
r5 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000080)={0x3, 0x2b4}, 0x0)
landlock_restrict_self(r5, 0x0)

5.456128781s ago: executing program 39 (id=722):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3})
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
r6 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESOCT=r6, @ANYBLOB=',cache'])
write$cgroup_pid(r6, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000001a00)={0x60, r8, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x4, 0x2, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff0000}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x643c1cee6c57665e)
recvmsg$unix(r6, &(0x7f0000000500)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/240, 0xf0}, {0x0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001800)=""/206, 0xce}, {&(0x7f0000001900)=""/204, 0xcc}], 0x5}, 0x40)

5.443103243s ago: executing program 3 (id=740):
mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
connect$inet6(r2, 0x0, 0x0)
fcntl$dupfd(r2, 0x406, r2)
ioctl$sock_proto_private(r2, 0x89ef, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x464, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r5 = dup(r0)
ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140))
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000040))
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

5.439079193s ago: executing program 6 (id=741):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
dup3(r3, r6, 0x80000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18)
syz_emit_ethernet(0xfed7, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r7, 0x4bfb, &(0x7f0000000440)=""/252)

5.437148983s ago: executing program 2 (id=742):
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x97dc, 0x200003, 0x43, 0x7, 0x7})
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400"], 0x138}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key$user(&(0x7f0000000380), 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000001200)="6f295a458d2703fad8f1ae70bcd64b0f6f92271f976cfc73c7afc9", 0x1b, 0x0)
r6 = add_key$user(0x0, 0x0, &(0x7f00000029c0)="3e12d23d346ca27b24373068a623cf4d09883fd70bf099c1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6dfb55ae6f1229bcf13ecfd7a597f44c812df9be8e35d8d15086609c033a5d2a42d5dcb0d90309", 0xb5, 0xfffffffffffffffe)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603})
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2(0x0, 0x80000)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)

3.846496224s ago: executing program 6 (id=743):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndpcmp(0x0, 0x0, 0x62302)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
rmdir(&(0x7f0000000080)='./file0\x00')
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x81)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x2)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
close(r5)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)

3.389332787s ago: executing program 8 (id=744):
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0406"], 0x7)
chmod(0x0, 0x42)
mount$bpf(0x0, 0x0, 0x0, 0x20000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x100)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x179)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9f, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4)
sendto$unix(r5, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.240866359s ago: executing program 6 (id=745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
syz_open_dev$video(0x0, 0x7, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x5)
fchdir(r6)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, 0x0)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x231, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c31e2, 0x0)
io_setup(0x20fe, &(0x7f0000000540)=<r7=>0x0)
io_submit(r7, 0x0, 0x0)

97.381749ms ago: executing program 8 (id=746):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
wait4(0x0, 0x0, 0x40000000, 0x0)
ptrace(0x10, 0x0)
wait4(0x0, 0x0, 0xa0000009, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000400)={{0x3a, @broadcast, 0x4e24, 0x1, 'lblc\x00', 0xb, 0x0, 0x1c}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x2, 0x8, 0x2, 0x53cc}}, 0x44)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f00000003c0)={@any, 0x1})
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f045})
poll(&(0x7f0000000100)=[{r6, 0x6086}, {r6, 0x1a0}], 0x2, 0x4)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000001c0)=0x10001)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000040)=0x10000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010)

5.470872ms ago: executing program 40 (id=729):
r0 = socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x3, @vifc_lcl_ifindex, @multicast2}, 0x10)
mmap(&(0x7f0000e86000/0x1000)=nil, 0x1000, 0x100000a, 0x4010, 0xffffffffffffffff, 0xd03b8000)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140))
fcntl$getown(r2, 0x9)
r3 = syz_clone(0x24008000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000e85000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_open_procfs(r4, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x0, 0x1, 0x102, 0x0, @local, @loopback, 0x7, 0x8, 0x0, 0x6}})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32, @ANYBLOB="000002040000000000000000000000000000001218", @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x27, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r10, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

0s ago: executing program 2 (id=748):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r1, &(0x7f0000000000), 0x0)
r2 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f0000000a40)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000c7bbdacdc3de167f4d75185ed5e3020632ff718900c5ba9728377ddc9d0108000000000000000000000020140007800800114000000000070015010006000000050005000a00000005"], 0x54}}, 0x0)
close(r5)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001000000000000000000140003002001"], 0x114}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
splice(r0, 0x0, r8, 0x0, 0x25a5, 0x79ddedc66174786)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x12)
accept4$alg(r0, 0x0, 0x0, 0x80000)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18)
connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10}, 0x18)
sendmmsg(r9, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2}}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):


[  401.618976][    C1] F2FS-fs (loop7): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  401.635044][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.635081][    C1] Tainted: [L]=SOFTLOCKUP
[  401.635090][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  401.635104][    C1] Call Trace:
[  401.635114][    C1]  <TASK>
[  401.635123][    C1]  dump_stack_lvl+0x189/0x250
[  401.635163][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  401.635193][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  401.635220][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  401.635252][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  401.635292][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  401.635340][    C1]  f2fs_write_end_io+0x886/0xb60
[  401.635388][    C1]  blk_update_request+0x57e/0xe60
[  401.635439][    C1]  blk_mq_end_request+0x3e/0x70
[  401.635476][    C1]  blk_done_softirq+0x10a/0x160
[  401.635512][    C1]  handle_softirqs+0x27d/0x850
[  401.635543][    C1]  ? run_ksoftirqd+0x9b/0x100
[  401.635581][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  401.635612][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  401.635639][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.635673][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  401.635701][    C1]  run_ksoftirqd+0x9b/0x100
[  401.635731][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  401.635771][    C1]  smpboot_thread_fn+0x542/0xa60
[  401.635802][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  401.635842][    C1]  kthread+0x711/0x8a0
[  401.635879][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  401.635908][    C1]  ? __pfx_kthread+0x10/0x10
[  401.635945][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.635978][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  401.636007][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.636035][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  401.636066][    C1]  ? __pfx_kthread+0x10/0x10
[  401.636100][    C1]  ret_from_fork+0x599/0xb30
[  401.636126][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  401.636163][    C1]  ? __switch_to_asm+0x39/0x70
[  401.636195][    C1]  ? __switch_to_asm+0x33/0x70
[  401.636228][    C1]  ? __pfx_kthread+0x10/0x10
[  401.636263][    C1]  ret_from_fork_asm+0x1a/0x30
[  401.636318][    C1]  </TASK>
[  401.636327][    C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  401.655295][   T31] audit: type=1326 audit(2000000088.894:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4f98f749 code=0x7ffc0000
[  401.661536][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.661569][    C1] Tainted: [L]=SOFTLOCKUP
[  401.661578][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  401.661592][    C1] Call Trace:
[  401.661603][    C1]  <TASK>
[  401.661613][    C1]  dump_stack_lvl+0x189/0x250
[  401.661653][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  401.661684][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  401.661710][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  401.661742][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  401.661784][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  401.661832][    C1]  f2fs_write_end_io+0x886/0xb60
[  401.661880][    C1]  blk_update_request+0x57e/0xe60
[  401.661937][    C1]  blk_mq_end_request+0x3e/0x70
[  401.661973][    C1]  blk_done_softirq+0x10a/0x160
[  401.662008][    C1]  handle_softirqs+0x27d/0x850
[  401.662040][    C1]  ? run_ksoftirqd+0x9b/0x100
[  401.662077][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  401.662108][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  401.662135][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.662168][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  401.662195][    C1]  run_ksoftirqd+0x9b/0x100
[  401.662225][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  401.662263][    C1]  smpboot_thread_fn+0x542/0xa60
[  401.662294][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  401.662332][    C1]  kthread+0x711/0x8a0
[  401.662369][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  401.662398][    C1]  ? __pfx_kthread+0x10/0x10
[  401.662427][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.662459][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  401.662487][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.662514][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  401.662545][    C1]  ? __pfx_kthread+0x10/0x10
[  401.662578][    C1]  ret_from_fork+0x599/0xb30
[  401.662606][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  401.662642][    C1]  ? __switch_to_asm+0x39/0x70
[  401.662674][    C1]  ? __switch_to_asm+0x33/0x70
[  401.662705][    C1]  ? __pfx_kthread+0x10/0x10
[  401.662738][    C1]  ret_from_fork_asm+0x1a/0x30
[  401.662791][    C1]  </TASK>
[  401.662800][    C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  402.082828][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  402.082854][    C1] Tainted: [L]=SOFTLOCKUP
[  402.082861][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  402.082872][    C1] Call Trace:
[  402.082881][    C1]  <TASK>
[  402.082890][    C1]  dump_stack_lvl+0x189/0x250
[  402.082919][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.082947][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  402.082967][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  402.082990][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.083022][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  402.083057][    C1]  f2fs_write_end_io+0x886/0xb60
[  402.083093][    C1]  blk_update_request+0x57e/0xe60
[  402.083131][    C1]  blk_mq_end_request+0x3e/0x70
[  402.083158][    C1]  blk_done_softirq+0x10a/0x160
[  402.083184][    C1]  handle_softirqs+0x27d/0x850
[  402.083209][    C1]  ? run_ksoftirqd+0x9b/0x100
[  402.083236][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  402.083259][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  402.083283][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.083316][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  402.083341][    C1]  run_ksoftirqd+0x9b/0x100
[  402.083370][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  402.083405][    C1]  smpboot_thread_fn+0x542/0xa60
[  402.083434][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  402.083471][    C1]  kthread+0x711/0x8a0
[  402.083507][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  402.083533][    C1]  ? __pfx_kthread+0x10/0x10
[  402.083561][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.083596][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.083624][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.083650][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  402.083683][    C1]  ? __pfx_kthread+0x10/0x10
[  402.083718][    C1]  ret_from_fork+0x599/0xb30
[  402.083746][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  402.083775][    C1]  ? __switch_to_asm+0x39/0x70
[  402.083799][    C1]  ? __switch_to_asm+0x33/0x70
[  402.083823][    C1]  ? __pfx_kthread+0x10/0x10
[  402.083853][    C1]  ret_from_fork_asm+0x1a/0x30
[  402.083907][    C1]  </TASK>
[  402.083917][    C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  402.295862][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  402.295891][    C1] Tainted: [L]=SOFTLOCKUP
[  402.295898][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  402.295909][    C1] Call Trace:
[  402.295919][    C1]  <TASK>
[  402.295928][    C1]  dump_stack_lvl+0x189/0x250
[  402.295987][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.296010][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  402.296030][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  402.296055][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.296087][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  402.296123][    C1]  f2fs_write_end_io+0x886/0xb60
[  402.296159][    C1]  blk_update_request+0x57e/0xe60
[  402.296199][    C1]  blk_mq_end_request+0x3e/0x70
[  402.296225][    C1]  blk_done_softirq+0x10a/0x160
[  402.296252][    C1]  handle_softirqs+0x27d/0x850
[  402.296276][    C1]  ? run_ksoftirqd+0x9b/0x100
[  402.296304][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  402.296326][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  402.296346][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.296371][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  402.296391][    C1]  run_ksoftirqd+0x9b/0x100
[  402.296414][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  402.296443][    C1]  smpboot_thread_fn+0x542/0xa60
[  402.296466][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  402.296494][    C1]  kthread+0x711/0x8a0
[  402.296522][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  402.296543][    C1]  ? __pfx_kthread+0x10/0x10
[  402.296565][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.296589][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.296610][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.296630][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  402.296653][    C1]  ? __pfx_kthread+0x10/0x10
[  402.296679][    C1]  ret_from_fork+0x599/0xb30
[  402.296700][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  402.296737][    C1]  ? __switch_to_asm+0x39/0x70
[  402.296770][    C1]  ? __switch_to_asm+0x33/0x70
[  402.296803][    C1]  ? __pfx_kthread+0x10/0x10
[  402.296835][    C1]  ret_from_fork_asm+0x1a/0x30
[  402.296874][    C1]  </TASK>
[  402.296882][    C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  402.508902][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  402.508935][    C1] Tainted: [L]=SOFTLOCKUP
[  402.508942][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  402.508953][    C1] Call Trace:
[  402.508963][    C1]  <TASK>
[  402.508972][    C1]  dump_stack_lvl+0x189/0x250
[  402.509004][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.509027][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  402.509047][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  402.509071][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.509103][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  402.509139][    C1]  f2fs_write_end_io+0x886/0xb60
[  402.509175][    C1]  blk_update_request+0x57e/0xe60
[  402.509213][    C1]  blk_mq_end_request+0x3e/0x70
[  402.509240][    C1]  blk_done_softirq+0x10a/0x160
[  402.509266][    C1]  handle_softirqs+0x27d/0x850
[  402.509290][    C1]  ? run_ksoftirqd+0x9b/0x100
[  402.509318][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  402.509341][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  402.509361][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.509385][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  402.509405][    C1]  run_ksoftirqd+0x9b/0x100
[  402.509428][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  402.509457][    C1]  smpboot_thread_fn+0x542/0xa60
[  402.509479][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  402.509508][    C1]  kthread+0x711/0x8a0
[  402.509536][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  402.509557][    C1]  ? __pfx_kthread+0x10/0x10
[  402.509579][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.509603][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.509624][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.509645][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  402.509668][    C1]  ? __pfx_kthread+0x10/0x10
[  402.509693][    C1]  ret_from_fork+0x599/0xb30
[  402.509714][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  402.509741][    C1]  ? __switch_to_asm+0x39/0x70
[  402.509765][    C1]  ? __switch_to_asm+0x33/0x70
[  402.509789][    C1]  ? __pfx_kthread+0x10/0x10
[  402.509814][    C1]  ret_from_fork_asm+0x1a/0x30
[  402.509853][    C1]  </TASK>
[  402.509861][    C1] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  402.723081][ T7422] F2FS-fs (loop7): do_checkpoint failed err:-5, stop checkpoint
[  402.765304][   T31] audit: type=1326 audit(2000000088.904:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4f98f749 code=0x7ffc0000
[  402.961003][ T5826] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  404.044259][ T8106] loop4: detected capacity change from 0 to 2048
[  404.253057][ T8109] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  407.332534][ T8138] loop8: detected capacity change from 0 to 1024
[  408.570139][ T8138] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  409.043750][ T8138] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.376: bg 0: block 10: padding at end of block bitmap is not set
[  409.121066][ T8138] Quota error (device loop8): write_blk: dquota write failed
[  409.150979][ T8138] Quota error (device loop8): find_free_dqentry: Can't write quota data block 2
[  409.171411][ T8138] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  409.719336][ T8138] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.376: Failed to acquire dquot type 0
[  409.730994][ T8109] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  409.731061][ T8109] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  409.781605][ T8109] Remounting filesystem read-only
[  409.792225][ T8138] Quota error (device loop8): write_blk: dquota write failed
[  409.862343][ T8138] Quota error (device loop8): find_free_dqentry: Can't write quota data block 2
[  410.485622][ T8138] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  410.599809][ T8138] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.376: Failed to acquire dquot type 0
[  410.667549][ T8138] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.376: Freeing blocks not in datazone - block = 0, count = 4096
[  410.733333][ T8164] loop6: detected capacity change from 0 to 2048
[  410.787193][ T8138] Quota error (device loop8): write_blk: dquota write failed
[  410.804900][ T8169] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  411.227755][ T8174] program syz.4.377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  411.761308][    T9] IPVS: starting estimator thread 0...
