last executing test programs:

19m51.701301248s ago: executing program 32 (id=1029):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
utime(0x0, 0x0)
syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000180)=<r2=>0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4684})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004)

10m50.024573942s ago: executing program 33 (id=1905):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = epoll_create1(0x0)
r3 = socket(0x1, 0x80802, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))

9m57.241266716s ago: executing program 34 (id=2005):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d64656661756c742c0099f5d7f5e667601820a20492cf0082b38a04dda1d1835d80c76a090dccd479f8"], 0x1, 0x14d5, &(0x7f0000001580)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000087d043b486843ddd1de99317e99a4ebc"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x10000003, 0x293})
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r4, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf2505000000200001800d0001007564703a73797a30000000000c000280080001000b000000"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000)
unshare(0x40000000)
syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1)

7m26.324255129s ago: executing program 6 (id=2344):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x10000007, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x8001, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x800005d, 0x4810)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
socket$rxrpc(0x21, 0x2, 0xa)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), 0x14)
r3 = socket$isdn(0x22, 0x2, 0x25)
r4 = socket$isdn(0x22, 0x2, 0x22)
dup3(r3, r4, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0xc8, 0x8, 0x1f0, 0x5803, 0x344, 0x2e8, 0x2e8, 0x344, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0xff], 'geneve0\x00', 'geneve1\x00', {0x80}}, 0x0, 0x188, 0x1f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x1, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x81, 0x8, 0x6, 'syz0\x00', 'syz1\x00', {0x33}}}}, {{@ipv6={@private0, @local, [0xffffff00, 0xff000000], [0x0, 0x0, 0xffffff00, 0xffffff00], 'nr0\x00', 'caif0\x00', {0xff}, {}, 0x1, 0x6, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468)

7m16.305775395s ago: executing program 6 (id=2370):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000580))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSW2(r3, 0x5453, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0)
r4 = creat(0x0, 0x0)
add_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000180), &(0x7f0000000100), 0xfe, 0xfffffffffffffffe)
write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0xfd14)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140))
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close_range(r6, 0xffffffffffffffff, 0x0)

7m12.249019038s ago: executing program 6 (id=2375):
syz_io_uring_setup(0xf3d, 0x0, 0x0, &(0x7f0000000540))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

7m10.370882858s ago: executing program 6 (id=2378):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x18040, &(0x7f00000004c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@errors_remount}]}, 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U9oHNUfAPDvzCbNr21+pgUFlR6KChVKN0n/aPWUXsVCoQfBSwybbQjZZGN2U5vQQ3ovYkFR6aXeFPSoiHgQLx69elE8C6JFpelBVia7m7ZJNm7SJlu7nw/Mdt682f1+X2ffmz+ZYQPoWoezlzTiqYg4l0QM3FXXE43Kw/X1lm9eLtzuiUIStdr535JIIuLWzcuF5vpJ49/9EbEUEU9GxLe9EUfT9XErC4tTY6VSca5RHqxOzw5WFhaPTU6PTRQnijMnXnzp1OmTp4aPD69mcr+u/nTt7avfv3Lj2iefHVoqvDeWxEj0N+rubseDVP8/6Y2RNctP7kSwDko6nQDbkmv0rt6IeCIGIveA+hrw8Kv1RdSALpVsuf/vDWMGPAqaxwHZ+W9zuucAYWlnjz9+PVM/AcniLjemek1P/dpE/G/l3GTfH8k9ZybZ+eaBnU2NLrB0JSKGenrWf/+Txvdv+4YeRILsqG/O1DfU+u2fZtv/zU8b660df/qb107vU3P8W143/qWr41+uxfh3rs0Yf7/+84ct41+JeHrD+Mlq/GSD+GlEvNFm/OuvfXm6VV3to4gjsXH8pmTz68ODFyZLxaH664Yxvj5y6OXN2r+vRfyRTdqfLZtts/1ffPf5M612o1n855/dfPtvFD87Bn+nzfgHb338aqu6LP54i/ZvFj9bdqPN+C+MHP6xzVUBAAAAAAAAAIAtSFfuZUvS/Op8mubz9Wd4H499aalcqR69UJ6fGa/f83YgetPmnVYD9XKSlYcb9+M2y8fXlE9ExMGIeDe3d6WcL5RL451uPAAAAAAAAAAAAAAAAAAAADwk9q95/v/PXP35f6BL+Mlv6F7b7f/GDfjvu7cfJx3LA9h99uPQvfR/6F6t+v/tr3Y5EWDXtdz/9+5uHsDuc/wP3Uv/h+612v9r/vYH3cb+HwAAAAAAAAAAAAAAAAAAAAAAAAAAdsS5s2ezqXb75uVCVh6/uDA/Vb54bLxYmcpPzxfyhfLcbH6iXJ4oFfOF8vS/fV6pXJ4dipn5S4PVYqU6WFlYHJ0uz89URyenxyaKo0W/KAIAAAAAAAAAAAAAAAAAAADr9a9MSZqPiHRlPk3z+Yj/R8SB6E0uTJaKQxHxWET8kOvty8rDnU4aAAAAAAAAAAAAAAAAAAAAHjGVhcWpsVKpOLf5TNrGOo/eTEQsrVmytc8Z/Wv3cs6S3dbbk6X7ip5EpzeTmR368gMAAAAAAAAAAAAAAAAAALvqzkO/W3zjlR1KCAAAAAAAAAAAAAAAAAAAALpS+kv2mkTEkYHn+tfW7kmWcxF9sSci3rp+/v1LY9Xq3HC2/PfcSn1EVD9oLD/eifyBNi3X6qLZjwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7KguLU2OlUnFumzN9bXxOh5sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsC3/BAAA//+SBtgH")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c90020000800c00030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

7m9.261586394s ago: executing program 6 (id=2383):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "4734640bb9e989e3", "998e944c3756234d905b28a5af2e5410", "f2293d7d", "00c721ecfa1e077f"}, 0x28)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$amidi(0x0, 0x2, 0x2c02)
unshare(0x40600)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40)
close(0xffffffffffffffff)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r3, 0x1)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x8, 0xc, [{0x7, 0x8}, {0x7, 0x3}, {0x91a, 0x5}, {0x7fffffff, 0x9}, {0xa, 0x3}, {0x8, 0x2}, {0x7fffffff, 0x74e5}, {0x18000008, 0x7}], 0x98, 0x8, 0x6, 0x2, 0x3}})
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)

7m7.073452697s ago: executing program 6 (id=2386):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000580))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSW2(r3, 0x5453, 0x0)
r4 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0)
lseek(0xffffffffffffffff, 0x207ffffb, 0x4)
add_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000180), &(0x7f0000000100), 0xfe, 0xfffffffffffffffe)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfd14)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140))
syz_emit_ethernet(0x0, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x100000000)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close_range(r6, 0xffffffffffffffff, 0x0)

7m5.870802643s ago: executing program 35 (id=2386):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000580))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSW2(r3, 0x5453, 0x0)
r4 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0)
lseek(0xffffffffffffffff, 0x207ffffb, 0x4)
add_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000180), &(0x7f0000000100), 0xfe, 0xfffffffffffffffe)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfd14)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140))
syz_emit_ethernet(0x0, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x100000000)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close_range(r6, 0xffffffffffffffff, 0x0)

6m50.23345672s ago: executing program 5 (id=2426):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0), &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="580100", @ANYRES16=r1, @ANYBLOB="0100000000000000001b7b00000008000300", @ANYRES32], 0x158}, 0x1, 0x0, 0x0, 0x4004041}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r2, 0x0, 0x7351, 0x8001)
lseek(r2, 0x0, 0x3)
ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00')
splice(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffff0, r3, &(0x7f00000000c0)=0x8000000000000000, 0x401, 0x9)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

6m49.117977557s ago: executing program 5 (id=2428):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000580))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSW2(r3, 0x5453, 0x0)
r4 = creat(0x0, 0x0)
lseek(r4, 0x207ffffb, 0x4)
add_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000180), &(0x7f0000000100), 0xfe, 0xfffffffffffffffe)
write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0xfd14)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140))
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close_range(r6, 0xffffffffffffffff, 0x0)

6m47.816991124s ago: executing program 5 (id=2430):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x21081a, &(0x7f0000000040)={[{@grpquota}, {@nobarrier}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
lchown(&(0x7f00000002c0)='./file1\x00', 0xee00, 0xee01)

6m46.244383103s ago: executing program 5 (id=2433):
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffeffff)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
pipe(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"})
open$dir(&(0x7f0000000000)='./file0\x00', 0x10003, 0x20)

6m45.191578089s ago: executing program 5 (id=2436):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r7)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r8, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x4040001)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r9=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="12040500d3fc03fc01", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000080)=0xf3e, 0x4)
readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/228, 0xe4}], 0x1)
getpid()
r10 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000780)={0x1, @pix={0x0, 0x100000, 0x35314142, 0x0, 0x0, 0x4ad5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1e, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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")

6m38.481282217s ago: executing program 5 (id=2445):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
readv(r0, &(0x7f0000000580), 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x594, 'syz0\x00', 0xffff}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

6m37.045047634s ago: executing program 36 (id=2445):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
readv(r0, &(0x7f0000000580), 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x594, 'syz0\x00', 0xffff}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

3m39.936489253s ago: executing program 4 (id=2776):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "4734640bb9e989e3", "998e944c3756234d905b28a5af2e5410", "f2293d7d", "00c721ecfa1e077f"}, 0x28)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$amidi(0x0, 0x2, 0x2c02)
unshare(0x40600)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000240))
close(0xffffffffffffffff)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r3, 0x1)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x8, 0xc, [{0x7, 0x8}, {0x7, 0x3}, {0x91a, 0x5}, {0x7fffffff, 0x9}, {0xa, 0x3}, {0x8, 0x2}, {0x7fffffff, 0x74e5}, {0x18000008, 0x7}], 0x98, 0x8, 0x6, 0x2, 0x3}})
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)

3m38.121908953s ago: executing program 4 (id=2778):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./bus\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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")
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r3, 0x0, 0x15, 0x0, &(0x7f0000002700))
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)

3m36.220204923s ago: executing program 4 (id=2782):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0), &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="580100", @ANYRES16=r1, @ANYBLOB="0100000000000000001b7b00000008000300", @ANYRES32], 0x158}, 0x1, 0x0, 0x0, 0x4004041}, 0x8000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r3, 0x0, 0x7351, 0x8001)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00')
splice(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffff0, r4, &(0x7f00000000c0)=0x8000000000000000, 0x401, 0x9)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

3m32.545634304s ago: executing program 4 (id=2790):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c756d61736b3d30303030303030303030303030303030303030303030362c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d25b5e9122c6e6f6465636f6d706f73652c6e6f626172726965722c666f7263652c7569643d", @ANYRESHEX, @ANYBLOB="2c6372626172726965722c6e6f621a32b86172726965722c646f6e745f6d65617375757365723d3b5e283a232c0000000000000000"], 0x1, 0x6da, &(0x7f0000000300)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r2=>0x0}, 0x2058)
write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x4000, 0x18dac4, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x10}}, 0x50)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20)
syz_fuse_handle_req(r0, &(0x7f0000004340)="265ed300624cee917954148609d0f2ac52561da46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87163065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5025ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d780db436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717094ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc5ac881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696e9b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47bc67ad596672a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075c7bd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599b0671f3129bc87cf4221d8ce101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c146367b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f0f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c571d0ec4e5775159daccc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900332b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59044d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff2aa9c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a4118dc8f95c70e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d069712efd0853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a62406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493b672324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f098218a3ca21a6f369d47a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd", 0x2000, &(0x7f0000008f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008600)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f000000afc0)="011b8f3090354408345b464fa7017c253968306d726f3e85571719469971f84ddb2f510f3570ea8ce58929e5f734382614c5328e4fe8dcf3838284f5c75e0162a11eb4a1426c6755d379892d5e4447afad09f9175ea5a143a616984e540804bd5fe80340edc490f297505a1ecab72560b3370f0c9b5b814261aacb9a3ae4e097ab3e7fdfdeb2380149f79625fa2b17df9fc006275a9d3ab7d09c6883610de373b5a6f082f12a56063a5fd5922f0560cc20a6acbe18b7dd099c59f3889a88f45e5ec34a1cc8853f73af31effa15e9e29693256c6e7f67b4d81af823874c2216beaf98e07dc73bd0d6ccca624244fb1f0b8221d434a1f64fa798470fcaa27da66ba51ba16aef5f83b49b0f3530b5f4b55c996bb422aaf0f2c5972de5939fd86eff91e33689a4da4603c954ff871e362e4dd26c173c7834a1e76699bb5790c5cb5f08d4e9e1d92730e484a24eb9a0fe6276a6d8b8a90f601fa6a1bf565a787d3bea9c719b839d56308ad71faac1cfd744f706659f4317d3d06aacb1087a9138d975915a3d11d440c05f8e9668ae7ed47a4d2b03294fb85318e87763151c7d9452506705637b23e2f0360223082aa89cd6439e126844bff0dd66ddee4e6535458e2d35dd4d61361dc804fcf04150938ecf9efc858dcd3e308dc2417ba1a330a71510aa518c6c03a6d5df4d7ab8f67b7018800bffc719490765bda7ef03a6d122cb3e28cba896ef2e074e5363069b3cfdd427f1094936f67f8a0935ef82db4cc73de115eb3550e3eaca07a619d8458fb1c5691c98f0c217e30ed457a77c340cfba90a2bfd019fbf38b1fb069726e556b9b310af85fbb7062fb46391360948df54695301e70efe5cf4a27553cddf0ef2dcdb88a2f0654332c72520265774d4b30160b5f4d69600afca5fed3bc4e88dfab03344e2138b300d7f361b6ce0a46cbb20a9ec6201907360c4430059611dc221c426974d9b725d33ac59352ca153560850e274b7370c181c5ba6426444e9e8bcb8602aaec7b3d438e5bda1b729cf1f03cb8f189592ab88f8560f2c8248a2fb406a5fe6ac12d4ed79e6198b863efca921d17753dfe192f71eaad4866453ae1b5dae2b67981b53421fe48c65129e7fce207c708358e1045e1fd8151e2fa25e0243009f57d939728272f9a8799f87969f815f8891337eda35be36ef91f52cdc1e2b5ba341523bc7a41d66a45717a7021644d96d4e20e4b6b1abbb8c4dcf4658b338d11a0081e77aadd7caf43359895683e938dfa4dda17884796015f78c3e93ed0955e8c74eb02e27c57b2967c125a5c2b42b95b7e631cd2c2e6ff5dcf42489b4ccdbc64aabb95b09f19cafe072f5e4ba18524ffeb6f75c413477a3609acbe46a2ad9bb8e26bfb29e50f5d1389ca256be297d17efc0177631a8b333e9a4e17988731bb4077caaaf281c4ba67732e5c3c5de31a0610ab53c7d8a502ab89eef82bc99fe3854422e46c83cadd80963b1b4e43926b32780316f5968155d365553ef135df01a6c09e6ae438fad9a5799d0468ea958104aa966a6752848d9f5f3577d111099df9391fb98243c23f49681f9d2ad40f699cb0dfad2b7d224b5f8ba1d433f1319005f58691aac3036c5c23d5121a47a75b22fecb6375e97a1d19a4c31cfe534aea1fb3dce648f6788356d9f0872a0e8b25f14c4504fed5f767730ffe80afc7b683b443de2e8d35be3d28712fd6d6808362fc832b9b7b7fe931202ad5104d696f3daf2ef1b3b8f095a98cab80fa0986b8b8eaf64bcbf6168afe30cfd8530506f5cc1fa024b4783b1decf9fc9494d35a81d0716080d1e0fed604c00d84fa7e58a04c8edfd7c126f29e4865659f1458b0c7b73ef8c4f466323e3ef3d4e4d9a719c995061ef3306a83e26b715602473f2de9eda1d9f3bcb87f8083ebc5c7e54205c42d36033f0009ee387edbf7524f2b6ce10a958ea2f15305c6c5e31e7613cf19b5f89c79639ec64bb849c59405dc83a854654f5649b5364a41acd8c695e39aa583f1b7122e3d15044bc3fd57a170323c556192b997b279dfb8cf4b14f8bf56c5304ce8ed801ff4fd5e9b75b29f493948fe830a1cd6ab0a53a2237b0b0ad678e82f2c76b8c03d4ed0f7698b894689fb5f01e5124084cfda9ed5452dd5f92e385dd9217a531a248e57b0414a82bcf7776f3a6bbc3c453fe1a116f68b2cf64170fac9c40bef6bc0ac037da037ee559bd47e7cd4421223e5b7064c70a99ae3eed9759f41b8cdfa40bc4efb48810796665af5b720f5cf7daace60d93f3865aaedd8bf240150c026301a9b9986a487198fbde7087fb7150b6ac9a9d1bdc2fedbcec2f64a61a0d0a9e144e560f94de6357baa506f996de1a864d4954d5f1a640eea057e7209dedc5ab29fdbdb56476f20fd461f231350fc9a0f5e2ea2450d1d1123b3f47baed9a246c296794955802ac2143c89008fc88ac1b411268d6480fc544a1c4ca55aa6ef2ef0f2b1bed522367e70bff30548d149d5be9089bb172d586f8f7073d258bf12d7bece65c4d68162eae8043fc54c3168d3c9fc44db749528b14a3d359c52dcec031bc065040379a6c871c15a3bf9eee0ffb93a1b312ccf39a21e8c7a17f97fd30c2d6c6fbf3776f566ea056473d01181210f47a20b1af8a5bc0ea168d2a11d9a64510540415a9fc9378becaeb3f41ee5caa488bae818667c4830825c2f6dd54639641b915100a687e34200f1254e3685aa510b0e7a67184126900f9ccbe0ff7028d782c365e85f05baf9539f5c13d3c2991322105fb72c1f5462f3195c69268ffca3fd86ad7e4c5f5c3c90a50f012d7ca399c86d4f2c64063e812df2819cf93c2987ffc970530886c8d7e260a1e4a0f094654b446e979bb82a192633f4cc6b0f86fac2dc5db86ecec8a1cbd5d5750256d5418e77250ffb8a2241bd348cae29c188c8b75ad041372461fa833bb8a67fb3871d7f62987f1e747d4159f086a2a2bf2e4e8a2174cca605b3ad6d8e5f3a3a0492e6cc41a4dd0d6023af37de85ee233bb5af56f7f355ada5ad336ddbc49edd52da46021c36cc77960aa876b662cfe37aa666b8065b2006cc182cbeff207170093be06a68120aab9a76ccb79042ee0c30c666900656fb7eaea77185b6bdb1a06d1af7485bf2ae4df9e383a887a0bce40a02a3aebba7044e359f025a0b89f38e21fac64dcf44607d182e1f32db16afd1c76de87f39669d02a971d8e19d8bef8ea190fe2d4d288ab70760ce46646a70b10ba32431169ab606cca56038595745b8f50ed51965215ad58ff28ca63774af1749297bcad7cca53abd9e5ecabdb44528fb8599ff34cf513d8b6e7e4728866f85aea489cf3e37cab59cf52d346f3967fc887dbed845489215159534114fd71e5d11b3614c8118364ff85827df0d2ac75706f5b1e4227c888e5eefda68fa2ea17ae06e9abb061fb0634007cc02b2a051b0e323e071f9232a59a8da9496c6f8a0448c269850199f88f002748c212b60647f3d301e18ab114fa13abd48da6867db5c04ce204789a682678585c0326c7bbf92aeae8b5e96d40d808676215e79696f49b7860667aedfeaf8505a2f1068194d358c1868f6f9a07ede29497175ad7e8b5fa77913b1833587806200b46da2883e434a1ed54490cdb6c55b3fa88a74b27dd5b598fc6bb6e36dba31bc8331a548921bbae2f1d909f430ab694ecc414c5abd81427385637f87c7e8065350eee90d37501a03ffce3dc5d372dfa61b61292ba4677373309b260db760edb75109e6b4e975225341e8719113b0623a055c5bab5488dfdfad0cc473a3bce059630621a0ae6501fdddfd43852e34d08151cc99554300ef21be11f6b5d9201d463812f5f132a4d772f2ea04f6acf913a1bc5ab709839034dc97060bf0bef54e6e2b14af07452e265ac03c8e462e28622e0c76a53c5f2a49155681b9b6dac998b325108eeae96885a7e07e89a97b857f2d01cf6356258dfbe2b86f4df51f2d75aadf38236f2ee87aaec17fa421738173e5b93c0e6f6c3845fdbd90eb950bfc546d89a40478409fc07bd6cba0276085e840ff6e48552a698993522b3f9706da2d422069dd3bd95f2240a0c29bfa3edf58d4a9b54969ce33034e350668e3dca0284fde64b87ed49976488ca5bc80e337537a5d988e95cc22ae9e2e19b526cbc15eb104c310a0d4400e79ded1cc25b12f2b6e909b9c81264d198bcd0c350e3abb2a0dc5c105f141cb8e9df9f35a98caeec5415777fa144e446838bf74023b3695413b80c9857e609a85e6c0b982947f1de528d725435072359cc105c65c3eb97e203e30bf26f6fd325e29974fb4d41083a43d59fc093f2f758f1df80a0e12998df9fb4e3d2fc7c552ce0a0b53808d9649dace8547affecb33b6aae64b2636890907442825b7cdf21ae6d14c5464f925927275cc031d63c20825d6e3759b9b2fb0d007615777958aa681f28a5bcbbe752023aeb7dde8589b80d845f22408137aa0d01d324c4d87bd1841d882c5d42fa937efc0ca432736448a2272b443992a4b14f3e6ac02d120b187059077280de5c235002b02511dde3226c383dd4e69940db7827c5d7998c3d130410959fad218810a61456efeecaa68c53ebf39200101f9b8a6165b4e3cd39970a7aa21311515fb98cf4697ec64d9f7306a32f3853d26416f67582f08c5e1b574237abe495b8a6399ff820aca046a07dc640c3b8e059e042dc9ec404fed3bd406f87207fcf0ab0bad2fb655f536b3680a3f551007543f82e4b805e3344ef52cf18e76e76491545efb3703cacd5216f84b204d63060b4fc2ce55a7964aee06dc47a016456d1f17109eede1c6c4adad1386993a61d840eaebeadaf2e6eb3d0731162f99c5a6457b94fe86895940abb9c003060f797e6ae02c0d956964cecb77d61506093e546af9a02355e344e457fb8a3b2a67bbb6cf04cfff773084df8cf73d546764566938a863568c2c3196e36706d48e860fb2deaeb8a94a3faa276dc133df0dcb64e5b0e4394d22f3aed9e3f906381ec5b3d657e0d74a59d419b88d4919