[  411.788835][ T8138] Quota error (device loop8): find_free_dqentry: Can't write quota data block 2
[  411.799754][ T8138] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  412.404623][ T8178] IPVS: using max 24 ests per chain, 57600 per kthread
[  412.412836][ T8138] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.376: Failed to acquire dquot type 0
[  412.506882][ T8138] EXT4-fs (loop8): 1 orphan inode deleted
[  412.561548][ T8138] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.436906][ T8196] loop6: detected capacity change from 0 to 512
[  413.551596][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.612587][ T8196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.664505][ T8196] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  414.666404][ T8207] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  414.681808][ T8207] Quota error (device loop6): write_blk: dquota write failed
[  414.689492][ T8207] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  414.699355][ T8207] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.384: Failed to acquire dquot type 0
[  415.043700][ T8204] loop1: detected capacity change from 0 to 2048
[  415.786381][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.818833][ T8204] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  415.857888][ T8204] UDF-fs: Scanning with blocksize 512 failed
[  416.027977][ T8204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.063568][ T8227] loop7: detected capacity change from 0 to 2048
[  418.128498][ T8227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  419.500026][ T8236] loop8: detected capacity change from 0 to 2048
[  419.582029][ T8234] binder: 8230:8234 ioctl c018620c 200000000000 returned -1
[  419.647304][ T8236] netlink: 4280 bytes leftover after parsing attributes in process `syz.8.392'.
[  419.656637][ T8236] netlink: 4280 bytes leftover after parsing attributes in process `syz.8.392'.
[  420.073292][ T8227] UDF-fs: error (device loop7): udf_read_inode: (ino 1345) failed !bh
[  420.436738][ T8242] hub 2-0:1.0: USB hub found
[  420.444670][ T8242] hub 2-0:1.0: 1 port detected
[  422.014357][ T8248] loop6: detected capacity change from 0 to 256
[  422.197338][ T8248] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  422.221116][ T8259] loop8: detected capacity change from 0 to 512
[  424.434736][ T8257] loop7: detected capacity change from 0 to 64
[  425.106074][ T8259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.384635][ T8259] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.711658][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.916298][ T8309] loop4: detected capacity change from 0 to 1024
[  429.954641][ T8309] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  431.008325][ T8326] loop1: detected capacity change from 0 to 128
[  431.416011][ T5836] Bluetooth: hci6: command 0x0406 tx timeout
[  431.706236][ T8309] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.407: bg 0: block 10: padding at end of block bitmap is not set
[  431.800612][ T8326] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  431.874648][ T8309] Quota error (device loop4): write_blk: dquota write failed
[  431.917296][ T8326] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.938968][ T8309] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2
[  431.961850][ T8309] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  431.993883][ T8309] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.407: Failed to acquire dquot type 0
[  432.521614][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'.
[  432.975367][ T8309] Quota error (device loop4): write_blk: dquota write failed
[  432.982786][ T8309] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2
[  433.652781][ T8309] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  433.706324][ T8309] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.407: Failed to acquire dquot type 0
[  433.729402][ T8309] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.407: Freeing blocks not in datazone - block = 0, count = 4096
[  434.091632][ T8309] Quota error (device loop4): write_blk: dquota write failed
[  434.379772][ T8309] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2
[  434.536125][ T8309] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  434.591869][ T8357] loop7: detected capacity change from 0 to 128
[  434.620979][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  434.633663][ T8309] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.407: Failed to acquire dquot type 0
[  434.753847][ T8309] EXT4-fs (loop4): 1 orphan inode deleted
[  434.761432][ T8309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.137085][ T8371] netlink: 'syz.7.415': attribute type 1 has an invalid length.
[  435.237914][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.415'.
[  435.547016][ T8368] loop1: detected capacity change from 0 to 32768
[  435.554537][ T8368] ocfs2: Unknown parameter '18446744073709551615'
[  436.002444][ T8372] gretap1: entered allmulticast mode
[  436.017577][ T8364] loop5: detected capacity change from 0 to 512
[  436.038301][ T8364] EXT4-fs: Ignoring removed bh option
[  436.184340][ T8364] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  436.276088][ T5836] Bluetooth: hci7: command 0x0406 tx timeout
[  436.318078][ T8364] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  436.338890][ T8364] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  436.348146][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.371647][ T8364] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  436.873720][ T8364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.026442][ T8390] loop6: detected capacity change from 0 to 1024
[  438.056886][ T8390] EXT4-fs: Ignoring removed nomblk_io_submit option
[  438.107977][ T8396] loop4: detected capacity change from 0 to 64
[  439.049382][ T8390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.283710][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.117538][ T8420] Invalid ELF header magic: != ELF
[  444.140010][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.272737][  T181] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  444.448562][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  444.455662][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  444.512448][  T181] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  445.220426][  T181] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.243612][  T181] usb 8-1: Product: syz
[  445.271805][  T181] usb 8-1: Manufacturer: syz
[  445.363565][  T181] usb 8-1: SerialNumber: syz
[  445.390862][  T181] usb 8-1: config 0 descriptor??
[  445.690785][ T8451] binder: 8441:8451 ioctl 40182103 200000000300 returned -22
[  447.580790][ T8457] loop4: detected capacity change from 0 to 32768
[  448.594097][ T8457] read_mapping_page failed!
[  448.600084][ T8457] jfs_mount: Failed to read AGGREGATE_I
[  448.605695][ T8457] Mount JFS Failure: -5
[  448.609920][ T8457] jfs_mount failed w/return code = -5
[  448.878569][  T181] usb 8-1: can't set config #0, error -71
[  448.933739][  T181] usb 8-1: USB disconnect, device number 2
[  451.874919][ T8489] loop4: detected capacity change from 0 to 64
[  452.048080][ T6536] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  452.090408][ T8491] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  452.112594][ T8491] Falling back ldisc for ttyS3.
[  456.852548][ T8515] loop4: detected capacity change from 0 to 40427
[  456.950115][ T8515] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  456.958032][ T8515] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  456.977504][ T8515] F2FS-fs (loop4): invalid crc value
[  458.108443][ T8515] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  458.460006][ T8526] ptrace attach of "./syz-executor exec"[7349] was attempted by ""[8526]
[  458.474865][ T8526] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  464.505163][ T8548] new mount options do not match the existing superblock, will be ignored
[  465.945544][ T8558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.559803][ T8570] loop8: detected capacity change from 0 to 131072
[  469.571511][ T8570] F2FS-fs (loop8): invalid crc value
[  469.656656][ T8570] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  469.667692][ T8570] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  471.846863][ T8593] loop5: detected capacity change from 0 to 512
[  471.918922][ T8593] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  471.996310][ T8593] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.464: corrupted xattr entries
[  473.206704][ T8593] EXT4-fs (loop5): 1 orphan inode deleted
[  473.633989][ T8593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.513782][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.016071][ T8636] loop6: detected capacity change from 0 to 128
[  476.628251][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.470'.
[  479.614425][ T8656] loop7: detected capacity change from 0 to 64
[  480.470142][ T8665] loop8: detected capacity change from 0 to 1024
[  480.966047][ T8665] hfsplus: invalid file type 0113366 for inode 2
[  480.972996][ T8665] hfsplus: failed to load root directory
[  483.693648][ T8694] loop6: detected capacity change from 0 to 512
[  483.988275][ T8694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  484.191291][ T8694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.220684][ T8694] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  485.800383][ T8709] ALSA: seq fatal error: cannot create timer (-22)
[  487.410073][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  487.424191][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  487.433466][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  488.300522][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  488.308297][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  489.094635][ T8744] loop7: detected capacity change from 0 to 128
[  489.123769][ T8745] tmpfs: Unknown parameter '01777777777777777777777'
[  489.536962][ T8732] lo speed is unknown, defaulting to 1000
[  490.426583][ T5836] Bluetooth: hci3: command tx timeout
[  491.695573][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.257613][ T8771] loop6: detected capacity change from 0 to 64
[  492.540095][ T5836] Bluetooth: hci3: command tx timeout
[  493.167058][ T8772] loop8: detected capacity change from 0 to 2048
[  493.385068][ T8772] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  494.247435][ T8781] loop1: detected capacity change from 0 to 128
[  494.589943][ T5836] Bluetooth: hci3: command tx timeout
[  494.901262][ T8789] loop6: detected capacity change from 0 to 32768
[  494.978573][ T8789] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  495.043289][ T8789] XFS (loop6): Ending clean mount
[  496.510933][ T7349] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  496.644627][ T8807] loop1: detected capacity change from 0 to 4096
[  496.676005][ T5836] Bluetooth: hci3: command tx timeout
[  497.392087][ T8807] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  497.637335][ T8807] ntfs3(loop1): ino=1a, mi_enum_attr
[  497.664012][ T8807] ntfs3(loop1): ino=1a, mi_enum_attr
[  497.669343][ T8807] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  497.726528][ T8732] chnl_net:caif_netlink_parms(): no params data found
[  498.809722][ T8827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.502'.
[  499.154745][   T52] Bluetooth: hci3: command 0x0405 tx timeout
[  499.600169][ T6119] libceph: connect (1)[c::]:6789 error -101
[  499.857493][ T6119] libceph: mon0 (1)[c::]:6789 connect error
[  499.950833][ T8834] ceph: No mds server is up or the cluster is laggy
[  500.495325][ T6119] libceph: connect (1)[c::]:6789 error -101
[  500.517746][ T6119] libceph: mon0 (1)[c::]:6789 connect error
[  500.650779][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  500.742489][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  500.766265][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  500.792520][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  500.813507][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  501.040310][ T6119] libceph: connect (1)[c::]:6789 error -101
[  501.046468][ T6119] libceph: mon0 (1)[c::]:6789 connect error
[  501.527440][ T8855] loop7: detected capacity change from 0 to 4096
[  501.595635][ T8855] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.698874][ T8861] loop6: detected capacity change from 0 to 64
[  502.115387][ T6181] libceph: connect (1)[c::]:6789 error -101
[  502.165986][ T6181] libceph: mon0 (1)[c::]:6789 connect error
[  503.009549][ T5836] Bluetooth: hci0: command tx timeout
[  503.460987][ T7422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.655469][ T8867] loop8: detected capacity change from 0 to 512
[  504.236417][ T8867] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  504.632862][ T8867] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.513: corrupted xattr entries
[  504.730458][ T8867] EXT4-fs (loop8): 1 orphan inode deleted
[  504.786093][ T8867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  505.069468][ T5836] Bluetooth: hci0: command tx timeout
[  506.125421][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  506.137145][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  506.179017][  T993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.552923][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.257916][ T5836] Bluetooth: hci0: command tx timeout
[  507.552151][ T8842] lo speed is unknown, defaulting to 1000
[  509.059489][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.069518][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.076853][ T8732] bridge_slave_0: entered allmulticast mode
[  509.458046][ T8939] program syz.1.522 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  510.090492][ T5836] Bluetooth: hci0: command tx timeout
[  510.100605][ T8732] bridge_slave_0: entered promiscuous mode
[  510.698359][ T8947] 9pnet_virtio: no channels available for device syz
[  511.562921][ T8950] loop6: detected capacity change from 0 to 4096
[  512.256378][ T8950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  514.424418][ T8964] loop8: detected capacity change from 0 to 1024
[  514.439875][ T8964] ext4: Unknown parameter 'nouser_xattr'
[  514.621019][ T8964] loop8: detected capacity change from 0 to 16
[  514.695729][ T8964] erofs (device loop8): mounted with root inode @ nid 36.
[  515.161369][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.682006][ T8970] loop6: detected capacity change from 0 to 32768
[  515.692684][  T993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.708470][ T8970] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.527 (8970)
[  515.739167][ T8970] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  515.749503][ T8970] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  516.423584][ T8970] BTRFS info (device loop6): enabling ssd optimizations
[  516.434218][ T8970] BTRFS info (device loop6): turning on async discard
[  516.441043][ T8970] BTRFS info (device loop6): enabling free space tree
[  516.465739][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.533981][ T8968] loop8: detected capacity change from 0 to 8192
[  516.553503][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.152376][ T8732] bridge_slave_1: entered allmulticast mode
[  517.357034][ T8732] bridge_slave_1: entered promiscuous mode
[  518.415157][ T7349] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  519.691493][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.696429][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  520.859144][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  520.867763][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  520.876194][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  520.918731][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  521.349393][ T9030] program syz.8.535 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  522.011923][ T9041] loop6: detected capacity change from 0 to 128
[  522.954044][ T9041] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  522.989783][   T52] Bluetooth: hci4: command tx timeout
[  522.998197][ T9041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  523.452038][  T993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.793943][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.857806][ T9049] loop1: detected capacity change from 0 to 32768
[  525.068295][   T52] Bluetooth: hci4: command tx timeout
[  525.086908][ T8732] team0: Port device team_slave_0 added
[  525.294909][ T9062] loop8: detected capacity change from 0 to 4096
[  525.318377][  T993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.352497][ T9062] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  525.431404][ T8732] team0: Port device team_slave_1 added
[  525.544824][ T9062] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  526.042501][ T9069] loop6: detected capacity change from 0 to 65536
[  526.694209][ T9069] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  526.810728][ T9069] XFS (loop6): Ending clean mount
[  526.822820][ T9069] XFS (loop6): Quotacheck needed: Please wait.
[  526.900676][ T9069] XFS (loop6): Quotacheck: Done.
[  527.055863][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.088428][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.143556][ T9082] loop1: detected capacity change from 0 to 4096
[  527.155660][   T52] Bluetooth: hci4: command tx timeout
[  527.219473][ T9082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  527.223084][ T7349] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  527.255527][ T8732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.281051][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.319468][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.326970][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.358703][ T9025] lo speed is unknown, defaulting to 1000
[  527.460784][ T8732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.550333][ T9088] loop1: detected capacity change from 0 to 128
[  528.266382][ T9103] loop8: detected capacity change from 0 to 64
[  529.163167][ T8732] hsr_slave_0: entered promiscuous mode
[  529.210252][ T8732] hsr_slave_1: entered promiscuous mode
[  529.228006][   T52] Bluetooth: hci4: command tx timeout
[  529.248050][ T8732] debugfs: 'hsr0' already exists in 'hsr'
[  529.265712][ T8732] Cannot create hsr debugfs directory
[  529.343550][ T9119] program syz.1.548 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  530.170316][ T9121] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  530.243358][ T9116] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  530.319807][ T9123] loop1: detected capacity change from 0 to 1024
[  530.557120][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.8.547'.
[  531.303288][ T9129] hfsplus: xattr searching failed
[  531.310890][ T9130] hfsplus: xattr searching failed
[  531.418082][   T31] audit: type=1800 audit(2000000222.082:46): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.550" name="bus" dev="loop1" ino=26 res=0 errno=0
[  531.625860][ T6034] hfsplus: b-tree write err: -5, ino 4
[  531.692024][ T9128] loop6: detected capacity change from 0 to 4096
[  531.726877][ T8842] chnl_net:caif_netlink_parms(): no params data found
[  531.811519][ T9128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.875089][  T993] bridge_slave_1: left allmulticast mode
[  531.914324][  T993] bridge_slave_1: left promiscuous mode
[  532.076967][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.154695][  T993] bridge_slave_0: left allmulticast mode
[  532.167834][  T993] bridge_slave_0: left promiscuous mode
[  532.175745][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.581397][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.701138][ T9155] loop8: detected capacity change from 0 to 1024
[  533.880667][ T9157] loop6: detected capacity change from 0 to 4096
[  533.948135][ T9157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.998335][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.199108][ T9184] program syz.1.559 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  539.545521][ T9187] loop1: detected capacity change from 0 to 40427
[  539.599018][ T9187] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  539.606850][ T9187] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  539.644864][ T9187] F2FS-fs (loop1): invalid crc value
[  539.715811][ T9187] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  539.740275][ T9187] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  539.747643][ T9187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  540.425333][ T9179] loop6: detected capacity change from 0 to 512
[  541.090746][ T9190] f2fs_ckpt-7:1: attempt to access beyond end of device
[  541.090746][ T9190] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  541.168855][ T9190] CPU: 1 UID: 0 PID: 9190 Comm: f2fs_ckpt-7:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  541.168886][ T9190] Tainted: [L]=SOFTLOCKUP
[  541.168893][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  541.168905][ T9190] Call Trace:
[  541.168926][ T9190]  <TASK>
[  541.168934][ T9190]  dump_stack_lvl+0x189/0x250
[  541.168965][ T9190]  ? __pfx_dump_stack_lvl+0x10/0x10
[  541.168993][ T9190]  ? __pfx_queue_work_on+0x10/0x10
[  541.169013][ T9190]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  541.169037][ T9190]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  541.169071][ T9190]  f2fs_handle_critical_error+0x37c/0x540
[  541.169108][ T9190]  f2fs_write_end_io+0x886/0xb60
[  541.169145][ T9190]  __submit_merged_bio+0x256/0x660
[  541.169181][ T9190]  __submit_merged_write_cond+0x255/0x530
[  541.169216][ T9190]  f2fs_write_data_pages+0x261d/0x3000
[  541.169268][ T9190]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  541.169327][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.169348][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.169369][ T9190]  ? __bfs+0x154/0x290
[  541.169387][ T9190]  ? __pfx_hlock_conflict+0x10/0x10
[  541.169414][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.169444][ T9190]  ? lockdep_unlock+0x89/0x120
[  541.169460][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.169480][ T9190]  ? __lock_acquire+0x146f/0x2cf0
[  541.169523][ T9190]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  541.169544][ T9190]  do_writepages+0x32e/0x550
[  541.169574][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.169599][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.169619][ T9190]  ? do_raw_spin_unlock+0x122/0x240
[  541.169649][ T9190]  filemap_fdatawrite+0x199/0x240
[  541.169676][ T9190]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  541.169737][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.169761][ T9190]  ? do_raw_spin_unlock+0x122/0x240
[  541.169792][ T9190]  f2fs_sync_dirty_inodes+0x30f/0x810
[  541.169827][ T9190]  f2fs_write_checkpoint+0x93e/0x2440
[  541.169849][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.169869][ T9190]  ? __lock_acquire+0x6b6/0x2cf0
[  541.169912][ T9190]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  541.169967][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.169993][ T9190]  ? down_write+0x162/0x1f0
[  541.170020][ T9190]  ? __pfx_down_write+0x10/0x10
[  541.170058][ T9190]  __checkpoint_and_complete_reqs+0xdf/0x3d0
[  541.170084][ T9190]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  541.170106][ T9190]  ? __pfx___schedule+0x10/0x10
[  541.170129][ T9190]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  541.170164][ T9190]  ? schedule+0x91/0x360
[  541.170194][ T9190]  issue_checkpoint_thread+0xd9/0x260
[  541.170222][ T9190]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  541.170252][ T9190]  ? __pfx_autoremove_wake_function+0x10/0x10
[  541.170294][ T9190]  ? __kthread_parkme+0x7b/0x200
[  541.170324][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.170349][ T9190]  ? __kthread_parkme+0x1a1/0x200
[  541.170377][ T9190]  kthread+0x711/0x8a0
[  541.170405][ T9190]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  541.170428][ T9190]  ? __pfx_kthread+0x10/0x10
[  541.170450][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.170474][ T9190]  ? _raw_spin_unlock_irq+0x23/0x50
[  541.170495][ T9190]  ? srso_alias_return_thunk+0x5/0xfbef5
[  541.170516][ T9190]  ? lockdep_hardirqs_on+0x98/0x140
[  541.170538][ T9190]  ? __pfx_kthread+0x10/0x10
[  541.170564][ T9190]  ret_from_fork+0x599/0xb30
[  541.170585][ T9190]  ? __pfx_ret_from_fork+0x10/0x10
[  541.170613][ T9190]  ? __switch_to_asm+0x39/0x70
[  541.170637][ T9190]  ? __switch_to_asm+0x33/0x70
[  541.170660][ T9190]  ? __pfx_kthread+0x10/0x10
[  541.170686][ T9190]  ret_from_fork_asm+0x1a/0x30
[  541.170727][ T9190]  </TASK>
[  541.174119][ T9190] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  541.741211][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.791931][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.850553][  T993] bond0 (unregistering): Released all slaves
[  541.939522][ T9159] warning: `syz.8.554' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  542.562877][ T9025] chnl_net:caif_netlink_parms(): no params data found
[  546.954891][  T993] hsr_slave_0: left promiscuous mode
[  547.001551][  T993] hsr_slave_1: left promiscuous mode
[  547.077237][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  547.084700][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  547.725841][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  547.745017][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  547.754250][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  547.763000][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  547.770697][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  547.845552][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  547.890150][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.007853][  T993] veth1_macvtap: left promiscuous mode
[  548.020622][  T993] veth0_macvtap: left promiscuous mode
[  548.038057][  T993] veth1_vlan: left promiscuous mode
[  548.059049][  T993] veth0_vlan: left promiscuous mode
[  549.866751][   T52] Bluetooth: hci5: command tx timeout
[  550.768579][ T9265] loop8: detected capacity change from 0 to 2048
[  550.817696][ T9265] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  550.879219][ T9265] NILFS (loop8): mounting unchecked fs
[  551.082175][ T5831] udevd[5831]: incorrect nilfs2 checksum on /dev/loop8
[  551.112623][ T9265] NILFS (loop8): recovery complete
[  551.126125][ T9271] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  551.952674][   T52] Bluetooth: hci5: command tx timeout
[  554.036477][   T52] Bluetooth: hci5: command tx timeout
[  554.540384][ T9286] loop1: detected capacity change from 0 to 32768
[  554.565062][ T9286] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.576 (9286)
[  554.581160][ T9286] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  554.591396][ T9286] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  554.720777][ T9286] BTRFS info (device loop1): enabling ssd optimizations
[  554.730042][ T9286] BTRFS info (device loop1): turning on async discard
[  554.737171][ T9286] BTRFS info (device loop1): enabling free space tree
[  554.868364][  T993] team0 (unregistering): Port device team_slave_1 removed
[  555.020245][ T9302] loop8: detected capacity change from 0 to 4096
[  555.041450][ T9306] loop6: detected capacity change from 0 to 64
[  555.770313][ T9302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  556.106998][   T52] Bluetooth: hci5: command tx timeout
[  556.970852][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.997238][  T993] team0 (unregistering): Port device team_slave_0 removed
[  557.009038][ T5822] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  559.234742][ T9327] loop8: detected capacity change from 0 to 128
[  559.254862][ T9327] vfat: Unknown parameter '0xffffffffffffffffÿ01777777777777777777777000000000000000000000030xffffffffffffffff'
[  560.779334][ T9338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  560.790031][ T9338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  560.807516][ T9338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  560.815629][ T9338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  560.848350][ T9338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  561.283077][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.8.585'.