f5ba3914cfaaee457cddf7e3cb89ec2ecf0ff086f35786459d97c54300cb5635866a6e0f9616c07cc96f21644a643b804c4fa7f60a3827304ce8b07fdb63974dfdf1001e92abd34d680d9f2b2684b12ac9b2844d33a35ac27f3967b2e1b44f494674b79d27ea1bc366fbaf93af7a1d8c5b65a810537fb8951a9a2c1ef69c730fe190948de265e734c6b9503a86e9f84af7b115e4ebecde849c32aeaf010eadc4a6d45253de6780829e83517c82328d7ffbebf97ed9ef9aba803ac73acc89e2a21c2db4c387753434e3ae3f0e7d28187805aa69885e7cb3493363ce788f2e907f48bd014be3d287d6986a1482d15da25b6651c20efe100bf93d23cef68ffa95801bc885fdc1bc2a15e7755c252786cf6fdd8987777e53b8a5c7f92b718c8f6b2c7fc859eb590bd890a6d306b43fab241b7445938e1098107922efba7f911dfdac27e660e90b1023c00f93709ce4b56ad7b820f4854bc8fd32b4b03c97e1183a354e3470dd98ce16e4c2013421c75bcc2bbd52a04592b5fe499d434bff80eb5e1474dd6da500fe7b55c4c0e01155b9f48d3f46b0abe211e8dbfccc9c84797c16f9c96e988a86403bd9bbaffd6c0117f6e8e4e437586f2e2a4ed84619ac5a890ec5200231569df100299872018be869ad793b468f8d0472512f0fd6851a4b74693ea7af600fddda11a1dfccbd0f1438eea37558267fb6c3fe857c01ded34e4923c7616f901669f7c03f5f1078b35e7b84d0aa73844cccd68c199d280a2ba21eb423c731dff0b026b71f21f42ac254e3864faaf5d80cca07c471ead68d2e11f0df03293fba894f04d16dac169e94538a2425caedaa3730fbf77e19e3ad291a2ddf5081e145b4303a0e6a10ac93f821cd4709353ecb64252f03a47c874434ed2d8152961b62366c6332b7b8cea78653cc6b9a642cd367ed383ec84e7540cb84fcf7f27e3f555357b56f40d98be7b3192aa6d0ac5dabdc2dd102bb131362df2050614d5dac815f428af1913a77d9c92668056a3ad82284d646961ac3b49108285b698f19dfd471e2fba717d860111c0443cf50efbd945becbc5eade48e7bce1dc1fd9577d7ac04e747569d08cd7e5115dbc92fb35aee6a05f4a2406a165b353d411d910e5f471bb1f11b7fb7cc267743ca96c9ce30ca2e7d636ffa82f06cb9f0f562df0cbc41cbef41ee5cebff595e8bc45c3554fb3eb8a94afe0e816b1d1e8ef90a3ffe50eb7bf35b01def36608d4bfe98dacea1968c407e8dfd6534c1e10878cf9b6d18f2a14700dcfaa77733b73e0114905a829a982de7cec55a7633e38a441789380c505ee8810f83e6bbf022570efd4b02362c4a11c44e814011613c8cb536fe5151d2b449a34b5d4bc47452a2afc7c2e900de2141530c48ee476676aa4748c7a47988d238351ac5adbb3d5f6b22cd8a8c5ca8bb683dbc793e464f48a981b3d88bf88382a9c28860a4dd1fa7ce604bae289bf201b2311962ed32279d8ea2490e931e4a17c6b062e3ac27ba2339edaba58e79ddc5b8e03202b564ce671fbbcf93e793e4097f88f154fb73fff80e2df98e827232bf88fedd75a6ecad2a797af8bbda4e501a8a0697a5d1f0a1e6b9a13c9a4b3829da8428f64aef6fd81aaf3640d54eeba0a18eabef801da8e0e73040ddc94bcb99bf42c348fba80f4a14d74bf24723552b2e887afda887c360781c2c87733812b0c36da7f8f021218e82c53404066a16916f4db2abf08c0950e3596025c9523d0815073add9325c008c3257bc4f023a02445e8747f87d4d9c0ccb27101ee0971b006a6bb229ead02c7f6ae3ba1f56d82b2dd36bf31ca11fcc280db53eebd9e66b64660baed3992da0b12add4742188f0b1e729624a2d096bcfb9040ef8edbc1547977c2f110f1ff5373ca8ef859d438bc0fcf47252af88b6768eab5bb0de8fc0d8a3d54573cf9ce230e0d42d06510bfd338033fe68ae027dd2bf87350df3f08835f17ad52a9e4737a3f5bbcb7a4d803fa9e4f996dff2c7b2d64d5758a2dcb85b8e8877c5aa97af23737ff7866ecd940fe758b360a916ba9da432d11c0f4896d741b5c2385be6bf38954968adcf875846ca70f81ec5e82682afd9805d0fd2a700a2d2eedbb011244eeb585c28fc93e245df5016e334850b587746c5390b1e73bd38522cb639dafe07bd4a11c9fa39fb5acf9887b53f085a9e251f04ac86a32b9accc3a2854171db73394f361152400f711bffe9ab1739fe062daec174965e216712f23a36aa397470e27a014cd69c6644e87fcd97f5bfca5d55a25f767a12f9eb472939b1ec90f6d8ff200f5e343cd6134281655ea618adbb8afe411fdc2fecfefee6b14c6056e1291a6061d144a0123aa0fba2ddb9d7c5015adce2677009c65d0461c52c989557951af50826ec896f9c650e116919a60baf1b82adf114f03fc7cf705791d54f0368c81eadc9d7ea97e7f1ccbb5add2dd6601f4feaa5481bbf81204e98ef68b557ff9d5e0fc0335ebe48a1317ede5bcdb905351c9939f2485e7c0421135ededd95566d4f92b7812f749fecc0cd295ec09e5f80d977983c324cac1d3d4080a6612ae820ea5409b2f0b9bd0a1a764d76cd7b2c5792b05cdba57d1886223ac73f3cf907ca532a8565bafe46acfa66babe7f12353c94eb023be00e164a8e3aef36a3c2925303dd006be894abc97ee86a7bfe8db858da74fe1cd2a38c59a23c539738f3b8cd37d3b640651f9de52848fc796ac1b0e21f6f59be00b559d21d2bb3ecd8ccfd3e03cc6804b4958659f9d418db204bce24c551b9047c4a48403a538438b5893c90f0b0b4421fee7248036ebf3fd7cdd5274f53bbbcc773ccd86ca1e6f824647955da1a65f2c85a68661ae478e12f682e4cf4b7b29debba4cd019f629760bf12d842da20806865845d5b881bd75997b3a883e6ba2ff1706b554aff928101ef933a8e98747209578161c155b0668cde3d9c2a14764db59f15c90f8f6265e9a1b6784b3bbacefbeeb5c689c056e4c4a95714e8f8c35a4d9783798d9b0a094bd87cf804d5ee63c373adeafd14479f79041e7b158b064a39782616f6b042adc5771c6078eecc73e2c43be8c424e538c963f21678fac6a1462cc3190205ef235eedaa42ae36c46f624459dd89fb52173b636219f9d79467afd9fdcaf92aac1a8d2f84bee332485f6db8f8dcaa598f99de571143bd1108ce32f1eed58f950ce152001e8358820985bce0213c87a495abdbe26be5638418b6eb8265fca2b467c0d39c58224551ba33c0d881f5ae1820fcf82ba0db0311eb7f9464d27b62c49570c780143583608438c96fef7821009d656e67e1882928ed062df179965b505c4bbbfcc8038d1627bc399a2928d0ed751f3189f51831eecadf54d3bf07d7cfbe44be2a003c0e1460d65197864f866020f60321c08a9f7e69b1989e3581bef52ebda227962d1066162545d558c7ce5b97af85883c959b7ebc86cbb44cae0c6098e90869e09749114122413a9792cf6da1c714824173915e6a726043b8f2c138eebc435488a257d9ee42e0fa9685b98fd26bf368b5125623241579968e83006f93031909e3f4c0e8850f103cd0315a1f6c938d7d0e307a5e1de981028d531f42e35338abc65c122a0453f033e80589f44229d5907e948750f1f1f8755c959ae66bbc559be4bfd60e661d6e7b9952a24ec892fd94d2992acf1c50aff63d66323f702fbba60d4f39df78099bd487db34a2de7f424ee1974ef8400677de673ac83374d5de446247f2526f3334d9310a8ff39707ec61c29422b8446256bcfcd13f18e132d5a66c4f1313f0631929f006d77f6bab8befb3b04196a3dbc45b9e585720c171514bf087c1464da875818ac67e63556d925f7ed9801c7b9eb9c4b4252dd966fd9f917a46497fc23df61e3eb61708d867c051cfae2d6e1417bb17119d45fc3da7d31fd92e01229706d9b57f42b7f5986c771b105cef9799cb3be355d2374932cb8137bfbc773ebd803ddae0075e615a2ec6aac5c023b691b43dee0ee120360edf496a4f61d6dfa05faaf141f6ef2a803a0366df91c0decc991f4d4128f7af302a930c183b1b3444d940d132c51ad7eb5c12179b60d35286538bf1d13a9f9c73b20b9a6126f8f92c10df09c41552f9306d017f1f6569edd1f3a8174493df25645e97f0a75604a6e11dd236351de1cc8e5f9ac73e9567f01a2e6482b05b5723cb17a853e330d66942ed75ed847f35cc4ff30b465432669c15928c248952962ca81387929b7cedf0f2cd2630143a855ecf7a2f601c09c4b3315acc2b9fedbb45b67a9f568ee004438369fd13dedff8dd9bb3300fa564acbdb962cb26537bb350dea0c667a2597e30b9db05c376154fe910574dc2ab511ae1b11dd3f6dda1404d1d9d835f4d2d9a11f982bed473b8710291f237fe8ca584fae529e639845256722da943f75ba08a45edecc5ff8eab386442cd97a14c8289391dd5ebce2442180e2b2407d863bd8ad7b6769773f75b2ed1b659528a3ef877eafb24862b9f6efbbeb58608f62ef563cffb407f3179f6e2a7b851f36a99c21510f791141fac774d51fc39f598166864dff9a5f2ec5de4fe35930d6689fb3239266fbabbdd285ca2aaa21e476d9e4694d5df5a6bcd3f09462d3494855a36be353253498a131143537681a5108baf2f2db5164a74cc22776d16e1326a5316c076b81f57c58b6c3600ba5eecff209776bafa662ee445fcd1ef18ce60f035312275f9cf63afb9e8a3eea6e6bfe8b818f4d0dd1fa73c02acf4ba18a4edff42fd6a8bbe29b499c071b9b4aeba7512012c8dd82bf1ceef557c3c47fedea4b454544b38141129c02bc1c5e47b2fd3f5576dc3c136b95bb0cbd572b3622cf1cecd9897642c9bf464a66527912da10fb3a1ec05c8283aa615d8227e897bf8b8ece887ffd430691a9db05a71a612c25b5e1ba5a4f669ea386246d4c74f28ae0e5190f8e9caeb3385a7d426fd8171f7aea7c7a0e43b65374eb48fe27b55d317a39d66d2f82466d97771b0611e3eba8bcc852ca03b652640357fbf20f31fd1c62c7c5f11072f37e38add251789ab383e89964d93ed39b995854559fa920240bd5a3353630e12d08ce2536da882fe973c56039bb22f2368c6f5a3b3f47e02be21061004c1ddb80237dbd2dbe0583a609344447e2301ae1f2816c878a06a875061ea84b775d94b819ebce542d13f9d169fa50c56bdc27bf1ff26ed463101aef4d26da6a0a878a572548d429e7d15bfd10fa0410bfb22a95daf4ad8e85ed63a232fe90e305770f0bd5210dfaa2a88f0b7153ca048891245b21d3f0a1c5b92d5f8d06a0caa9e2eee144fc5f69698ecc57a4ca5d6c54e83c17161db09af3f45df47cb4a28d6c028cf3689cd7a43eeee2a0b691099bc6c36b82fa748b8ebb743b5f70c7f372efec55c5cc754452c267e450c1bcbc482b775e728edd6773b1a15bf4e459513818fcd13a96451626db6ad4ca45f04c7c199f7d3e22af8af8276fea0332bb1a03a49f75186a24108b50747e484534181bf23ef92de5cac9805435d6f2ba2fd975b4ea9b9cd76fda224aea124d64d511b1c3e20d3a1b082f2d214b0585b779fea3d8923cc4b65aed0d5ea1fb895a4bb25bfa58955b529908fff83272e64befef33e7686e0d312390b4a920384e4a831fa3ace2face27c31765be66287df5bd9910483c12666dbdd5adbd2400e05ccd5b17a6e5f65a76ff091dc195c5ef26c1b736f6ca2a05d75d6716ec6c07380477efc14ec885109dcaf959cc2785a22c4560921bc3077214a3509136d6d6678526a8adcc3e53f469539ab29e375a6f31a6d5ccd6c82612aae95aa9e289b87a6fced6cb465cb224ae818d154d90c805457ec6b9ac9ce5ead699cb90090b5a92bffb0ee4075bf1da1bc21f039a81729aab0cf90a2b64327765929d1af8efe859da5394b2b4888535f52bc47acc6a0e1d23070a47e1a40f1508403f09b55135784a17b3b9c6cac9c83310962d543ecddd99bb4bff79d5d8b8d90fc6c7047cd97b1b8f37d2640149618f9eab1abb52963e6df2cf9601419b13baf618457929039277468204ec70fb3258dc9138bdd8134d073638669e303d1ba24b28f0ee1d92d5e92ad176e9216005f984ebed04500f3936955bf4385dd35a32abc59b025b33f7f5f749e8233f1f28450444154a6335636d26f0528fbb2097f1c9bc04416a8efe3a8e1229b413df3d2f5b834d9d3f7d342f125c42ced34f1bc08626cc0330307e974f1a8d7d181fdf5f61288604446bca5ab26dfdd15d20bd4f5f14e26a7fd23356675525828ad6c155cc054ebc53e4ccb32c8cacae85c21c7a0b529fe4a035540d6f8424e65fe232c593396778a0546733651b57583be233ec449ce6a1d3871312b2d73e3e7202be82a28f1bfddb6e93abf405ecbc009e21d06ac1f605cea0fa147ea392790e7bb71bea2439917e3def0c76ea5a972834b18c46eaf0dab9616e99b99232be338c8fb4ab4b21236103ddc5d95eb8de582f91298939950e3d9e59bd553908d7322cfb1e491183022ad929b58e07922436a68ce51ab1023a4b00", 0x2000, &(0x7f0000008e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="17"], 0x0, 0x0, 0x0, 0x0})
getdents64(r1, 0x0, 0x302)