[  562.268823][ T9345] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  563.242318][ T9351] loop6: detected capacity change from 0 to 1024
[  563.255204][ T9351] EXT4-fs: Ignoring removed bh option
[  564.266978][ T9338] Bluetooth: hci3: command tx timeout
[  564.435940][ T9338] Bluetooth: hci2: command 0x0405 tx timeout
[  564.540192][ T9351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  564.570645][ T9348] fuse: Bad value for 'fd'
[  564.918862][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.282575][ T9365] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  566.634924][ T9338] Bluetooth: hci3: command tx timeout
[  567.376809][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  567.383182][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  568.665809][   T52] Bluetooth: hci3: command tx timeout
[  569.298344][ T9374] loop1: detected capacity change from 0 to 4096
[  569.312845][ T9374] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  569.388099][ T9374] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  569.648113][ T9377] loop8: detected capacity change from 0 to 64
[  569.976556][ T9380] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  570.628487][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.665958][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.694518][ T8842] bridge_slave_0: entered allmulticast mode
[  570.721942][ T8842] bridge_slave_0: entered promiscuous mode
[  570.746743][   T52] Bluetooth: hci3: command tx timeout
[  572.234801][ T9395] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  573.412462][ T9410] loop8: detected capacity change from 0 to 64
[  574.650917][ T9422] program syz.1.599 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  575.562585][ T9426] loop1: detected capacity change from 0 to 128
[  575.591408][ T9426] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  575.604180][ T9426] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  575.755406][ T9234] lo speed is unknown, defaulting to 1000
[  576.234346][ T9025] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.456499][ T9431] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  576.468729][ T9431] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  576.493913][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.646424][ T9025] bridge_slave_0: entered allmulticast mode
[  576.647666][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  576.654801][ T9025] bridge_slave_0: entered promiscuous mode
[  576.781743][ T9025] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.831215][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.872421][ T9025] bridge_slave_1: entered allmulticast mode
[  576.912499][ T9025] bridge_slave_1: entered promiscuous mode
[  576.970095][ T9336] lo speed is unknown, defaulting to 1000
[  577.102681][ T9443] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  578.115285][ T6496] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  578.148568][ T9025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.191092][ T9025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.415248][ T6496] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  578.558028][ T6496] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  579.025338][ T6496] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.045821][ T6496] usb 7-1: config 1 interface 0 has no altsetting 1
[  579.063094][ T6496] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  579.076091][ T6496] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.084090][ T6496] usb 7-1: Product: syz
[  579.088518][ T6496] usb 7-1: Manufacturer: syz
[  579.093969][ T6496] usb 7-1: SerialNumber: syz
[  579.108485][ T6496] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  579.115346][ T6496] cdc_ncm 7-1:1.0: bind() failure
[  579.354627][ T9463] loop8: detected capacity change from 0 to 4096
[  579.444855][ T9463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.742025][ T9338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  579.752259][ T9338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  579.761014][ T9338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  579.769717][ T9338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  579.777643][ T9338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  580.430921][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.634161][ T6496] usb 7-1: USB disconnect, device number 2
[  581.320551][  T993] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.416133][ T9494] loop1: detected capacity change from 0 to 64
[  581.930346][ T9499] loop6: detected capacity change from 0 to 32768
[  581.942645][  T993] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.954627][ T9499] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.609 (9499)
[  582.053946][ T9499] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  582.065128][ T9499] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  582.105149][ T9338] Bluetooth: hci0: command tx timeout
[  582.342409][ T9234] chnl_net:caif_netlink_parms(): no params data found
[  582.375756][ T9499] BTRFS info (device loop6): enabling ssd optimizations
[  582.382741][ T9499] BTRFS info (device loop6): turning on async discard
[  582.389717][ T9499] BTRFS info (device loop6): enabling free space tree
[  582.419959][ T9476] lo speed is unknown, defaulting to 1000
[  583.560304][  T993] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.598653][ T7349] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  584.957703][ T9338] Bluetooth: hci0: command tx timeout
[  585.246813][  T993] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.653385][ T9557] loop8: detected capacity change from 0 to 256
[  586.751039][ T9557] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  586.984812][ T9338] Bluetooth: hci0: command tx timeout
[  588.256179][ T9336] chnl_net:caif_netlink_parms(): no params data found
[  589.064768][   T52] Bluetooth: hci0: command tx timeout
[  589.498183][ T9571] loop6: detected capacity change from 0 to 8
[  589.521323][ T9571] squashfs: Unknown parameter '0x0000000000000003'
[  589.614163][ T9571] loop6: detected capacity change from 0 to 512
[  589.656715][ T9571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  589.721241][ T9575] loop8: detected capacity change from 0 to 4096
[  589.729312][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.760574][ T9571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.787302][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.806616][ T9571] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.823693][ T9575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.834881][ T9234] bridge_slave_0: entered allmulticast mode
[  589.874466][ T9234] bridge_slave_0: entered promiscuous mode
[  590.775585][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.784991][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.804629][ T9234] bridge_slave_1: entered allmulticast mode
[  590.852348][ T9234] bridge_slave_1: entered promiscuous mode
[  590.858844][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.034836][ T9599] loop1: detected capacity change from 0 to 512
[  591.079255][ T9599] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.618: ea_inode with extended attributes
[  591.099925][ T9599] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.618: error while reading EA inode 11 err=-117
[  591.122071][ T9599] EXT4-fs (loop1): 1 orphan inode deleted
[  591.132166][ T9599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.153636][ T9599] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  592.201445][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.263761][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.299353][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.323728][ T9336] bridge_slave_0: entered allmulticast mode
[  592.368713][ T9336] bridge_slave_0: entered promiscuous mode
[  592.439537][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  592.468842][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.476429][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.483700][ T9336] bridge_slave_1: entered allmulticast mode
[  592.493231][ T9336] bridge_slave_1: entered promiscuous mode
[  592.529640][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.580654][ T9614] loop1: detected capacity change from 0 to 256
[  592.601867][ T9614] exfat: Unknown parameter 'iochirset'
[  593.749985][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.836207][ T9621] loop8: detected capacity change from 0 to 64
[  593.870956][  T993] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.038047][ T9336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.937803][ T9626] loop6: detected capacity change from 0 to 256
[  594.969249][  T993] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.385178][ T9626] exfat: Deprecated parameter 'namecase'
[  595.396714][ T9626] exfat: Deprecated parameter 'utf8'
[  595.497414][ T9626] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  595.522842][ T9336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.573943][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.623'.
[  595.591578][ T9234] team0: Port device team_slave_0 added
[  595.614580][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.623'.
[  595.733709][ T9234] team0: Port device team_slave_1 added
[  596.015400][  T993] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.211576][ T9634] new mount options do not match the existing superblock, will be ignored
[  596.284218][   T31] audit: type=1800 audit(2000000287.016:47): pid=9634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.625" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  597.216931][ T9643] program syz.6.627 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  598.988607][ T9645] loop1: detected capacity change from 0 to 4096
[  599.094730][ T9645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  599.302831][ T9650] loop6: detected capacity change from 0 to 32768
[  599.357570][ T9650] OCFS2: ERROR (device loop6): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  599.372927][ T9650] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  599.382795][ T9650] OCFS2: File system is now read-only.
[  599.388281][ T9650] (syz.6.629,9650,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  599.396468][ T9650] (syz.6.629,9650,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  599.405347][ T9650] (syz.6.629,9650,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  599.415723][ T9650] (syz.6.629,9650,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  599.424874][ T9650] (syz.6.629,9650,1):ocfs2_mount_volume:1758 ERROR: status = -30
[  599.455229][ T9650] (syz.6.629,9650,1):ocfs2_fill_super:1177 ERROR: status = -30
[  600.891380][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.317001][ T9336] team0: Port device team_slave_0 added
[  603.402628][  T993] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.554650][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.593181][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.683723][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.716441][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.734650][ T9682] loop1: detected capacity change from 0 to 32768
[  603.735350][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.770389][ T9682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.633 (9682)
[  603.837842][ T9682] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  603.848107][ T9682] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  603.871517][ T9687] loop6: detected capacity change from 0 to 128
[  603.873697][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.198274][ T9336] team0: Port device team_slave_1 added
[  605.262586][ T9682] BTRFS info (device loop1): enabling ssd optimizations
[  605.273148][ T9682] BTRFS info (device loop1): turning on async discard
[  605.283613][ T9682] BTRFS info (device loop1): enabling free space tree
[  605.345530][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  605.375761][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.621937][ T9336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  606.526335][   T31] audit: type=1800 audit(2000000296.516:48): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.633" name="file2" dev="loop1" ino=261 res=0 errno=0
[  607.214613][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  607.251072][ T5822] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  607.273533][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  607.453586][ T9336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  607.648825][ T9476] chnl_net:caif_netlink_parms(): no params data found
[  607.725805][ T9729] x_tables: duplicate underflow at hook 3
[  608.827032][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  608.837212][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  608.846789][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  608.855554][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  608.863416][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  610.572364][ T9747] Falling back ldisc for ttyS3.
[  610.992766][ T9338] Bluetooth: hci2: command tx timeout
[  611.509975][ T9749] loop1: detected capacity change from 0 to 4096
[  611.572137][ T9749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  612.386069][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.409997][ T9336] hsr_slave_0: entered promiscuous mode
[  612.618717][ T9336] hsr_slave_1: entered promiscuous mode
[  613.325388][ T9336] debugfs: 'hsr0' already exists in 'hsr'
[  613.331148][ T9336] Cannot create hsr debugfs directory
[  613.337516][  T993] bridge_slave_1: left allmulticast mode
[  613.344017][  T993] bridge_slave_1: left promiscuous mode
[  613.351009][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.503858][ T9766] loop8: detected capacity change from 0 to 32768
[  613.543152][ T9338] Bluetooth: hci2: command tx timeout
[  613.585286][  T993] bridge_slave_0: left allmulticast mode
[  613.608631][ T9766] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  613.625565][  T993] bridge_slave_0: left promiscuous mode
[  613.631309][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.704139][ T9766] XFS (loop8): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1802 dinode
[  613.714973][ T9766] XFS (loop8): Unmount and run xfs_repair
[  613.720696][ T9766] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[  613.728438][ T9766] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  613.737334][ T9766] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  613.746225][ T9766] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28  ..e.....4.Xh...(
[  613.755523][ T9766] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00  4.Xh...(........