3m31.876190837s ago: executing program 4 (id=2793):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
splice(r1, &(0x7f0000000380)=0x24000000, 0xffffffffffffffff, &(0x7f00000003c0)=0xcf00, 0x2, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10})
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r6, 0x1276, 0x0)
r7 = timerfd_create(0x9, 0x0)
timerfd_settime(r7, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0)

3m30.516550075s ago: executing program 4 (id=2796):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200440c1)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x2}})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000000000000000200082b0cfc4337965941538be020000000000000000d9847400a391793ba7f40000000000fdf700"/64], 0x40)

3m29.65335598s ago: executing program 37 (id=2796):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200440c1)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x2}})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000000000000000200082b0cfc4337965941538be020000000000000000d9847400a391793ba7f40000000000fdf700"/64], 0x40)

1m21.93708325s ago: executing program 9 (id=3014):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000480)={[{@utf8}, {@session={'session', 0x3d, 0x13}}, {@nocompress}, {@mode={'mode', 0x3d, 0x4}}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@cruft}, {@unhide}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@nocompress}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x7})
fspick(0xffffffffffffff9c, 0x0, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

1m21.739618281s ago: executing program 8 (id=3016):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040055}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$ITER_CREATE(0x1d, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)

1m19.451384655s ago: executing program 8 (id=3017):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2e)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0)
keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x94, '\x00', 0x7aef962b, 0x7, 0x8, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)

1m17.206741229s ago: executing program 9 (id=3021):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
write$cgroup_pid(r0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
read$FUSE(r6, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x5})
lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00)

1m14.683739735s ago: executing program 9 (id=3027):
r0 = io_uring_setup(0x70f8, &(0x7f00000005c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)="202dbd", 0x3}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m14.232339347s ago: executing program 9 (id=3028):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2800488, &(0x7f0000000100), 0x5, 0x75b, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnr2R7159cdV/wsP0lI1LVY8SGQ2s+m22U03aZJF9/OB1743M5s333kz897uDDMB9KzR9J9cxOGI+DCJGM6mJxExUM/1R5xcW+72ynIxTUmsrr7+e1Jf5tbKcjGaPpM6mBUej4gf3os4kttYb3VxaaZQLpfms/J4bfbCeHVx6ej52cJ0abo0d3xicvLYiedOHN+5QP/8eenQ9Y9eefrrk3+/+9jVD35M4mQcymY3x7FTRmM02yYD6Sa8y8s7XVmXJd1eAbYlPTT71o7yOBzD0VfPAQD/Z29HxCoA0GMS/T8A9JjG7wC3VpaLjdTdXyT21o2XImL/WvyN65trc/qza3b769dBh24ld10ZSSJiZAfqH42Iz79988s0xS5dhwRo5Z3LEXF2ZHTj+T/ZcM/CVj3TwTKj95Sd/2DvfJeOf55vNf7LrY9/osX4Z7DFsbsd9z/+c9d2oJq20vHfi033tt1uij8z0peVHqqP+QaSc+fLpfTc9nBEjMXAYFqe2KSOsZv/3Gw3r3n898fHb32R1p/+f2eJ3LX+wbs/M1WoFR4k5mY3Lkc80d8q/mS9/ZM249/THdbx6gvvf9ZuXhp/Gm8jbYx/d61eiXiqZfvfuaMt2fT+xPH67jDe2Cla+OaXT4fa1d/c/mlK6298F9gLafsPbR7/SNJ8v2Z163X8dGX4+3bz7h9/6/1/X/JGPb8vm3apUKvNT0TsS17bOP3Ync9m5QORLZ/GP/Zk6+N/s/0//U54tsP4+6//9tX2499dafxTW2r/rWeu3p7pa1d/Z+0/Wc+NZVM6Of91uoIPsu0AAAAAAAAAAAAAAAAAAAAAAAAAoFO5iDgUSS6/ns/l8vm1d3g/GkO5cqVaO3KusjA3FfV3ZY/EQK7xqMvhpuehTmTPw2+Uj91TfjYiHomITwYP1Mv5YqU81e3gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzsM37/1O/DnZ77QCAXbO/2ysAAOw5/T8A9B79PwD0Hv0/APQe/T8A9B79PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvs9KlTaVr9a2W5mJanLi4uzFQuHp0qVWfyswvFfLEyfyE/XalMl0v5YmX2fn+vXKlcmIy5hUvjtVK1Nl5dXDozW1mYq505P1uYLp0pDexJVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwNdXFpZlCuVyal5GRkVnPdPvMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDf8G8AAAD//7WFKeA=")
open(&(0x7f0000000340)='./bus\x00', 0x142342, 0x2)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$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")
chdir(&(0x7f00000000c0)='./file0\x00')

1m12.674356596s ago: executing program 8 (id=3032):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x1008, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000580)={'#! ', '', [{0x20, '^-@\'/'}, {0x20, '\"\x04\x00'}, {0x20, 'GPL\x00'}, {0x20, 'skcipher\x00'}, {0x20, '#\xbbL4}\x13\x8eq\xce\xb8\x17)e\x015\x9fj\xeb\xb4\xda\xc1P\x02\xe8\x86\xfd\x11YV\x8d\x94(\xae~\xdf\x1f\xb1\xe6\xf7\xbdH\xd1\xd0\xc8\xf9)#'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}]}, 0x6f)
unshare(0x400)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x423f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(r5, 0x0, 0x8001)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00002f7000/0x3000)=nil, 0x3000, 0x4, 0x28011, 0xffffffffffffffff, 0x8509b000)
fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x2, 0x2, 0x4, 0xe19, 0xffffffffffffffff})
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

1m12.572355657s ago: executing program 9 (id=3033):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
creat(0x0, 0x0)
link(0x0, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x171c, 0x0, 0x0, 0x0, 0x18, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000010000000000000f0ffefffff5aff000001"})

1m9.177346058s ago: executing program 9 (id=3036):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="04000000010203", 0x7}, {&(0x7f0000000000)="9060572b", 0x4}], 0x2)

1m8.461483562s ago: executing program 38 (id=3036):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="04000000010203", 0x7}, {&(0x7f0000000000)="9060572b", 0x4}], 0x2)

1m8.445475032s ago: executing program 8 (id=3039):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000009c0)={[{@noinit_itable}, {@norecovery}, {@dioread_nolock}]}, 0x3, 0x4df, &(0x7f0000003140)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)

1m7.30431528s ago: executing program 8 (id=3042):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2e)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0)
keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x94, '\x00', 0x7aef962b, 0x7, 0x8, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)

1m5.682765019s ago: executing program 8 (id=3047):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
splice(r1, &(0x7f0000000380)=0x24000000, 0xffffffffffffffff, &(0x7f00000003c0)=0xcf00, 0x2, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10})
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r5, 0x1276, 0x0)
add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0)
r6 = timerfd_create(0x9, 0x0)
timerfd_settime(r6, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0)

1m4.170754969s ago: executing program 39 (id=3047):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
splice(r1, &(0x7f0000000380)=0x24000000, 0xffffffffffffffff, &(0x7f00000003c0)=0xcf00, 0x2, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10})
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r5, 0x1276, 0x0)
add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0)
r6 = timerfd_create(0x9, 0x0)
timerfd_settime(r6, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0)

44.533868538s ago: executing program 7 (id=3075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x5002, 0x9020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}]}}}]}, 0x3c}}, 0x0)

42.420531261s ago: executing program 7 (id=3081):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r3, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
sendfile(r4, r4, 0x0, 0xb)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000080)=@ethtool_ts_info})
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, &(0x7f0000000300)={0x0, "c6cc8cb3533678e6b35b54b3421712f1c73d74b387801f244892df54cdd709fc2631212b9d5237368f8e9a6c1a74bc9451451ce77ccfdc0794fad2d5e78ec812", 0x15}, 0x48, r6)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

41.164972519s ago: executing program 7 (id=3083):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = dup(r0)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64011103}, 0x43)

40.806641961s ago: executing program 7 (id=3084):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'wlan0\x00', @multicast})
syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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")
r0 = open(0x0, 0xca942, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@noblock_validity}, {}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfsroot={'smackfsroot', 0x3d, 'nogrpid'}}, {@appraise}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, 0x0, 0x0)
listen(r1, 0x3)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ftruncate(r0, 0x8002007ffb)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sched_setscheduler(0x0, 0x3, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)

40.184905545s ago: executing program 7 (id=3086):
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x49, 0x8}, {0x10, 0xe, 0x0, 0x9}}]}}, 0x15)

38.272279446s ago: executing program 7 (id=3088):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x1008, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000580)={'#! ', '', [{0x20, '^-@\'/'}, {0x20, '\"\x04\x00'}, {0x20, 'GPL\x00'}, {0x20, 'skcipher\x00'}, {0x20, '#\xbbL4}\x13\x8eq\xce\xb8\x17)e\x015\x9fj\xeb\xb4\xda\xc1P\x02\xe8\x86\xfd\x11YV\x8d\x94(\xae~\xdf\x1f\xb1\xe6\xf7\xbdH\xd1\xd0\xc8\xf9)#'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}]}, 0x6f)
unshare(0x400)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x423f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(r5, 0x0, 0x8001)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00002f7000/0x3000)=nil, 0x3000, 0x4, 0x28011, 0xffffffffffffffff, 0x8509b000)
fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x2, 0x2, 0x4, 0xe19, 0xffffffffffffffff})
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0)

37.507528471s ago: executing program 40 (id=3088):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x1008, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000580)={'#! ', '', [{0x20, '^-@\'/'}, {0x20, '\"\x04\x00'}, {0x20, 'GPL\x00'}, {0x20, 'skcipher\x00'}, {0x20, '#\xbbL4}\x13\x8eq\xce\xb8\x17)e\x015\x9fj\xeb\xb4\xda\xc1P\x02\xe8\x86\xfd\x11YV\x8d\x94(\xae~\xdf\x1f\xb1\xe6\xf7\xbdH\xd1\xd0\xc8\xf9)#'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}]}, 0x6f)
unshare(0x400)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x423f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(r5, 0x0, 0x8001)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00002f7000/0x3000)=nil, 0x3000, 0x4, 0x28011, 0xffffffffffffffff, 0x8509b000)
fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x2, 0x2, 0x4, 0xe19, 0xffffffffffffffff})
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0)

16.958377907s ago: executing program 0 (id=3137):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r2, 0x0, 0x15, 0x0, &(0x7f0000002700))

15.468488936s ago: executing program 0 (id=3138):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000240)=""/123, 0x7b)
clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_io_uring_setup(0x110, 0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40000)
r2 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

12.962423711s ago: executing program 0 (id=3140):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101b01)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550c, 0x0)

11.899403127s ago: executing program 3 (id=3144):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe)
io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x20051, r4, 0x2bae2000)
unshare(0x22020400)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0)

11.752703678s ago: executing program 0 (id=3145):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r2, 0x0, 0x15, 0x0, &(0x7f0000002700))

10.370362027s ago: executing program 3 (id=3147):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000240)=""/123, 0x7b)
clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_io_uring_setup(0x110, 0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40000)
r2 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