[  613.765365][ T9766] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  613.774255][ T9766] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  613.783177][ T9766] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02  .....i.R........
[  613.792028][ T9766] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08  ................
[  613.801740][ T9766] XFS (loop8): metadata inode 0x1802 type 6 is corrupt
[  613.810256][ T9766] XFS (loop8): failed to read RT inodes
[  613.816572][ T9766] XFS (loop8): Uncorrected metadata errors detected; please run xfs_repair.
[  613.891815][  T993] bridge_slave_0: left allmulticast mode
[  613.923169][  T993] bridge_slave_0: left promiscuous mode
[  613.948981][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.994931][  T993] bridge_slave_1: left allmulticast mode
[  614.170504][  T993] bridge_slave_1: left promiscuous mode
[  614.201400][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.280373][  T993] bridge_slave_0: left allmulticast mode
[  614.303354][  T993] bridge_slave_0: left promiscuous mode
[  614.319312][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.357404][  T993] bridge_slave_1: left allmulticast mode
[  614.389729][  T993] bridge_slave_1: left promiscuous mode
[  614.406624][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.626623][  T993] bridge_slave_0: left allmulticast mode
[  615.324615][  T993] bridge_slave_0: left promiscuous mode
[  615.333294][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  615.623728][ T9338] Bluetooth: hci2: command tx timeout
[  617.675486][ T9801] syz.1.646 (9801): drop_caches: 2
[  617.765483][ T9338] Bluetooth: hci2: command tx timeout
[  620.090451][ T9816] loop1: detected capacity change from 0 to 64
[  620.541431][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  620.553283][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  620.565480][  T993] bond0 (unregistering): Released all slaves
[  620.588305][  T993] bond1 (unregistering): Released all slaves
[  620.723607][  T993] bond0 (unregistering): Released all slaves
[  621.062160][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  621.075626][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  621.104050][  T993] bond0 (unregistering): Released all slaves
[  621.165541][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  621.175499][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  621.194667][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  621.204644][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  621.436352][ T9826] Falling back ldisc for ttyS3.
[  621.614175][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  622.183628][ T9829] loop1: detected capacity change from 0 to 128
[  622.334760][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  622.344946][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'.
[  622.357052][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  622.382122][  T993] bond0 (unregistering): Released all slaves
[  623.201761][ T9842] ptrace attach of "./syz-executor exec"[7349] was attempted by "./syz-executor exec"[9842]
[  623.865522][   T52] Bluetooth: hci4: command tx timeout
[  624.234000][ T9476] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.241246][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.249552][ T9476] bridge_slave_0: entered allmulticast mode
[  624.257742][ T9476] bridge_slave_0: entered promiscuous mode
[  624.431361][ T9850] loop8: detected capacity change from 0 to 64
[  625.131253][ T9733] lo speed is unknown, defaulting to 1000
[  625.138644][ T9476] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.193263][ T9476] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.200554][ T9476] bridge_slave_1: entered allmulticast mode
[  625.246776][ T9476] bridge_slave_1: entered promiscuous mode
[  625.328716][ T9857] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  625.561300][ T9857] loop6: detected capacity change from 0 to 4096
[  625.596972][ T9857] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  625.942452][   T52] Bluetooth: hci4: command tx timeout
[  626.271231][ T9860] loop1: detected capacity change from 0 to 512
[  626.279479][ T9860] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  626.309931][ T9860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[  626.318174][ T9860] System zones: 1-12
[  626.325581][ T9860] EXT4-fs (loop1): 1 truncate cleaned up
[  626.333245][ T9860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.633081][ T9864] Invalid ELF header magic: != ELF
[  628.403409][ T9338] Bluetooth: hci4: command tx timeout
[  628.621451][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.842434][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  628.851923][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  629.785678][ T9822] lo speed is unknown, defaulting to 1000
[  630.422252][   T52] Bluetooth: hci4: command tx timeout
[  630.567432][ T9476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  630.857242][ T9476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.775315][ T9476] team0: Port device team_slave_0 added
[  631.867863][ T9476] team0: Port device team_slave_1 added
[  634.219320][ T9898] loop6: detected capacity change from 0 to 4096
[  634.227187][ T9898] ntfs3: Unknown parameter '/dev/ptmx'
[  634.422146][ T9895] loop8: detected capacity change from 0 to 128
[  635.720794][  T993] hsr_slave_0: left promiscuous mode
[  635.966401][  T993] hsr_slave_1: left promiscuous mode
[  636.515309][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  636.524508][ T9907] loop6: detected capacity change from 0 to 1024
[  636.550221][ T9907] EXT4-fs: Ignoring removed bh option
[  636.550964][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.770614][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  636.792317][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.810355][ T9907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.526166][  T993] hsr_slave_0: left promiscuous mode
[  637.862072][  T993] hsr_slave_1: left promiscuous mode
[  637.869859][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.894673][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  638.656486][  T993] hsr_slave_0: left promiscuous mode
[  638.673013][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.684840][  T993] hsr_slave_1: left promiscuous mode
[  638.712569][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  638.719959][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  638.819811][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  638.863345][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  638.940388][ T9926] loop6: detected capacity change from 0 to 128
[  638.978612][ T9926] EXT4-fs: Ignoring removed nomblk_io_submit option
[  639.029577][ T9926] EXT4-fs (loop6): Test dummy encryption mode enabled
[  639.061982][ T9926] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32451!=0)
[  639.086983][  T993] veth1_macvtap: left promiscuous mode
[  639.106220][ T9926] EXT4-fs (loop6): group descriptors corrupted!
[  639.111753][  T993] veth0_macvtap: left promiscuous mode
[  639.148592][  T993] veth1_vlan: left promiscuous mode
[  639.240927][  T993] veth0_vlan: left promiscuous mode
[  639.487293][ T9928] loop6: detected capacity change from 0 to 256
[  639.504856][ T9927] IPVS: set_ctl: invalid protocol: 12078 108.101.49.0:20001
[  639.566810][ T9928] exfat: Unknown parameter '0x0000200000001400'
[  639.862481][  T993] veth1_macvtap: left promiscuous mode
[  639.919760][  T993] veth0_macvtap: left promiscuous mode
[  639.950275][  T993] veth1_vlan: left promiscuous mode
[  639.980629][  T993] veth0_vlan: left promiscuous mode
[  641.356672][ T9338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  641.367472][ T9338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  641.375734][ T9338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  641.383848][ T9338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  641.391439][ T9338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  642.430323][ T9943] new mount options do not match the existing superblock, will be ignored
[  643.108431][   T31] audit: type=1800 audit(2000000333.228:49): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.668" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  643.461515][ T9338] Bluetooth: hci3: command tx timeout
[  643.768302][ T9949] loop8: detected capacity change from 0 to 64
[  645.463160][  T993] team0 (unregistering): Port device team_slave_1 removed
[  645.546203][ T9954] loop8: detected capacity change from 0 to 64
[  645.781401][ T9338] Bluetooth: hci3: command tx timeout
[  645.906375][  T993] team0 (unregistering): Port device team_slave_0 removed
[  647.560476][ T9961] netlink: 172 bytes leftover after parsing attributes in process `syz.8.673'.
[  647.719911][  T993] team0 (unregistering): Port device team_slave_1 removed
[  647.828673][  T993] team0 (unregistering): Port device team_slave_0 removed
[  647.873931][ T9338] Bluetooth: hci3: command tx timeout
[  648.369013][ T9962] syz.8.673 (9962): drop_caches: 2
[  649.199832][ T9966] loop8: detected capacity change from 0 to 1024
[  649.214044][ T9966] EXT4-fs: Ignoring removed bh option
[  650.147288][ T9338] Bluetooth: hci3: command tx timeout
[  650.185114][ T9966] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.215031][ T9965] fuse: Bad value for 'fd'
[  650.328289][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.696904][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  650.709799][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  650.718229][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  650.728910][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  650.736730][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  650.958100][  T993] team0 (unregistering): Port device team_slave_1 removed
[  651.024776][  T993] team0 (unregistering): Port device team_slave_0 removed
[  652.225572][ T9476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.232988][ T9476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  652.265854][ T9476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  652.820938][ T9338] Bluetooth: hci5: command tx timeout
[  653.856614][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.679'.