10.006247789s ago: executing program 2 (id=3148):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x20000, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x8000000000000001}}], [{@fsname={'fsname', 0x3d, 'q\x17\x9c\xf5iE\x8a\x91\xdf\x82\x05\xb2-j,\xf4\'\xf3\xc1\xe6\xd5\xef\xa5.\xa7\xff\x11\x1d\x87\x05\xbepE\xb9\xfa\x90d\x11\xc0\xd9\x18\xab}~\x02d\xe3\xdb\xac\x85\xe7\t\x839Y\xd3\xad\xba\xfd~\xd9\xfd\xd6\xb4\xcf\xaa\x8f\xa5k\"\xe4X+fc\xf2\xc6\xd9\'\xcdS !\x92`\x80%\x90\xb5\r\xa4s\xb7\xc9\xb5\xff\v\xee\x0f\xbb\xdbGJ\x0e\xcf\xa5\xbeH\n\x00\x00x&\x9b:GOTD\x163'}}]}, 0x44, 0x7c4, &(0x7f0000000500)="$eJzs3d9rW9cdAPDvleWfyWYPBiNjD4bBFgiR58xLNhjMYw9jsECgfW5iZMWklq1gySF2TZtQCn0ptKVv7Uue+/Ol9LU/HvrS/h8lIW2d0JQ+FJerH7YcS4mcyJLbfD5wo3N0z/U533uOjo59b6QAnliT6T+ZiGMR8WoSMV5/PomIwWoqGzFbK3dvcyOfbklsbT31TVItc3dzIx9Nx6SObB8b8elLEScye+str60vzhWLhZV6fqqydHmqvLZ+8tLS3EJhobB8enpm5tSZv5053b1Yv/ty/eit1/775/dmf3jxd++/8lkSs3G0vq85jm6ZjMn6ORlMT+Eu/+l2ZX3z4fMdFGoaAdmDbAz7lHbMQL1XjsV4DDyof0Z72TIA4KC8EBFb7Qw0HuuFm/ddb38YAHDYJbU38n/1ux0AQK80/g5wd3Mj39j699eI3rv974gYqcXfuL5Z25OtX7MbqV7LHLub7LoykkTERBfqn4yItz565p10iwO6DgnQyrXrEXFhYnLv/J/suWdhv/7S+umF5szkfTvNf9A7H6frn7+3Wv9lttc/0WL9M9zitfsoHv76z9zsQjVtpeu/fzbd23avKf66iYF67lfVNd9gcvFSsZDObb+OiOMxOJzmpx9Qx/E7P95pt695/fft68++ndafPu6UyNzMDu8+Zn6uMvc4MTe7fT3i99lW8afz/3C1/5M2699zHdbxv3+8/Ga7fWn8abyNbW/8B2vrRsSfWvV/0zlPHnh/4lR1OEw1BkULH8zGWLv6J7M7/Z9uaf2N3wV6Ie3/sZbjv3E3Z0wkzfdrljv+0dt3i31xY/yTdoWax3/r+FuP/6Hk6Wp6qP7c1blKZWU6Yij5/97nT+0c28g3yqfxH/9j69d/Y/5rNf7T3wkvdHgisre+fvfR4z9YafzzTf3/h+ce1v/7TsTIvcWBdvV31v8zu47pZP7rtIGPet4AAAAAAAAAAAAAAAAAAAAAAAAAYD8yEXE0kkxuO53J5HK17/D+bYxliqVy5cTF0uryfFS/K3siBjONj7ocb/o81On65+E38qfuy/81In4TEW8Mj1bzuXypON/v4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7kib7/9PfTXc79YBAAdmZKDfLQAAeizJZvvdBACg10b2VXr0wNoBAPTO/t7/AYBfAu//APDkecj7v/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOM6d/Zsum19v7mRT/PzV9ZWF0tXTs4Xyou5pdV8Ll9auZxbKJUWioVcvrTU9gddqz0US6XLM7G8enWqUihXpspr6+eXSqvLlfOXluYWCucLgz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15bX5wrFgsrEn1JLH5e64fiyOFoT/cTjZF2WNrT3URcq0V3WNrTvUQM7cwSoz2flwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+Ln4KAAD//6oxFHk=")
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)

8.489473778s ago: executing program 2 (id=3149):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x10000007, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x8001, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x800005d, 0x4810)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
socket$rxrpc(0x21, 0x2, 0xa)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
socket$isdn(0x22, 0x2, 0x25)
socket$isdn(0x22, 0x2, 0x22)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0xc8, 0x8, 0x1f0, 0x5803, 0x344, 0x2e8, 0x2e8, 0x344, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0xff], 'geneve0\x00', 'geneve1\x00', {0x80}}, 0x0, 0x188, 0x1f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x1, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x81, 0x8, 0x6, 'syz0\x00', 'syz1\x00', {0x33}}}}, {{@ipv6={@private0, @local, [0xffffff00, 0xff000000], [0x0, 0x0, 0xffffff00, 0xffffff00], 'nr0\x00', 'caif0\x00', {0xff}, {}, 0x1, 0x6, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468)

8.056608261s ago: executing program 2 (id=3150):
openat(0xffffffffffffff9c, 0x0, 0x1a082, 0x5)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)

7.435607805s ago: executing program 1 (id=3050):
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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")

7.040540857s ago: executing program 1 (id=3151):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/diskstats\x00', 0x0, 0x0)
read$hiddev(r0, &(0x7f0000001780)=""/4094, 0xffe)
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x4, 0x0)

6.897376278s ago: executing program 0 (id=3152):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000580))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSW2(r3, 0x5453, 0x0)
r4 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0)
r5 = creat(0x0, 0x0)
lseek(r5, 0x207ffffb, 0x4)
add_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000180), &(0x7f0000000100), 0xfe, 0xfffffffffffffffe)
write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0xfd14)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000140))
syz_emit_ethernet(0x0, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x100000000)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close_range(r7, 0xffffffffffffffff, 0x0)

6.61094302s ago: executing program 1 (id=3153):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24a349a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

5.758338245s ago: executing program 0 (id=3154):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r6, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000200))
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@ipv4={""/10, ""/2, @private}}, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, 0x0, 0x810)

5.387232827s ago: executing program 2 (id=3155):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe)
io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x20051, r4, 0x2bae2000)
unshare(0x22020400)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0)

5.242146148s ago: executing program 3 (id=3156):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
splice(r1, &(0x7f0000000380)=0x24000000, 0xffffffffffffffff, &(0x7f00000003c0)=0xcf00, 0x2, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10})
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r6, 0x1276, 0x0)
add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0)
r7 = timerfd_create(0x9, 0x0)
timerfd_settime(r7, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0)

4.743340151s ago: executing program 1 (id=3157):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x24, 0x14, 0xf0b, 0x70bd29, 0xfffffffd, {0x2}}, 0x24}}, 0x0)

3.566033678s ago: executing program 2 (id=3158):
inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000582)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
write$uinput_user_dev(r5, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c)
ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0)
ioctl$UI_DEV_CREATE(r5, 0x5501)
socket$inet(0x2, 0x5, 0xe4f9)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @remote, @local}, 0xc)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.495219389s ago: executing program 3 (id=3159):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read(r1, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.201133923s ago: executing program 3 (id=3160):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000280)=ANY=[], 0xfd, 0xc34, &(0x7f0000001cc0)="$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")
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r0, 0xffffffffffffffff, 0x0)

1.182731813s ago: executing program 1 (id=3161):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0), &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="580100", @ANYRES16=r1, @ANYBLOB="0100000000000000001b7b00000008000300", @ANYRES32], 0x158}, 0x1, 0x0, 0x0, 0x4004041}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r3, 0x0, 0x7351, 0x8001)
lseek(r3, 0x0, 0x3)
ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6)
timer_settime(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
gettid()
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00')
splice(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffff0, r4, &(0x7f00000000c0)=0x8000000000000000, 0x401, 0x9)
pread64(r5, &(0x7f0000002180)=""/4105, 0x1009, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x1, 0x2}, {}]}, @union]}, {0x0, [0x61]}}, 0x0, 0x4b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7000000)

216.501669ms ago: executing program 2 (id=3162):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="00220500000083"], 0x0}, 0x0)

860.66µs ago: executing program 3 (id=3163):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
write$cgroup_pid(r0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
read$FUSE(r6, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x5})
lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00)

0s ago: executing program 1 (id=3164):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000b00)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2008006, &(0x7f0000000340)=ANY=[@ANYBLOB='fileset=00000000000000021736,adinicb,uid=forget,gid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="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"], 0x82, 0xc3c, &(0x7f0000002740)="$eJzs3U9sHNd9B/DfGy3FpdJWTOwoThoXm7ZIZcZy9S+mYhXOqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBfApYzOxbcUWRNi2R+mN9Pjb13Zl5b+a9mfWMLOjNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4vdfvnDyVHrQrQAA7qdL418/edrzHwAeK5f9/z8AAAAAAAAAAAAAADzsUhTxRKRYuLSRJqvljvrFdt+NmxMjoztXG0hVzUNV+fKnfur0mbNffn74XDcvtuc+oP5++1y8On75QuOl+esLizNLSzPTjYm59tT89Mye93Cv9bcbqk5A4/prN6avXl1qnH7uzG2bbw6+1/+JY4Pnh5858XS37MTI6Oj4VpF6b/naXTekY7cRHoejiBOR4tkf/Dy1IqKIez8X9ft77bcbqDoxVHViYmS06shsuzW3XG4c656IIqLRU6nZPUc7X4uo9d3XPuyuGbFSNr9s8FDZvfGF1mLryuxMY6y1uNxebs/PjaVOa8v+NKKIcyliNSLW++/cXV8UUYsU3zu6ka5ExKHuefhSNTB493YUB9jHPSjb2eiLWC0egWv2EOuPIl6JFL94+3hM5ftMda/5YsQrZf4o4s0yX4xI5RfjbMS7O3yPeDTVooi/KK//+Y00Xd0PuveVi99ofG3u6nxP2e595SM+H+64Uzyg58PAtrw/HvJ7Uz2KaFV3/I1097/ZAQAAAAAAAAAAAAAAAGC/DUQRn40UL//7H1fjiqMal370/PAfDP5q75jxpz5kP2XZ5yJipdjbmNzDeWDgWBpL6QGPJX6c1aOIP8nj/77zoBsDAAAAAAAAAAAAAAAAAADwWCviZ5HihXeOp9XonVO8PXetcbl1ZbYzK2x37t/unOmbm5ubjdTJZs7JnCs5V3Ou5VzPGUWun7OZczLnSs7VnGs513PGoVw/52Zu0GReXsm5mnMt53rOqOX6OZs5J3Ou5FzNuZZzPWc8JHP3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8nBRRxC8jxXe/tZEiRUQzYjI6udb/oFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJT6UxE/jBSNP2zeWleLiFT923G8/OVsNA+X+aloDpf5YjQv5GxVWWt+56MdurFffeDu9aUifhop+utv3brg+fr3dZZufQ3izW9vLX2u1slD3Y2D7/V/4tjR88Ojv/HUbp/TTg0Yutieu3GzMTEyOjres7qWj/6pnnWD+bjF/nSdiFh6/Y3XWrOzM4t3/6H8CtxD9UfoQ6o9Lj31ofoQtYeiGQ+m7zwGyuf/u5Hid9/5j+4Dv/P8r8evdJZuPeHj/T/dev6/sH1He3z+17bXy8//8pm+0/P/iZ51L+TfjfTVIurL1xf6jkXUl15/40T7euvazLWZubMnT35lePgrZ072HY6oX23PzvR82pfTBQAAAAAAAAAAAAAAAHD/pCK+GilaP91IjYi4WY3XGjw//MyJpw/FoWq81W3jtl8dv3yh8dL89YXFmaWlmenGxFx7an56Zq+Hq1fDvSZGRg+kMx9q4IDbP1B/aX7h9cX2tT9a3nH7kfqFK0vLi62pnTfHQBQRzd41Q1WDJ0ZGq0bPtltzVdWxHQfTf3R9qYj/jBRTZxvpC3ldHv+/fYT/beP/V7bv6IDG/3+yZ115zJSKeD9S/M5fPhVfqNp5JO44Z7nc30aKoXOfz+XicFmu24bOewU6IwPLsv8bKf7xl7eX7Y6HfGKr7Kk9n9hHRHn9j0aKH/759+M387rb3/+w8/U/sn1HB3T9n+xZd+S29xXcc9fJ1/9EpHjxibfit/K6D3r/R/fdG8dz4Vvv5zig6//pnnWD+bi/vT9dBwAAAAAAAAAAeKT1pSL+LlL8eLSWns/r9vL3/6a37+iA/v7XZ3rWTe/PfEUf+uGeTyoAAAAAPCT6UhE/ixTXlt+6NYb69vHfPeM/f29r/OdI2ra1+nO+X6veG7Cff/7XazAfd/Leuw0AAAAAAAAAAAAAAAAAAAAPlZSKeD7Ppz5Zjeef3nU+9bVI8fJ/P5vLpWNlue488IPVr/VL83MnLszOzk+1lltXZmca4wutqZmy7pORYuNvPp/rFtX86t355jtzvG/Nxb4YKUb/vlu2Mxd7d27yJ7fKnirLfjJS/Nc/3F62O4/1p7fKni7L/nWk+OY/71z22FbZM2XZ70eKn3yz0S17pCzbfT/qZ7bKPjc1XxzAVQEAAAAAAAAAAAAAAAAAAOBx05eK+LNI8T/XV2+N5c/z//f1LFbe/HbPfP/b3Kzm+R+s5v/f7fPdzP9fvVdgZbejAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAx1OKIt6IFAuXNtJaf7ncUb/Ynrtxc2JkdOdqA6mqeagqX/7UT50+c/bLzw+f6+YH199vn41Xxy9faLw0f31hcWZpaWa6MTHXnpqfntnzHu61/nZD1QloXH/txvTVq0uN08+dqVYfzptvDr7X/4ljg+eHnznxdLfsxMjo6HjPLmp9d330O6Rd1h+OIv4qUjz7g5+nH/dHFHHv5+JDvjsHbaDqxFDViYmR0aojs+3W3HK5cax7IoqIRk+lZvcc3YdrsYP3Nzc391ayGbFSNr9s8FDZvfGF1mLryuxMY6y1uNxebs/PjaVOa8v+NKKIcyliNSLW++/cXV8U8Vqk+N7RjfQv/RGHuufhS5fGv37y9O7tKO62q/ujbGejL2K1eGDX7GOhP4r4p0jxi7ePx7/2R9Si8xNfjHilzB9FvBmd653KL8bZiHd3+B7xaKpFEf9XXv/zG+nt/vJ+0L2vXPxG42tzV+d7ynbvK4/88+F+2v3e9NX72o5d1KOIn1R3/I30b/67BgAAAAAAAAAAAAAAAHiIFPHrkeKFd46nanxwHlP8ZN56ZbYzrK879q87Znpzc3OzkTrZzDmZcyXnas61nOs5o8j1czbLrG9uTubllZyrOddyrueMQ7l+zmbOyZwrOVdzruVczxm1XD9nM+dkzpWcqznXcq7nDOOKAQAAAAAAAAAAAAAAAACAA1BU/6T47rc20mZ/Z37pyejkmvlAP/b+PwAA///l1fnv")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