[  654.585827][ T9822] chnl_net:caif_netlink_parms(): no params data found
[  654.631093][ T9733] chnl_net:caif_netlink_parms(): no params data found
[  654.751034][ T9934] lo speed is unknown, defaulting to 1000
[  655.610851][ T9338] Bluetooth: hci5: command tx timeout
[  657.310910][ T9972] lo speed is unknown, defaulting to 1000
[  657.691902][T10021] loop6: detected capacity change from 0 to 40427
[  657.703900][T10022] loop8: detected capacity change from 0 to 64
[  657.710616][ T9338] Bluetooth: hci5: command tx timeout
[  657.732482][T10021] F2FS-fs (loop6): build fault injection rate: 14
[  657.739018][T10021] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  657.751147][T10021] F2FS-fs (loop6): invalid crc value
[  657.776281][    C0] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  657.795239][    C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  657.859355][T10021] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  657.868796][T10021] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  657.921639][T10021] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  658.029124][T10021] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  658.307895][T10030] F2FS-fs (loop6): inject truncate fail in f2fs_truncate of f2fs_setattr+0xf0f/0x1660
[  658.709567][T10030] F2FS-fs (loop6): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1740
[  658.747501][T10030] F2FS-fs (loop6): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1740
[  658.763385][T10030] F2FS-fs (loop6): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1740
[  658.793838][ T9822] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.802729][ T9822] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.811101][ T9822] bridge_slave_0: entered allmulticast mode
[  658.822629][ T9822] bridge_slave_0: entered promiscuous mode
[  658.838259][ T9822] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.845549][ T9822] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.846637][T10030] F2FS-fs (loop6): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1740
[  658.852817][ T9822] bridge_slave_1: entered allmulticast mode
[  658.878158][ T9822] bridge_slave_1: entered promiscuous mode
[  658.938894][T10030] F2FS-fs (loop6): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xaa9/0x1740
[  658.995452][T10030] syz.6.684: attempt to access beyond end of device
[  658.995452][T10030] loop6: rw=2049, sector=45096, nr_sectors = 800 limit=40427
[  659.075971][ T7349] F2FS-fs (loop6): inconsistent node block, node_type:3, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[  659.137528][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  659.137570][    C1] Tainted: [L]=SOFTLOCKUP
[  659.137580][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  659.137595][    C1] Call Trace:
[  659.137605][    C1]  <TASK>
[  659.137615][    C1]  dump_stack_lvl+0x189/0x250
[  659.137655][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  659.137686][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  659.137714][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  659.137747][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  659.137791][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  659.137839][    C1]  f2fs_write_end_io+0x886/0xb60
[  659.137886][    C1]  blk_update_request+0x57e/0xe60
[  659.137938][    C1]  blk_mq_end_request+0x3e/0x70
[  659.137974][    C1]  blk_done_softirq+0x10a/0x160
[  659.138009][    C1]  handle_softirqs+0x27d/0x850
[  659.138052][    C1]  ? run_ksoftirqd+0x9b/0x100
[  659.138090][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  659.138122][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.138149][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.138183][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.138210][    C1]  run_ksoftirqd+0x9b/0x100
[  659.138241][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  659.138280][    C1]  smpboot_thread_fn+0x542/0xa60
[  659.138311][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.138351][    C1]  kthread+0x711/0x8a0
[  659.138388][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  659.138417][    C1]  ? __pfx_kthread+0x10/0x10
[  659.138447][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.138479][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  659.138508][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.138536][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  659.138568][    C1]  ? __pfx_kthread+0x10/0x10
[  659.138603][    C1]  ret_from_fork+0x599/0xb30
[  659.138631][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  659.138668][    C1]  ? __switch_to_asm+0x39/0x70
[  659.138700][    C1]  ? __switch_to_asm+0x33/0x70
[  659.138732][    C1]  ? __pfx_kthread+0x10/0x10
[  659.138767][    C1]  ret_from_fork_asm+0x1a/0x30
[  659.138820][    C1]  </TASK>
[  659.138830][    C1] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  659.139257][ T9822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.149708][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  659.149745][    C1] Tainted: [L]=SOFTLOCKUP
[  659.149754][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  659.149769][    C1] Call Trace:
[  659.149778][    C1]  <TASK>
[  659.149789][    C1]  dump_stack_lvl+0x189/0x250
[  659.149825][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  659.149856][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  659.149882][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  659.149914][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  659.149957][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  659.150005][    C1]  f2fs_write_end_io+0x886/0xb60
[  659.150059][    C1]  blk_update_request+0x57e/0xe60
[  659.150110][    C1]  blk_mq_end_request+0x3e/0x70
[  659.150146][    C1]  blk_done_softirq+0x10a/0x160
[  659.150181][    C1]  handle_softirqs+0x27d/0x850
[  659.150214][    C1]  ? run_ksoftirqd+0x9b/0x100
[  659.150251][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  659.150282][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.150308][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.150341][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.150369][    C1]  run_ksoftirqd+0x9b/0x100
[  659.150399][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  659.150438][    C1]  smpboot_thread_fn+0x542/0xa60
[  659.150472][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.150511][    C1]  kthread+0x711/0x8a0
[  659.150547][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  659.150576][    C1]  ? __pfx_kthread+0x10/0x10
[  659.150605][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.150637][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  659.150666][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.150694][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  659.150725][    C1]  ? __pfx_kthread+0x10/0x10
[  659.150759][    C1]  ret_from_fork+0x599/0xb30
[  659.150787][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  659.150823][    C1]  ? __switch_to_asm+0x39/0x70
[  659.150855][    C1]  ? __switch_to_asm+0x33/0x70
[  659.150886][    C1]  ? __pfx_kthread+0x10/0x10
[  659.150920][    C1]  ret_from_fork_asm+0x1a/0x30
[  659.150972][    C1]  </TASK>
[  659.151012][    C1] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  659.162941][ T9822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  659.164205][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  659.164239][    C1] Tainted: [L]=SOFTLOCKUP
[  659.164249][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  659.164264][    C1] Call Trace:
[  659.164273][    C1]  <TASK>
[  659.164283][    C1]  dump_stack_lvl+0x189/0x250
[  659.164321][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  659.164352][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  659.164379][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  659.164411][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  659.164454][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  659.164502][    C1]  f2fs_write_end_io+0x886/0xb60
[  659.164549][    C1]  blk_update_request+0x57e/0xe60
[  659.164601][    C1]  blk_mq_end_request+0x3e/0x70
[  659.164636][    C1]  blk_done_softirq+0x10a/0x160
[  659.164672][    C1]  handle_softirqs+0x27d/0x850
[  659.164704][    C1]  ? run_ksoftirqd+0x9b/0x100
[  659.164741][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  659.164773][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.164800][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.164836][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.164864][    C1]  run_ksoftirqd+0x9b/0x100
[  659.164895][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  659.164933][    C1]  smpboot_thread_fn+0x542/0xa60
[  659.164964][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.165002][    C1]  kthread+0x711/0x8a0
[  659.165045][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  659.165075][    C1]  ? __pfx_kthread+0x10/0x10
[  659.165104][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.165136][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  659.165165][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.165193][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  659.165224][    C1]  ? __pfx_kthread+0x10/0x10
[  659.165258][    C1]  ret_from_fork+0x599/0xb30
[  659.165286][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  659.165322][    C1]  ? __switch_to_asm+0x39/0x70
[  659.165354][    C1]  ? __switch_to_asm+0x33/0x70
[  659.165385][    C1]  ? __pfx_kthread+0x10/0x10
[  659.165419][    C1]  ret_from_fork_asm+0x1a/0x30
[  659.165472][    C1]  </TASK>
[  659.165481][    C1] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  659.793368][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  659.793406][    C1] Tainted: [L]=SOFTLOCKUP
[  659.793415][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  659.793429][    C1] Call Trace:
[  659.793438][    C1]  <TASK>
[  659.793448][    C1]  dump_stack_lvl+0x189/0x250
[  659.793484][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  659.793512][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  659.793536][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  659.793565][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  659.793604][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  659.793648][    C1]  f2fs_write_end_io+0x886/0xb60
[  659.793691][    C1]  blk_update_request+0x57e/0xe60
[  659.793737][    C1]  blk_mq_end_request+0x3e/0x70
[  659.793770][    C1]  blk_done_softirq+0x10a/0x160
[  659.793802][    C1]  handle_softirqs+0x27d/0x850
[  659.793831][    C1]  ? run_ksoftirqd+0x9b/0x100
[  659.793865][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  659.793893][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.793917][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.793947][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.793972][    C1]  run_ksoftirqd+0x9b/0x100
[  659.794000][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  659.794035][    C1]  smpboot_thread_fn+0x542/0xa60
[  659.794068][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  659.794103][    C1]  kthread+0x711/0x8a0
[  659.794136][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  659.794162][    C1]  ? __pfx_kthread+0x10/0x10
[  659.794189][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.794219][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  659.794245][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.794270][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  659.794299][    C1]  ? __pfx_kthread+0x10/0x10
[  659.794330][    C1]  ret_from_fork+0x599/0xb30
[  659.794355][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  659.794388][    C1]  ? __switch_to_asm+0x39/0x70
[  659.794417][    C1]  ? __switch_to_asm+0x33/0x70
[  659.794446][    C1]  ? __pfx_kthread+0x10/0x10
[  659.794477][    C1]  ret_from_fork_asm+0x1a/0x30
[  659.794523][    C1]  </TASK>
[  659.794538][    C1] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  660.006825][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.006854][    C1] Tainted: [L]=SOFTLOCKUP
[  660.006861][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  660.006872][    C1] Call Trace:
[  660.006880][    C1]  <TASK>
[  660.006889][    C1]  dump_stack_lvl+0x189/0x250
[  660.006919][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  660.006942][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  660.006962][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  660.006985][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  660.007017][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  660.007059][    C1]  f2fs_write_end_io+0x886/0xb60
[  660.007095][    C1]  blk_update_request+0x57e/0xe60
[  660.007133][    C1]  blk_mq_end_request+0x3e/0x70
[  660.007160][    C1]  blk_done_softirq+0x10a/0x160
[  660.007187][    C1]  handle_softirqs+0x27d/0x850
[  660.007210][    C1]  ? run_ksoftirqd+0x9b/0x100
[  660.007238][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  660.007262][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  660.007281][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.007306][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  660.007326][    C1]  run_ksoftirqd+0x9b/0x100
[  660.007349][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  660.007377][    C1]  smpboot_thread_fn+0x542/0xa60
[  660.007401][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  660.007429][    C1]  kthread+0x711/0x8a0
[  660.007457][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  660.007478][    C1]  ? __pfx_kthread+0x10/0x10
[  660.007500][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.007524][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  660.007546][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.007566][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[  660.007589][    C1]  ? __pfx_kthread+0x10/0x10
[  660.007615][    C1]  ret_from_fork+0x599/0xb30
[  660.007635][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  660.007662][    C1]  ? __switch_to_asm+0x39/0x70
[  660.007686][    C1]  ? __switch_to_asm+0x33/0x70
[  660.007709][    C1]  ? __pfx_kthread+0x10/0x10
[  660.007734][    C1]  ret_from_fork_asm+0x1a/0x30
[  660.007774][    C1]  </TASK>
[  660.007781][    C1] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  660.221568][ T9338] Bluetooth: hci5: command tx timeout
[  660.242368][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.250123][ T7349] F2FS-fs (loop6): do_checkpoint failed err:-5, stop checkpoint
[  660.258498][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.279300][ T9733] bridge_slave_0: entered allmulticast mode
[  660.289935][ T9733] bridge_slave_0: entered promiscuous mode
[  660.374279][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.404005][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.420292][ T9733] bridge_slave_1: entered allmulticast mode
[  660.433468][ T9733] bridge_slave_1: entered promiscuous mode
[  660.464183][ T9822] team0: Port device team_slave_0 added
[  660.514686][ T9822] team0: Port device team_slave_1 added
[  660.536164][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  660.700837][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  660.912127][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  660.919098][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  660.966889][ T9822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.076104][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.086576][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.119315][ T9822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.133417][ T9733] team0: Port device team_slave_0 added
[  661.186113][ T9733] team0: Port device team_slave_1 added
[  661.352349][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  661.359326][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.388365][ T9733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.423661][ T9934] chnl_net:caif_netlink_parms(): no params data found
[  661.445822][ T9822] hsr_slave_0: entered promiscuous mode
[  661.452938][ T9822] hsr_slave_1: entered promiscuous mode
[  661.475877][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.483420][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.510323][ T9733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.537623][ T9972] chnl_net:caif_netlink_parms(): no params data found
[  661.732043][  T993] IPVS: stop unused estimator thread 0...