1524.385449][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1524.464222][T15428] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1524.473767][T15428] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1524.482882][T15428] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1524.491761][T15428] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1524.782678][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1524.857228][ T4704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1524.868881][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1525.392075][T15803] random: crng reseeded on system resumption
[ 1525.857526][ T4704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1525.919408][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1526.211090][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1527.285845][T15806] delete_channel: no stack
[ 1527.290463][T15806] delete_channel: no stack
[ 1527.442284][T15817] loop4: detected capacity change from 0 to 128
[ 1527.489777][T15817] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1527.585528][T15817] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1529.391395][T13524] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1529.594479][T13524] usb 10-1: Using ep0 maxpacket: 16
[ 1529.601978][T13524] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1529.657293][T13524] usb 10-1: New USB device found, idVendor=18d1, idProduct=502d, bcdDevice= 0.00
[ 1529.696682][T13524] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1529.742105][T13524] usb 10-1: config 0 descriptor??
[ 1531.199702][T13524] hid (null): bogus close delimiter
[ 1531.210413][T13524] hid-generic 0003:18D1:502D.0013: unknown main item tag 0x6
[ 1531.217981][T13524] hid-generic 0003:18D1:502D.0013: unknown main item tag 0x1
[ 1532.180951][T15873] delete_channel: no stack
[ 1532.445675][T13524] hid-generic 0003:18D1:502D.0013: unknown main item tag 0xe
[ 1532.453282][T13524] hid-generic 0003:18D1:502D.0013: bogus close delimiter
[ 1532.460377][T13524] hid-generic 0003:18D1:502D.0013: item 0 0 2 10 parsing failed
[ 1532.468662][T13524] hid-generic: probe of 0003:18D1:502D.0013 failed with error -22
[ 1532.484736][T13524] usb 10-1: USB disconnect, device number 2
[ 1532.550733][T15866] delete_channel: no stack
[ 1532.556295][T15866] delete_channel: no stack
[ 1532.679612][T15846] delete_channel: no stack
[ 1534.511852][ T4330] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1534.575759][T15911] random: crng reseeded on system resumption
[ 1535.745618][T15908] loop9: detected capacity change from 0 to 8
[ 1537.397916][ T4330] usb 5-1: Using ep0 maxpacket: 8
[ 1537.407743][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1537.429819][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1537.441343][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1537.448529][ T4330] usb 5-1: device descriptor read/all, error -32
[ 1538.516530][T15923] delete_channel: no stack
[ 1538.521210][T15923] delete_channel: no stack
[ 1538.577746][T15933] loop8: detected capacity change from 0 to 128
[ 1538.749357][T15938] loop9: detected capacity change from 0 to 1024
[ 1539.130000][   T26] audit: type=1800 audit(1733428194.916:297): pid=15943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2590" name="bus" dev="loop8" ino=1048654 res=0 errno=0
[ 1540.033287][T15663] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1540.725616][T15962] random: crng reseeded on system resumption
[ 1543.562863][T15965] loop4: detected capacity change from 0 to 8
[ 1543.771361][T15967] loop9: detected capacity change from 0 to 512
[ 1543.778356][T15967] EXT4-fs: Ignoring removed i_version option
[ 1543.784456][T15967] EXT4-fs: Ignoring removed nobh option
[ 1543.798375][T15967] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1544.244901][T15967] EXT4-fs (loop9): 1 truncate cleaned up
[ 1544.277738][T15967] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1544.334346][   T26] audit: type=1800 audit(1733428199.780:298): pid=15967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2598" name="bus" dev="loop9" ino=18 res=0 errno=0
[ 1545.044917][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1545.198196][T15989] loop4: detected capacity change from 0 to 2048
[ 1545.369195][T15989] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1545.665943][T15989] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[ 1545.698103][T15996] loop9: detected capacity change from 0 to 40427
[ 1545.708559][T15996] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1545.716430][T15996] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1545.730469][T15989] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[ 1545.745744][T15989] EXT4-fs (loop4): This should not happen!! Data will be lost
[ 1545.745744][T15989] 
[ 1545.762934][T15996] F2FS-fs (loop9): invalid crc value
[ 1545.775434][T16002] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1545.790000][T15989] EXT4-fs (loop4): Total free blocks count 0
[ 1545.796037][T15989] EXT4-fs (loop4): Free/Dirty block details
[ 1545.802669][T15989] EXT4-fs (loop4): free_blocks=66060288
[ 1545.808301][T15989] EXT4-fs (loop4): dirty_blocks=48
[ 1545.813620][T15989] EXT4-fs (loop4): Block reservation details
[ 1545.819964][T15989] EXT4-fs (loop4): i_reserved_data_blocks=3
[ 1545.858417][T16007] loop7: detected capacity change from 0 to 512
[ 1545.876446][T16007] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 2: comm syz.7.2606: invalid block
[ 1545.892121][T15996] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1545.933495][T16007] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2606: invalid indirect mapped block 10 (level 1)
[ 1546.054452][T16007] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2606: invalid indirect mapped block 8 (level 1)
[ 1546.078571][T15996] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1546.085741][T15996] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1546.108166][T16007] EXT4-fs (loop7): 1 truncate cleaned up
[ 1546.131034][T16007] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1546.372535][T13133] EXT4-fs (loop7): unmounting filesystem.
[ 1548.100930][T16020] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1548.109771][T16020] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1549.592868][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1550.093815][T16033] input: syz1 as /devices/virtual/input/input22
[ 1550.947700][T16051] input: syz1 as /devices/virtual/input/input23
[ 1551.816531][T16048] loop8: detected capacity change from 0 to 512
[ 1552.323677][T16059] delete_channel: no stack
[ 1552.764196][T16030] delete_channel: no stack
[ 1553.535061][T16067] loop9: detected capacity change from 0 to 40427
[ 1553.552702][T16067] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1553.560605][T16067] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1553.572244][T16067] F2FS-fs (loop9): invalid crc value
[ 1553.962957][T16067] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1554.191995][T16067] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1554.199151][T16067] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1554.199186][T16081] loop4: detected capacity change from 0 to 2048
[ 1554.385889][T16081] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[ 1554.516813][T16081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1559.662151][T16123] binder: 16122:16123 unknown command 0
[ 1559.686946][T16123] binder: 16122:16123 ioctl c0306201 20000140 returned -22
[ 1560.669656][T16151] loop8: detected capacity change from 0 to 1024
[ 1560.851621][T12992] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1561.173169][T12992] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[ 1561.192978][T16159] hfsplus: extend alloc file! (8192,512,4294934894)
[ 1561.212003][T12992] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1561.265126][T12992] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1561.336870][T12992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.407691][T16149] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1561.716424][T16149] loop9: detected capacity change from 0 to 256
[ 1561.941531][T16144] input: syz0 as /devices/virtual/input/input24
[ 1562.132473][T12992] usb 10-1: USB disconnect, device number 3
[ 1563.321957][T12321] hfsplus: b-tree write err: -5, ino 4
[ 1563.388251][T12321] kworker/u4:25: attempt to access beyond end of device
[ 1563.388251][T12321] loop8: rw=1, sector=5112, nr_sectors = 2672 limit=1024
[ 1563.795050][T16186] loop7: detected capacity change from 0 to 64
[ 1563.883325][T16186] hfs: get root inode failed
[ 1563.913912][T16183] loop9: detected capacity change from 0 to 8192
[ 1564.073193][T16189] loop8: detected capacity change from 0 to 512
[ 1564.101500][T16189] EXT4-fs: Ignoring removed oldalloc option
[ 1564.143220][T16189] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1564.391513][T16189] EXT4-fs (loop8): 1 orphan inode deleted
[ 1564.397319][T16189] EXT4-fs (loop8): 1 truncate cleaned up
[ 1564.424399][T16189] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1564.877297][T16197] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1565.346336][T16197] EXT4-fs (loop8): Remounting filesystem read-only
[ 1565.377243][T16197] syz.8.2647 (16197) used greatest stack depth: 18432 bytes left
[ 1565.538215][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1565.627896][T16202] loop9: detected capacity change from 0 to 128
[ 1565.748990][T16202] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1565.791152][T16202] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1565.893694][T16205] loop8: detected capacity change from 0 to 1024
[ 1567.245364][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1567.486164][T16218] loop9: detected capacity change from 0 to 128
[ 1568.033424][   T26] audit: type=1800 audit(1733428221.846:299): pid=16223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2654" name="bus" dev="loop9" ino=1048656 res=0 errno=0
[ 1569.980519][T16256] input: syz1 as /devices/virtual/input/input25
[ 1571.057076][T16261] loop9: detected capacity change from 0 to 128
[ 1571.155739][T16261] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1571.180774][T16261] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1572.119126][T16270] loop4: detected capacity change from 0 to 2048
[ 1572.289751][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1572.781709][T16267] delete_channel: no stack
[ 1572.871291][T16270] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1573.425899][T16228] delete_channel: no stack
[ 1573.496313][T16284] loop7: detected capacity change from 0 to 128
[ 1573.965868][T16289] loop4: detected capacity change from 0 to 64
[ 1575.559083][T16289] hfs: get root inode failed
[ 1578.244362][T16310] delete_channel: no stack
[ 1578.248982][T16310] delete_channel: no stack
[ 1578.582682][T16317] input: syz1 as /devices/virtual/input/input26
[ 1579.380789][T16319] loop8: detected capacity change from 0 to 128
[ 1579.577503][T16319] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1579.598127][T16319] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1581.870056][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1581.993770][T16342] loop9: detected capacity change from 0 to 1024
[ 1582.067335][T16342] EXT4-fs: Ignoring removed orlov option
[ 1582.124990][T16342] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1583.686087][T16342] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1584.115456][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1584.315279][T16359] loop9: detected capacity change from 0 to 128
[ 1584.722658][   T26] audit: type=1800 audit(1733428237.542:300): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2685" name="bus" dev="loop9" ino=1048657 res=0 errno=0
[ 1585.742296][T16378] loop9: detected capacity change from 0 to 64
[ 1585.831696][T16383] delete_channel: no stack
[ 1585.856302][ T4266] Bluetooth: hci4: command 0x0406 tx timeout
[ 1585.889503][T16378] hfs: get root inode failed
[ 1586.091193][T16355] delete_channel: no stack
[ 1587.026006][T16398] input: syz1 as /devices/virtual/input/input27
[ 1588.295394][T16411] loop4: detected capacity change from 0 to 256
[ 1588.302670][T16411] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1591.538477][T16432] loop4: detected capacity change from 0 to 128
[ 1591.803216][T16434] loop7: detected capacity change from 0 to 1024
[ 1591.822375][T16434] EXT4-fs: Ignoring removed bh option
[ 1592.300158][   T26] audit: type=1800 audit(1733428244.656:301): pid=16437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2697" name="bus" dev="loop4" ino=1048659 res=0 errno=0
[ 1592.666761][T16434] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1593.191415][T13133] EXT4-fs (loop7): unmounting filesystem.
[ 1593.735114][T16462] input: syz1 as /devices/virtual/input/input28
[ 1596.610498][ T7616] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1596.824791][ T7616] usb 9-1: Using ep0 maxpacket: 8
[ 1596.837804][ T7616] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1596.881893][ T7616] usb 9-1: config 0 has no interfaces?
[ 1596.887467][ T7616] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[ 1596.935726][ T7616] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1596.960583][ T7616] usb 9-1: config 0 descriptor??
[ 1597.391816][ T7616] usb 9-1: USB disconnect, device number 2
[ 1599.849921][T16499] delete_channel: no stack
[ 1599.854497][T16499] delete_channel: no stack
[ 1601.154731][T16519] input: syz1 as /devices/virtual/input/input29
[ 1606.304527][T16565] loop8: detected capacity change from 0 to 64
[ 1606.409461][T16565] hfs: get root inode failed
[ 1608.445407][T16599] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1608.815122][T16606] input: syz1 as /devices/virtual/input/input30
[ 1610.495724][T16611] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1614.464882][T16652] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1615.044860][T16662] input: syz1 as /devices/virtual/input/input31
[ 1615.691494][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1615.736399][T16664] loop9: detected capacity change from 0 to 512
[ 1615.847559][T16664] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1615.861491][T16664] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1616.093492][T16673] loop8: detected capacity change from 0 to 512
[ 1616.121686][T16673] EXT4-fs: Ignoring removed oldalloc option
[ 1616.143034][T16673] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1616.221673][T16673] EXT4-fs (loop8): 1 orphan inode deleted
[ 1616.227498][T16673] EXT4-fs (loop8): 1 truncate cleaned up
[ 1616.241983][T16673] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1616.586590][T16683] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1616.626415][T16683] EXT4-fs (loop8): Remounting filesystem read-only
[ 1617.062490][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1617.207897][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1617.831319][ T4266] Bluetooth: hci5: command 0x0406 tx timeout
[ 1619.575598][T16715] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1619.757308][T16718] input: syz1 as /devices/virtual/input/input32
[ 1620.711020][T16722] loop4: detected capacity change from 0 to 128
[ 1621.656931][   T26] audit: type=1800 audit(1733428272.063:302): pid=16733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2754" name="bus" dev="loop4" ino=1048660 res=0 errno=0
[ 1621.839015][ T7543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1621.866800][ T7543] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1621.876931][ T7543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1621.892751][ T7543] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1621.900425][ T7543] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1621.913367][ T7543] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1623.038471][T16749] delete_channel: no stack
[ 1623.043581][T16749] delete_channel: no stack
[ 1624.024785][T16769] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2765'.
[ 1625.506053][ T4266] Bluetooth: hci1: command 0x0409 tx timeout
[ 1626.382882][T16741] chnl_net:caif_netlink_parms(): no params data found
[ 1627.671006][T16741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1627.678794][ T4266] Bluetooth: hci1: command 0x041b tx timeout
[ 1627.727355][T16741] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1627.748169][T16806] loop9: detected capacity change from 0 to 128
[ 1627.770070][T16741] device bridge_slave_0 entered promiscuous mode
[ 1627.854592][T16741] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1627.873633][T16741] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1627.902532][T16741] device bridge_slave_1 entered promiscuous mode
[ 1628.077365][   T26] audit: type=1800 audit(1733428278.123:303): pid=16809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2771" name="bus" dev="loop9" ino=1048661 res=0 errno=0
[ 1628.115331][T16741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1628.173642][T16741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1628.485847][T16741] team0: Port device team_slave_0 added
[ 1629.201265][T16741] team0: Port device team_slave_1 added
[ 1629.472220][T16813] delete_channel: no stack
[ 1629.476966][T16813] delete_channel: no stack
[ 1629.488370][T16820] loop8: detected capacity change from 0 to 512
[ 1629.506742][T16820] EXT4-fs: Ignoring removed oldalloc option