[  661.761460][ T9733] hsr_slave_0: entered promiscuous mode
[  661.767960][ T9733] hsr_slave_1: entered promiscuous mode
[  661.774462][ T9733] debugfs: 'hsr0' already exists in 'hsr'
[  661.780646][ T9733] Cannot create hsr debugfs directory
[  661.880198][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.889619][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.897530][ T9934] bridge_slave_0: entered allmulticast mode
[  661.905409][ T9934] bridge_slave_0: entered promiscuous mode
[  661.926981][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.934698][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.942555][ T9972] bridge_slave_0: entered allmulticast mode
[  661.949988][ T9972] bridge_slave_0: entered promiscuous mode
[  661.958240][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.966185][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.974892][ T9934] bridge_slave_1: entered allmulticast mode
[  661.983026][ T9934] bridge_slave_1: entered promiscuous mode
[  662.015418][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.025010][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.032704][ T9972] bridge_slave_1: entered allmulticast mode
[  662.040206][ T9972] bridge_slave_1: entered promiscuous mode
[  662.148162][ T9934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.182346][ T9972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.194589][ T9934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.231589][ T9972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.284097][  T993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.427294][ T9934] team0: Port device team_slave_0 added
[  662.456993][  T993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.492239][ T9972] team0: Port device team_slave_0 added
[  662.501754][ T9934] team0: Port device team_slave_1 added
[  662.545116][ T9972] team0: Port device team_slave_1 added
[  662.705631][  T993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.794337][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  662.802218][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  662.829580][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  662.874122][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  662.885336][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  662.913944][ T9972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  662.926479][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  662.935383][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  662.963068][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  663.006356][  T993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.027415][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  663.034904][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  663.062386][ T9972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  663.226297][ T9934] hsr_slave_0: entered promiscuous mode
[  663.234395][ T9934] hsr_slave_1: entered promiscuous mode
[  663.240733][ T9934] debugfs: 'hsr0' already exists in 'hsr'
[  663.246451][ T9934] Cannot create hsr debugfs directory
[  663.296358][ T9972] hsr_slave_0: entered promiscuous mode
[  663.303816][ T9972] hsr_slave_1: entered promiscuous mode
[  663.309993][ T9972] debugfs: 'hsr0' already exists in 'hsr'
[  663.316695][ T9972] Cannot create hsr debugfs directory
[  663.516105][  T993] bridge_slave_1: left allmulticast mode
[  663.522903][  T993] bridge_slave_1: left promiscuous mode
[  663.528654][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.538063][  T993] bridge_slave_0: left allmulticast mode
[  663.545005][  T993] bridge_slave_0: left promiscuous mode
[  663.551767][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.564149][  T993] bridge_slave_1: left allmulticast mode
[  663.570071][  T993] bridge_slave_1: left promiscuous mode
[  663.576443][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.588492][  T993] bridge_slave_0: left allmulticast mode
[  663.594176][  T993] bridge_slave_0: left promiscuous mode
[  663.599868][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.613493][  T993] bridge_slave_1: left allmulticast mode
[  663.619139][  T993] bridge_slave_1: left promiscuous mode
[  663.625636][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.634518][  T993] bridge_slave_0: left allmulticast mode
[  663.640141][  T993] bridge_slave_0: left promiscuous mode
[  663.646031][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.656631][  T993] bridge_slave_1: left allmulticast mode
[  663.664164][  T993] bridge_slave_1: left promiscuous mode
[  663.670155][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.681262][  T993] bridge_slave_0: left allmulticast mode
[  663.686894][  T993] bridge_slave_0: left promiscuous mode
[  663.692943][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.703577][  T993] bridge_slave_1: left allmulticast mode
[  663.709204][  T993] bridge_slave_1: left promiscuous mode
[  663.715362][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.724214][  T993] bridge_slave_0: left allmulticast mode
[  663.730170][  T993] bridge_slave_0: left promiscuous mode
[  663.736449][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.860641][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  663.872742][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  663.883002][  T993] bond0 (unregistering): Released all slaves
[  664.188143][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.199660][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.209998][  T993] bond0 (unregistering): Released all slaves
[  664.326908][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.343290][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.356512][  T993] bond0 (unregistering): Released all slaves
[  664.449703][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.462106][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.472525][  T993] bond0 (unregistering): Released all slaves
[  664.579572][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.593137][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.604499][  T993] bond0 (unregistering): Released all slaves
[  664.638065][ T9733] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  664.730254][ T9733] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  664.847428][ T9733] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  664.866793][ T9733] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  665.218490][ T9822] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  665.258213][ T9822] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  665.336007][ T9822] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  665.381199][ T9822] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  665.435710][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.454240][  T993] hsr_slave_0: left promiscuous mode
[  665.461138][  T993] hsr_slave_1: left promiscuous mode
[  665.468208][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  665.483438][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.494437][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  665.502152][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.513003][  T993] hsr_slave_0: left promiscuous mode
[  665.521040][  T993] hsr_slave_1: left promiscuous mode
[  665.527171][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.535682][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.544920][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.553489][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.582915][  T993] veth1_macvtap: left promiscuous mode
[  665.588478][  T993] veth0_macvtap: left promiscuous mode
[  665.594652][  T993] veth1_vlan: left promiscuous mode
[  665.599958][  T993] veth0_vlan: left promiscuous mode
[  665.748213][  T993] team0 (unregistering): Port device team_slave_1 removed
[  665.786416][  T993] team0 (unregistering): Port device team_slave_0 removed
[  666.273032][  T993] team0 (unregistering): Port device team_slave_1 removed
[  666.324568][  T993] team0 (unregistering): Port device team_slave_0 removed
[  666.823230][  T993] team0 (unregistering): Port device team_slave_1 removed
[  666.850376][  T993] team0 (unregistering): Port device team_slave_0 removed
[  667.080363][  T993] team0 (unregistering): Port device team_slave_1 removed
[  667.111680][  T993] team0 (unregistering): Port device team_slave_0 removed
[  667.458916][ T5986] lo speed is unknown, defaulting to 1000
[  667.470305][ T5986] infiniband syz0: ib_query_port failed (-19)
[  667.668554][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  667.678810][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  667.687497][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  667.696111][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  667.704148][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  667.843375][ T9822] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.960896][ T9822] 8021q: adding VLAN 0 to HW filter on device team0
[  668.267713][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.274872][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.319032][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.326180][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.893577][T10106] chnl_net:caif_netlink_parms(): no params data found
[  669.044452][ T9934] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  669.147434][ T9934] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  669.216522][ T9934] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  669.229475][ T9934] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  669.259743][T10106] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.267964][T10106] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.276470][T10106] bridge_slave_0: entered allmulticast mode
[  669.286062][T10106] bridge_slave_0: entered promiscuous mode
[  669.295368][T10106] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.302995][T10106] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.310301][T10106] bridge_slave_1: entered allmulticast mode
[  669.317957][T10106] bridge_slave_1: entered promiscuous mode
[  669.409088][T10106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  669.479691][T10106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  669.496175][ T9972] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  669.517756][ T9972] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  669.529035][ T9972] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  669.576703][ T9972] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  669.589736][ T9822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.609710][T10106] team0: Port device team_slave_0 added
[  669.637722][T10106] team0: Port device team_slave_1 added
[  669.696190][T10106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.705161][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.734132][T10106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.755223][T10106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.763398][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.790860][   T52] Bluetooth: hci0: command tx timeout
[  669.801354][T10106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  669.921641][T10106] hsr_slave_0: entered promiscuous mode
[  669.928194][T10106] hsr_slave_1: entered promiscuous mode
[  669.934857][T10106] debugfs: 'hsr0' already exists in 'hsr'
[  669.941416][T10106] Cannot create hsr debugfs directory
[  670.053250][ T9822] veth0_vlan: entered promiscuous mode
[  670.116132][ T9822] veth1_vlan: entered promiscuous mode
[  670.302395][ T9822] veth0_macvtap: entered promiscuous mode
[  670.318102][ T9822] veth1_macvtap: entered promiscuous mode
[  670.333883][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.357534][ T9972] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.423120][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.443203][ T9934] 8021q: adding VLAN 0 to HW filter on device team0
[  670.488992][ T9972] 8021q: adding VLAN 0 to HW filter on device team0
[  670.503214][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.518566][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.525754][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.553529][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.560723][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.573502][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.580664][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.615538][  T172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.630582][  T172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.646050][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.653178][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.666955][  T172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.685732][  T172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.858470][  T993] bridge_slave_1: left allmulticast mode
[  670.865575][  T993] bridge_slave_1: left promiscuous mode
[  670.871762][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.884021][  T993] bridge_slave_0: left allmulticast mode
[  670.889668][  T993] bridge_slave_0: left promiscuous mode
[  670.901561][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.075812][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  671.086587][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  671.098832][  T993] bond0 (unregistering): Released all slaves
[  671.256785][  T993] hsr_slave_0: left promiscuous mode
[  671.262991][  T993] hsr_slave_1: left promiscuous mode
[  671.269673][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  671.277592][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  671.451545][  T993] team0 (unregistering): Port device team_slave_1 removed
[  671.487784][  T993] team0 (unregistering): Port device team_slave_0 removed
[  671.678880][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.710024][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.860866][   T52] Bluetooth: hci0: command tx timeout
[  671.870949][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.888814][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.889976][   T31] audit: type=1804 audit(2000000363.730:50): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.693" name="/newroot/94/file0" dev="tmpfs" ino=547 res=1 errno=0
[  673.911388][T10158] uprobe: syz.6.693:10158 failed to unregister, leaking uprobe
[  673.952878][   T52] Bluetooth: hci0: command tx timeout
[  674.366661][T10161] netlink: 'syz.2.507': attribute type 1 has an invalid length.
[  674.751595][ T9972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  674.820754][ T6119] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  674.836948][T10106] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  674.857630][ T9934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  674.886907][T10106] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  674.902777][T10106] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  674.951520][T10106] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  674.999863][ T6119] usb 3-1: Using ep0 maxpacket: 16
[  675.067056][ T6119] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  675.079149][ T6119] usb 3-1: config 0 has an invalid descriptor of length 155, skipping remainder of the config
[  675.095422][ T6119] usb 3-1: config 0 has no interface number 0
[  675.106064][ T6119] usb 3-1: config 0 interface 105 has no altsetting 0
[  675.243431][ T6119] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  675.267894][ T6119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.276978][ T6119] usb 3-1: Product: syz
[  675.285182][ T6119] usb 3-1: Manufacturer: syz
[  675.292342][ T6119] usb 3-1: SerialNumber: syz
[  675.307452][ T6119] usb 3-1: config 0 descriptor??
[  675.319372][ T9972] veth0_vlan: entered promiscuous mode
[  675.344437][ T9934] veth0_vlan: entered promiscuous mode
[  675.404163][ T6119] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22
[  675.427732][ T9972] veth1_vlan: entered promiscuous mode
[  675.455266][ T9934] veth1_vlan: entered promiscuous mode
[  675.658006][ T6119] usb 3-1: USB disconnect, device number 2
[  675.673939][ T9972] veth0_macvtap: entered promiscuous mode
[  675.745872][ T9934] veth0_macvtap: entered promiscuous mode
[  675.762694][ T9972] veth1_macvtap: entered promiscuous mode
[  675.787387][T10171] loop2: detected capacity change from 0 to 128
[  675.813237][ T9934] veth1_macvtap: entered promiscuous mode
[  676.071964][   T52] Bluetooth: hci0: command tx timeout
[  678.996515][T10178] loop8: detected capacity change from 0 to 512
[  680.288750][T10178] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  680.289216][T10178] EXT4-fs: failed to create workqueue
[  681.270994][T10178] EXT4-fs (loop8): mount failed
[  681.284111][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  682.290606][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  682.412845][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  682.572461][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  682.587314][T10106] 8021q: adding VLAN 0 to HW filter on device bond0
[  683.410312][ T6261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  683.421214][ T6261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  683.448380][ T6261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  683.478598][T10106] 8021q: adding VLAN 0 to HW filter on device team0
[  683.524125][T10106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  683.699568][T10106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  683.943040][T10196] loop8: detected capacity change from 0 to 512
[  683.957761][T10196] EXT4-fs: Ignoring removed mblk_io_submit option
[  684.366216][ T6261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.390194][T10196] EXT4-fs (loop8): orphan cleanup on readonly fs
[  684.396538][T10196] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[  684.410451][T10196] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.689: attempt to clear invalid blocks 2 len 1
[  684.425989][T10196] EXT4-fs (loop8): Remounting filesystem read-only
[  684.433275][T10196] EXT4-fs (loop8): 1 truncate cleaned up
[  684.440472][T10196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  684.537676][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.544870][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state
[  684.614799][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.621983][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  684.752206][ T6261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  684.943348][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.962593][ T6261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.996435][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.116401][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  686.127380][T10208] 9pnet_fd: Insufficient options for proto=fd
[  686.886277][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.903999][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.042339][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.092861][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.151862][ T6513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.196715][ T6513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.369176][  T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.799262][  T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.921506][T10106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.952518][T10228] futex_wake_op: syz.0.533 tries to shift op by -1; fix this program
[  689.149781][T10226] loop8: detected capacity change from 0 to 512
[  690.175729][T10226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  690.207728][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  690.209559][T10226] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  690.214293][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  691.342698][T10253] loop6: detected capacity change from 0 to 512
[  691.351604][T10253] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  691.390448][T10253] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.700: corrupted xattr entries
[  691.406891][T10253] EXT4-fs (loop6): 1 orphan inode deleted
[  691.415291][T10253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  691.424574][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  691.917756][T10258] loop2: detected capacity change from 0 to 32768
[  691.938441][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.6.700'.
[  692.018801][T10258] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.701 (10258)
[  692.204147][T10258] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  692.214367][T10258] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  692.737272][T10274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  692.744956][T10274] IPv6: NLM_F_CREATE should be set when creating new route
[  692.801458][T10274] loop3: detected capacity change from 0 to 256
[  693.703896][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.809040][T10258] BTRFS info (device loop2): enabling ssd optimizations
[  693.816108][T10258] BTRFS info (device loop2): turning on async discard
[  693.823077][T10258] BTRFS info (device loop2): enabling free space tree
[  695.448946][ T9822] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  695.758918][T10302] loop8: detected capacity change from 0 to 128
[  695.923869][ T8965] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  696.046256][T10302] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  696.060637][T10302] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  696.927610][ T8965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.247305][ T8965] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  697.466489][ T8965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.543641][   T31] audit: type=1800 audit(2000000388.271:51): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.708" name="file1" dev="loop8" ino=15 res=0 errno=0
[  697.942710][ T8965] usb 4-1: config 0 descriptor??
[  698.102335][T10106] veth0_vlan: entered promiscuous mode
[  698.319564][T10106] veth1_vlan: entered promiscuous mode
[  699.236513][ T8965] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0
[  699.366610][T10106] veth0_macvtap: entered promiscuous mode
[  699.410328][T10328] loop6: detected capacity change from 0 to 512
[  699.476133][T10328] EXT4-fs (loop6): 1 orphan inode deleted
[  699.483329][T10328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  699.496282][T10328] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  699.514177][T10106] veth1_macvtap: entered promiscuous mode
[  699.709280][T10332] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.710: iget: bad i_size value: 360287970189639690
[  700.143090][T10106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  700.170891][ T7268] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  700.300534][T10106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  700.322509][ T6119] usb 4-1: USB disconnect, device number 2
[  700.415304][ T7349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.465749][T10334] loop2: detected capacity change from 0 to 4096
[  700.503624][ T2976] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.578736][ T2976] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.608953][T10338] loop8: detected capacity change from 0 to 2048
[  700.616106][ T2976] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  700.626946][T10334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  700.637791][T10338] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  700.658533][ T2976] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  700.706286][T10345] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  700.706538][T10338] syz.8.712: attempt to access beyond end of device
[  700.706538][T10338] loop8: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[  700.780716][ T6262] udevd[6262]: incorrect nilfs2 checksum on /dev/loop8
[  701.778944][ T9822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.941924][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  702.193987][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  702.924904][T10358] syz.8.712: attempt to access beyond end of device
[  702.924904][T10358] loop8: rw=0, sector=65534, nr_sectors = 2 limit=2048
[  702.944522][T10358] NILFS (loop8): I/O error reading meta-data file (ino=6, block-offset=3)
[  702.953387][T10358] NILFS (loop8): error -5 reading inode: ino=12
[  703.289526][  T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  703.297377][  T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.145341][T10408] loop9: detected capacity change from 0 to 256
[  709.152734][T10408] exfat: Unknown parameter 'errorsTcontinue'
[  710.142245][T10414] loop9: detected capacity change from 0 to 128
[  713.217630][T10430] affs: No valid root block on device nullb0
[  713.247649][ T5926] IPVS: starting estimator thread 0...
[  713.607525][T10432] IPVS: using max 26 ests per chain, 62400 per kthread
[  714.913729][T10443] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  715.756194][T10445] loop3: detected capacity change from 0 to 1024
[  717.557629][T10460] hub 2-0:1.0: USB hub found
[  717.566163][T10460] hub 2-0:1.0: 1 port detected
[  720.437150][T10465] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  720.859198][T10477] NILFS (nbd8): device size too small
[  720.913017][T10477] syz.8.737 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  720.980073][T10477] loop8: detected capacity change from 0 to 512
[  720.994288][T10477] ext4: Unknown parameter 'smackfshat'
[  721.650114][T10481] Bluetooth: MGMT ver 1.23
[  722.339909][T10480] loop3: detected capacity change from 0 to 1024
[  724.049286][T10487] hfsplus: found bad thread record in catalog
[  724.066059][T10487] hfsplus: found bad thread record in catalog
[  724.261593][T10486] hfsplus: xattr searching failed
[  724.270318][T10485] hfsplus: xattr searching failed
[  724.276901][   T31] audit: type=1804 audit(2000000415.053:52): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.735" name="/newroot/7/file0/bus" dev="loop3" ino=26 res=1 errno=0
[  724.638223][   T31] audit: type=1800 audit(2000000415.053:53): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.735" name="bus" dev="loop3" ino=26 res=0 errno=0
[  724.761290][ T6126] hfsplus: b-tree write err: -5, ino 4
[  729.002614][   T52] Bluetooth: hci6: unexpected event 0x06 length: 4 > 3
[  729.950628][T10517] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  729.970569][T10517] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  729.986841][T10517] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  729.997847][T10517] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  730.021302][T10517] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  730.985710][ T9338] Bluetooth: hci6: command 0x0406 tx timeout
[  731.151486][T10517] ------------[ cut here ]------------
[  731.157362][T10517] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2d0, CPU#1: kworker/u9:2/10517
[  731.168056][T10517] Modules linked in:
[  731.172192][T10517] CPU: 1 UID: 0 PID: 10517 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  731.183351][T10517] Tainted: [L]=SOFTLOCKUP
[  731.187686][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  731.197784][T10517] Workqueue: hci6 hci_conn_timeout
[  731.203780][T10517] RIP: 0010:hci_conn_timeout+0xff/0x2d0
[  731.210111][T10517] Code: 48 89 df e8 13 77 09 00 eb 07 e8 cc 3e 6b f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 47 bb fe ff e8 b2 3e 6b f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  731.229807][T10517] RSP: 0018:ffffc90004b97a10 EFLAGS: 00010293
[  731.235886][T10517] RAX: ffffffff8a56723e RBX: ffff888034be0000 RCX: ffff88802ea00000
[  731.243875][T10517] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  731.251863][T10517] RBP: 00000000ffffffff R08: ffff888034be0013 R09: 1ffff1100697c002
[  731.259864][T10517] R10: dffffc0000000000 R11: ffffed100697c003 R12: dffffc0000000000
[  731.267863][T10517] R13: ffff88801db19018 R14: ffff888034be0a40 R15: ffff888034be0010
[  731.275844][T10517] FS:  0000000000000000(0000) GS:ffff888125f44000(0000) knlGS:0000000000000000
[  731.284823][T10517] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  731.291465][T10517] CR2: 0000001b32c0bff8 CR3: 00000000424c7000 CR4: 0000000000350ef0
[  731.299669][T10517] Call Trace:
[  731.302934][T10517]  <TASK>
[  731.307113][T10517]  ? process_scheduled_works+0x9ef/0x1770
[  731.312831][T10517]  process_scheduled_works+0xad1/0x1770
[  731.318940][T10517]  ? __pfx_process_scheduled_works+0x10/0x10
[  731.324919][T10517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  731.330591][T10517]  worker_thread+0x8a0/0xda0
[  731.335175][T10517]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  731.341558][T10517]  ? __kthread_parkme+0x7b/0x200
[  731.346552][T10517]  kthread+0x711/0x8a0
[  731.350633][T10517]  ? __pfx_worker_thread+0x10/0x10
[  731.355728][T10517]  ? __pfx_kthread+0x10/0x10
[  731.360350][T10517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  731.365974][T10517]  ? _raw_spin_unlock_irq+0x23/0x50
[  731.371191][T10517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  731.376922][T10517]  ? lockdep_hardirqs_on+0x98/0x140
[  731.382113][T10517]  ? __pfx_kthread+0x10/0x10
[  731.386725][T10517]  ret_from_fork+0x599/0xb30
[  731.391304][T10517]  ? __pfx_ret_from_fork+0x10/0x10
[  731.396490][T10517]  ? __switch_to_asm+0x39/0x70
[  731.401250][T10517]  ? __switch_to_asm+0x33/0x70
[  731.406025][T10517]  ? __pfx_kthread+0x10/0x10
[  731.411325][T10517]  ret_from_fork_asm+0x1a/0x30
[  731.416102][T10517]  </TASK>
[  731.420005][T10517] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  731.427273][T10517] CPU: 1 UID: 0 PID: 10517 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  731.438441][T10517] Tainted: [L]=SOFTLOCKUP
[  731.442752][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  731.452795][T10517] Workqueue: hci6 hci_conn_timeout
[  731.457926][T10517] Call Trace:
[  731.461194][T10517]  <TASK>
[  731.464110][T10517]  dump_stack_lvl+0x99/0x250
[  731.468781][T10517]  ? __asan_memcpy+0x40/0x70
[  731.473396][T10517]  ? __pfx_dump_stack_lvl+0x10/0x10
[  731.478587][T10517]  ? __pfx__printk+0x10/0x10
[  731.483182][T10517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  731.488811][T10517]  vpanic+0x237/0x6d0
[  731.492793][T10517]  ? __pfx_vpanic+0x10/0x10
[  731.497284][T10517]  ? is_bpf_text_address+0x292/0x2b0
[  731.502554][T10517]  ? is_bpf_text_address+0x26/0x2b0
[  731.507745][T10517]  panic+0xb9/0xc0
[  731.511465][T10517]  ? __pfx_panic+0x10/0x10
[  731.515897][T10517]  ? ret_from_fork_asm+0x1a/0x30
[  731.520834][T10517]  __warn+0x317/0x4b0
[  731.524803][T10517]  ? hci_conn_timeout+0xff/0x2d0
[  731.529751][T10517]  ? hci_conn_timeout+0xff/0x2d0
[  731.534681][T10517]  __report_bug+0x288/0x500
[  731.539177][T10517]  ? hci_conn_timeout+0xff/0x2d0
[  731.544114][T10517]  ? __pfx___report_bug+0x10/0x10
[  731.549132][T10517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  731.554754][T10517]  ? __lock_acquire+0x6b6/0x2cf0
[  731.559722][T10517]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  731.565094][T10517]  ? hci_conn_timeout+0xff/0x2d0
[  731.570025][T10517]  report_bug+0x16a/0x220
[  731.574382][T10517]  ? hci_conn_timeout+0xff/0x2d0
[  731.579309][T10517]  ? hci_conn_timeout+0x101/0x2d0
[  731.584333][T10517]  handle_bug+0x98/0x200
[  731.588574][T10517]  exc_invalid_op+0x1a/0x50
[  731.593086][T10517]  asm_exc_invalid_op+0x1a/0x20
[  731.597941][T10517] RIP: 0010:hci_conn_timeout+0xff/0x2d0
[  731.603482][T10517] Code: 48 89 df e8 13 77 09 00 eb 07 e8 cc 3e 6b f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 47 bb fe ff e8 b2 3e 6b f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  731.623095][T10517] RSP: 0018:ffffc90004b97a10 EFLAGS: 00010293
[  731.629187][T10517] RAX: ffffffff8a56723e RBX: ffff888034be0000 RCX: ffff88802ea00000
[  731.637154][T10517] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  731.645117][T10517] RBP: 00000000ffffffff R08: ffff888034be0013 R09: 1ffff1100697c002
[  731.653081][T10517] R10: dffffc0000000000 R11: ffffed100697c003 R12: dffffc0000000000
[  731.661043][T10517] R13: ffff88801db19018 R14: ffff888034be0a40 R15: ffff888034be0010
[  731.669029][T10517]  ? hci_conn_timeout+0xfe/0x2d0
[  731.673983][T10517]  ? process_scheduled_works+0x9ef/0x1770
[  731.679707][T10517]  process_scheduled_works+0xad1/0x1770
[  731.685272][T10517]  ? __pfx_process_scheduled_works+0x10/0x10
[  731.691254][T10517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  731.696885][T10517]  worker_thread+0x8a0/0xda0
[  731.701499][T10517]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  731.707835][T10517]  ? __kthread_parkme+0x7b/0x200
[  731.712770][T10517]  kthread+0x711/0x8a0
[  731.716837][T10517]  ? __pfx_worker_thread+0x10/0x10
[  731.721949][T10517]  ? __pfx_kthread+0x10/0x10
[  731.726533][T10517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  731.732185][T10517]  ? _raw_spin_unlock_irq+0x23/0x50
[  731.737393][T10517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  731.743032][T10517]  ? lockdep_hardirqs_on+0x98/0x140
[  731.748232][T10517]  ? __pfx_kthread+0x10/0x10
[  731.752846][T10517]  ret_from_fork+0x599/0xb30
[  731.757426][T10517]  ? __pfx_ret_from_fork+0x10/0x10
[  731.762532][T10517]  ? __switch_to_asm+0x39/0x70
[  731.767288][T10517]  ? __switch_to_asm+0x33/0x70
[  731.772043][T10517]  ? __pfx_kthread+0x10/0x10
[  731.776630][T10517]  ret_from_fork_asm+0x1a/0x30
[  731.781420][T10517]  </TASK>
[  731.784649][T10517] Kernel Offset: disabled
[  731.788960][T10517] Rebooting in 86400 seconds..