[ 1629.666489][T16820] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1629.745510][T16741] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1629.762378][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1629.808905][T16820] EXT4-fs (loop8): 1 orphan inode deleted
[ 1629.927609][ T4266] Bluetooth: hci1: command 0x040f tx timeout
[ 1630.081860][T16741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1630.289546][T16820] EXT4-fs (loop8): 1 truncate cleaned up
[ 1630.391936][T16820] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1630.625323][T16741] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1631.000880][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1631.052986][T16741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1632.118162][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1632.250003][T16852] loop4: detected capacity change from 0 to 256
[ 1632.306778][ T4266] Bluetooth: hci1: command 0x0419 tx timeout
[ 1632.341058][T16852] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[ 1633.237793][T16741] device hsr_slave_0 entered promiscuous mode
[ 1633.540561][T16741] device hsr_slave_1 entered promiscuous mode
[ 1633.954451][T16868] loop9: detected capacity change from 0 to 128
[ 1634.268004][   T26] audit: type=1800 audit(1733428283.913:304): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2784" name="bus" dev="loop9" ino=1048662 res=0 errno=0
[ 1634.723195][T16877] loop9: detected capacity change from 0 to 128
[ 1634.777976][T16877] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1634.812833][T16877] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1635.389441][T16741] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.614857][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1636.601302][T16901] loop4: detected capacity change from 0 to 1024
[ 1636.763933][T16907] loop8: detected capacity change from 0 to 512
[ 1636.780115][T16741] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1636.795017][T16907] EXT4-fs: Ignoring removed oldalloc option
[ 1636.931779][T16907] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1637.035588][T16907] EXT4-fs (loop8): 1 orphan inode deleted
[ 1637.041451][T16907] EXT4-fs (loop8): 1 truncate cleaned up
[ 1637.064111][T16907] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1637.198460][T16741] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1637.228911][ T4249] hfsplus: bad catalog entry type
[ 1637.262654][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1637.267234][ T4249] hfsplus: bad catalog entry type
[ 1637.529113][T16741] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1637.553581][ T6377] hfsplus: b-tree write err: -5, ino 4
[ 1638.631009][T16930] loop8: detected capacity change from 0 to 128
[ 1638.802317][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.013579][   T26] audit: type=1800 audit(1733428288.347:305): pid=16933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2795" name="bus" dev="loop8" ino=1048663 res=0 errno=0
[ 1639.105173][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.377907][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.420785][T16741] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1639.461781][T16741] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1640.855861][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1640.955444][T16741] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1640.973174][T16741] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1641.313307][T16958] loop8: detected capacity change from 0 to 512
[ 1641.351830][T16958] EXT4-fs: Ignoring removed oldalloc option
[ 1641.411060][T16958] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1641.571170][T16958] EXT4-fs (loop8): 1 orphan inode deleted
[ 1641.599182][T16958] EXT4-fs (loop8): 1 truncate cleaned up
[ 1641.641216][T16958] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1641.685983][T16741] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1641.780574][T16741] 8021q: adding VLAN 0 to HW filter on device team0
[ 1641.822057][T16741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1642.107761][T16741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1642.200230][T16970] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1642.278031][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1642.733070][T12680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1642.745169][T12680] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1642.761951][T12680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1642.773184][ T7543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1642.780906][T12680] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1642.788669][ T7543] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1643.132459][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1643.213379][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1643.260432][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1643.306388][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1643.337565][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1643.344780][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1643.382000][T16982] loop9: detected capacity change from 0 to 128
[ 1643.400444][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1643.466580][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1643.507363][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1643.514552][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1643.583197][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1643.616277][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1643.655800][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1643.665820][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1643.675219][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1643.684665][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1643.693894][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1643.810216][   T26] audit: type=1800 audit(1733428292.790:306): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2808" name="bus" dev="loop9" ino=1048664 res=0 errno=0
[ 1643.845171][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1643.898231][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1643.961088][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1644.011018][    T9] tipc: Disabling bearer <udp:s>
[ 1644.036038][    T9] tipc: Left network mode
[ 1644.115094][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1644.136489][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1644.145248][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1644.736417][T16974] chnl_net:caif_netlink_parms(): no params data found
[ 1644.944748][ T4266] Bluetooth: hci0: command 0x0409 tx timeout
[ 1645.531557][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1645.542144][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1645.628813][T16741] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1645.814374][T16974] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1645.830087][T16974] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1645.838487][T16974] device bridge_slave_0 entered promiscuous mode
[ 1645.926539][T17017] loop7: detected capacity change from 0 to 128
[ 1645.998971][T17017] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1646.023517][T17017] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1646.064369][T16974] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1646.137170][T16974] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1646.242236][T17017] EXT4-fs (loop7): shut down requested (0)
[ 1646.255807][T16974] device bridge_slave_1 entered promiscuous mode
[ 1646.587538][T16974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1646.599956][T13133] EXT4-fs (loop7): unmounting filesystem.
[ 1646.718684][ T6377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1646.797483][ T6377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1647.169156][ T4266] Bluetooth: hci0: command 0x041b tx timeout
[ 1648.066402][T16974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1648.529573][T16974] team0: Port device team_slave_0 added
[ 1648.547685][T17038] loop8: detected capacity change from 0 to 512
[ 1648.591310][T17038] EXT4-fs: Ignoring removed oldalloc option
[ 1648.632886][T17038] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1648.691390][T17038] EXT4-fs (loop8): 1 orphan inode deleted
[ 1648.702160][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1648.745479][T17038] EXT4-fs (loop8): 1 truncate cleaned up
[ 1648.754653][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1648.793147][T17038] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1648.923182][T16741] device veth0_vlan entered promiscuous mode
[ 1648.933254][T16974] team0: Port device team_slave_1 added
[ 1648.976169][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1649.006723][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1649.109864][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1649.161637][T16741] device veth1_vlan entered promiscuous mode
[ 1649.301867][T17050] loop8: detected capacity change from 0 to 1764
[ 1649.422109][ T4266] Bluetooth: hci0: command 0x040f tx timeout
[ 1650.820979][T16741] device veth0_macvtap entered promiscuous mode
[ 1650.958807][T16741] device veth1_macvtap entered promiscuous mode
[ 1651.038961][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1651.077183][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1651.127764][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1651.154229][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1651.647776][T12680] Bluetooth: hci0: command 0x0419 tx timeout
[ 1651.880218][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1651.923382][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1651.955978][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1651.998540][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.040982][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.071653][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.114657][T16741] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1652.141777][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1652.245257][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1652.253662][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1652.264459][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1652.274020][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1652.298725][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1652.309652][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1652.322349][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1652.361564][T16974] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1652.373570][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1652.474365][T16974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1652.557044][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1652.592580][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.617760][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1652.656592][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.811083][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1653.197849][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1653.228575][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1653.260155][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1653.270495][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1653.298805][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1653.319949][T16741] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1653.379628][T16974] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1653.387129][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1653.512591][T16974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1653.803913][T17082] loop7: detected capacity change from 0 to 512
[ 1653.822714][T17082] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1654.365500][T17082] EXT4-fs (loop7): 1 truncate cleaned up
[ 1654.371281][T17082] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1654.406138][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1654.417509][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1654.647795][T13133] EXT4-fs (loop7): unmounting filesystem.
[ 1654.835640][T16741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1654.863960][T16741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1654.877443][T16741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1654.924687][T16741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1654.969662][T17094] loop7: detected capacity change from 0 to 512
[ 1655.002789][T17094] EXT4-fs: Ignoring removed oldalloc option
[ 1655.062367][T17094] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1655.173994][T17094] EXT4-fs (loop7): 1 orphan inode deleted
[ 1655.216428][T17094] EXT4-fs (loop7): 1 truncate cleaned up
[ 1655.222597][T17094] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1655.235084][T16974] device hsr_slave_0 entered promiscuous mode
[ 1655.283598][T16974] device hsr_slave_1 entered promiscuous mode
[ 1655.323616][T16974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1655.331240][T16974] Cannot create hsr debugfs directory
[ 1655.533215][T13133] EXT4-fs (loop7): unmounting filesystem.
[ 1655.664471][    T9] device hsr_slave_0 left promiscuous mode
[ 1655.730345][    T9] device hsr_slave_1 left promiscuous mode
[ 1655.740784][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1655.748345][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1655.977210][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1655.984698][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1656.003263][    T9] device bridge_slave_1 left promiscuous mode
[ 1656.015563][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1656.221240][T17111] input: syz1 as /devices/virtual/input/input33
[ 1657.333928][    T9] device bridge_slave_0 left promiscuous mode
[ 1657.340275][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1657.372219][T17117] loop9: detected capacity change from 0 to 1024
[ 1657.379929][T17117] EXT4-fs: Ignoring removed i_version option
[ 1657.386085][T17117] EXT4-fs: Ignoring removed orlov option
[ 1657.430446][    T9] device veth1_macvtap left promiscuous mode
[ 1657.438343][    T9] device veth0_macvtap left promiscuous mode
[ 1657.445959][T17117] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1657.455683][    T9] device veth1_vlan left promiscuous mode
[ 1657.462190][    T9] device veth0_vlan left promiscuous mode
[ 1658.688882][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1659.498716][T17131] loop8: detected capacity change from 0 to 128
[ 1659.932584][T17133] loop8: detected capacity change from 0 to 128
[ 1660.083142][T17133] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1660.104505][T17133] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1660.904114][T17022] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1660.942152][    T9] team0 (unregistering): Port device team_slave_1 removed
[ 1661.018882][    T9] team0 (unregistering): Port device team_slave_0 removed
[ 1661.073964][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1661.144087][T17022] usb 10-1: config 1 has an invalid interface association descriptor of length 5, skipping
[ 1661.154513][T17022] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1661.155697][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1661.170908][T17022] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1661.184229][T17022] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1661.198494][T17022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1661.207217][T17022] usb 10-1: SerialNumber: syz
[ 1661.995426][    T9] bond0 (unregistering): Released all slaves
[ 1662.281979][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1662.292801][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1662.302527][T17022] usb 10-1: 0:2 : does not exist
[ 1662.310371][T17022] usb 10-1: unit 5 not found!
[ 1662.333799][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1662.372691][T17022] usb 10-1: USB disconnect, device number 4
[ 1663.051930][T17145] loop8: detected capacity change from 0 to 512
[ 1663.065326][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1663.076855][T15663] udevd[15663]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1663.155997][T17145] EXT4-fs: Ignoring removed oldalloc option
[ 1664.086233][T11485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1664.110325][T17145] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1664.754244][T11485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1664.803640][T17145] EXT4-fs (loop8): 1 orphan inode deleted
[ 1664.827820][T17145] EXT4-fs (loop8): 1 truncate cleaned up
[ 1664.844499][T17145] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1665.052117][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1665.209585][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1665.224104][T17160] loop8: detected capacity change from 0 to 512
[ 1665.381573][T17160] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1665.518282][T17160] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1667.267748][T17176] netlink: 'syz.7.2840': attribute type 20 has an invalid length.
[ 1667.373241][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1667.412517][T17183] loop9: detected capacity change from 0 to 128
[ 1667.523707][T17183] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1668.612803][T17183] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1669.088879][T17195] loop8: detected capacity change from 0 to 512
[ 1669.423051][T17201] loop7: detected capacity change from 0 to 512
[ 1669.588748][T17201] EXT4-fs: Ignoring removed oldalloc option
[ 1669.750946][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1669.771556][T17201] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1669.871523][T17195] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1670.063057][T17195] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1670.170039][T17201] EXT4-fs (loop7): 1 orphan inode deleted
[ 1670.208877][T17201] EXT4-fs (loop7): 1 truncate cleaned up
[ 1670.214593][T17201] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1670.557242][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1670.848909][T13133] EXT4-fs (loop7): unmounting filesystem.
[ 1671.077538][T17216] loop8: detected capacity change from 0 to 1024
[ 1671.241257][T17216] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1672.462511][T17232] block device autoloading is deprecated and will be removed.
[ 1673.074916][T17236] loop0: detected capacity change from 0 to 128
[ 1673.123489][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1673.168262][T17234] loop7: detected capacity change from 0 to 2048
[ 1673.256664][T17236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1673.269489][T16974] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1673.292481][T17236] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1673.355967][T17234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1675.762388][T16974] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1675.791389][T16974] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1675.878045][T16974] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1675.943848][T16741] EXT4-fs (loop0): unmounting filesystem.
[ 1675.956283][T17260] loop8: detected capacity change from 0 to 512
[ 1675.989605][T17260] EXT4-fs: Ignoring removed oldalloc option
[ 1676.010715][T17260] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1676.084095][T17260] EXT4-fs (loop8): 1 orphan inode deleted
[ 1676.163200][T17260] EXT4-fs (loop8): 1 truncate cleaned up
[ 1676.168998][T17260] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1676.312258][T17266] loop9: detected capacity change from 0 to 128
[ 1676.567119][   T26] audit: type=1800 audit(1733428323.474:307): pid=17266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2863" name="bus" dev="loop9" ino=1048668 res=0 errno=0
[ 1676.827409][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1678.789490][T17288] blktrace: Concurrent blktraces are not allowed on loop16
[ 1680.070304][T17288] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1680.250989][T16974] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1680.356662][T17300] loop9: detected capacity change from 0 to 1024
[ 1680.392355][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1680.408200][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1680.547538][T16974] 8021q: adding VLAN 0 to HW filter on device team0
[ 1680.729192][T17307] loop9: detected capacity change from 0 to 128
[ 1680.837816][T17307] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1680.876321][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1680.909301][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1680.951593][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1680.963501][T17307] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1681.006809][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1681.014000][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1681.119275][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1681.147385][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1681.184197][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1681.203214][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1681.210449][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1681.233737][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1681.411512][T17290] delete_channel: no stack
[ 1681.453210][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1681.512868][T17290] delete_channel: no stack
[ 1681.953161][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1682.009507][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1682.018712][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1682.103977][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1682.245740][    T9] device hsr_slave_0 left promiscuous mode
[ 1682.253755][    T9] device hsr_slave_1 left promiscuous mode
[ 1682.278639][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1682.303297][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1682.348937][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1682.366615][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1682.396904][    T9] device bridge_slave_1 left promiscuous mode
[ 1682.420277][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1682.510438][    T9] device bridge_slave_0 left promiscuous mode
[ 1682.516761][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1682.675316][    T9] device veth1_macvtap left promiscuous mode
[ 1682.701793][    T9] device veth0_macvtap left promiscuous mode
[ 1682.739989][    T9] device veth1_vlan left promiscuous mode
[ 1682.762128][    T9] device veth0_vlan left promiscuous mode
[ 1683.761485][    T9] infiniband s: set down
[ 1685.375451][T17349] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1686.970629][T17356] blktrace: Concurrent blktraces are not allowed on loop14
[ 1687.095735][T17356] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1687.557251][T17362] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1688.852937][T17363] loop0: detected capacity change from 0 to 128
[ 1689.381151][T17363] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1689.425001][T17363] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1689.855782][T17372] loop8: detected capacity change from 0 to 128
[ 1689.870322][T17372] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1690.206168][T17372] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1690.215838][T17372] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1690.474986][T16741] EXT4-fs (loop0): unmounting filesystem.
[ 1690.673242][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1692.338862][    T9] team0 (unregistering): Port device team_slave_1 removed
[ 1692.372714][ T4515] smc: removing ib device s
[ 1692.458278][    T9] team0 (unregistering): Port device team_slave_0 removed
[ 1692.578145][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1692.710918][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1693.768623][    T9] bond0 (unregistering): Released all slaves
[ 1693.920006][T16974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1693.932151][T16974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1693.944584][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1693.960627][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1693.969528][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1693.992992][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1694.006720][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1694.016245][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1694.026298][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1696.169372][T17405] loop8: detected capacity change from 0 to 512
[ 1696.180552][T17405] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1696.372296][T17405] EXT4-fs (loop8): 1 truncate cleaned up
[ 1696.378153][T17405] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1698.029955][T17423] loop0: detected capacity change from 0 to 128
[ 1698.107348][T17392] delete_channel: no stack
[ 1698.111963][T17392] delete_channel: no stack
[ 1698.204106][T17423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1698.345503][T17423] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1698.419658][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1698.427276][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1698.436860][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1700.605818][T16974] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1700.710593][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1700.727825][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1700.819531][T17440] blktrace: Concurrent blktraces are not allowed on loop18
[ 1701.209457][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1701.229786][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1701.299651][T16974] device veth0_vlan entered promiscuous mode
[ 1701.319993][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1701.355806][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1701.418246][T16974] device veth1_vlan entered promiscuous mode
[ 1701.564808][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1701.592969][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1701.652089][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1701.710905][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1701.777633][T16974] device veth0_macvtap entered promiscuous mode
[ 1701.808515][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1701.845146][T16974] device veth1_macvtap entered promiscuous mode
[ 1701.939320][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1702.008427][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.101461][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1702.138958][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.197929][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1702.226357][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.336363][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1702.405766][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.467107][T16974] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1702.539635][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1702.583169][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.634907][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1702.682495][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.729546][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1702.788134][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.828421][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1702.864519][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.888236][T17440] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1702.892427][T16741] EXT4-fs (loop0): unmounting filesystem.
[ 1702.906392][T16974] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1702.938909][T16974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1702.988251][T16974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.017059][T16974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.046373][T16974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.069415][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1703.134044][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1703.165840][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1703.196655][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1703.406730][T17458] loop8: detected capacity change from 0 to 16
[ 1703.448354][T17458] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1703.534213][ T6377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1703.574380][ T6377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1703.669441][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1703.682105][ T6377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1703.746346][ T6377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1703.854713][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1708.849578][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1708.861398][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1708.877046][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1708.889295][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1708.904671][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1708.912469][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1709.198499][T17493] loop8: detected capacity change from 0 to 512
[ 1709.358400][T17493] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1709.374211][T17493] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1709.387796][T17493] EXT4-fs (loop8): unmounting filesystem.
[ 1710.243083][T17501] loop9: detected capacity change from 0 to 32768
[ 1710.250183][T17501] XFS: ikeep mount option is deprecated.
[ 1710.255928][T17501] XFS: ikeep mount option is deprecated.
[ 1710.673662][T17501] XFS (loop9): Mounting V5 Filesystem
[ 1710.800997][T17501] XFS (loop9): Ending clean mount
[ 1710.910408][T15190] XFS (loop9): Unmounting Filesystem
[ 1711.365255][ T4266] Bluetooth: hci0: command 0x0409 tx timeout
[ 1712.027321][T17514] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1712.452403][T17486] chnl_net:caif_netlink_parms(): no params data found
[ 1714.695043][T17527] hub 6-0:1.0: USB hub found
[ 1714.697902][T12680] Bluetooth: hci0: command 0x041b tx timeout
[ 1714.711667][T17527] hub 6-0:1.0: 1 port detected
[ 1715.548558][ T4304] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1715.602731][T17530] loop7: detected capacity change from 0 to 1764
[ 1715.843128][T15663] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1716.580673][ T4304] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1716.868667][T12680] Bluetooth: hci0: command 0x040f tx timeout
[ 1717.588176][T17486] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1717.605646][T17486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1717.648404][T17486] device bridge_slave_0 entered promiscuous mode
[ 1717.748632][T17550] loop8: detected capacity change from 0 to 16
[ 1717.773376][ T4304] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1717.832900][T17550] erofs: (device loop8): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[ 1717.852882][T17486] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1717.860033][T17486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1717.886134][T17550] erofs: (device loop8): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[ 1717.923657][T17486] device bridge_slave_1 entered promiscuous mode
[ 1717.982406][T17550] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1718.064414][T17550] syz.8.2912: attempt to access beyond end of device
[ 1718.064414][T17550] loop8: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[ 1718.094183][ T4304] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1718.151858][T17556] syz.8.2912: attempt to access beyond end of device
[ 1718.151858][T17556] loop8: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[ 1718.223678][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1718.274409][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1718.746272][T17486] team0: Port device team_slave_0 added
[ 1718.778253][T17486] team0: Port device team_slave_1 added
[ 1719.123485][T12680] Bluetooth: hci0: command 0x0419 tx timeout
[ 1719.204713][T17486] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1719.211906][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1719.357025][T17486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1719.450251][T17486] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1719.457483][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1719.592534][T17575] loop8: detected capacity change from 0 to 256
[ 1719.717012][T17486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1720.112751][T17582] loop0: detected capacity change from 0 to 512
[ 1720.193075][T17582] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[ 1720.301401][T17582] EXT4-fs (loop0): invalid journal inode
[ 1720.307414][T17582] EXT4-fs (loop0): can't get journal size
[ 1721.075978][T17582] EXT4-fs (loop0): 1 truncate cleaned up
[ 1721.084990][T17582] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1721.761441][T17486] device hsr_slave_0 entered promiscuous mode
[ 1721.781741][T17591] loop7: detected capacity change from 0 to 1764
[ 1721.808627][T17486] device hsr_slave_1 entered promiscuous mode
[ 1721.893976][T17486] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1721.916045][T17486] Cannot create hsr debugfs directory
[ 1722.291490][T16741] EXT4-fs (loop0): unmounting filesystem.
[ 1724.426685][T17599] loop9: detected capacity change from 0 to 1024
[ 1724.669013][T17599] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[ 1724.713288][T17599] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[ 1724.811793][T11391] hfsplus: b-tree write err: -5, ino 4
[ 1725.410899][T17616] loop7: detected capacity change from 0 to 128
[ 1726.445733][T17616] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[ 1726.529562][T17619] loop9: detected capacity change from 0 to 32768
[ 1726.537004][T17619] XFS: ikeep mount option is deprecated.
[ 1726.542713][T17619] XFS: ikeep mount option is deprecated.
[ 1726.578059][T17616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1726.673740][T17619] XFS (loop9): Mounting V5 Filesystem
[ 1726.700384][T17616] UDF-fs: error (device loop7): udf_read_inode: (ino 96) failed !bh
[ 1726.735234][T17616] UDF-fs: error (device loop7): udf_fill_super: Error in udf_iget, block=3, partition=0
[ 1726.747085][T17627] loop0: detected capacity change from 0 to 256
[ 1726.827730][T17627] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[ 1726.841984][T17619] XFS (loop9): Ending clean mount
[ 1726.909693][T15190] XFS (loop9): Unmounting Filesystem
[ 1729.846778][T17647] loop8: detected capacity change from 0 to 2048
[ 1730.494366][T17653] loop9: detected capacity change from 0 to 8192
[ 1730.532943][T17653] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1730.663472][T17653] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 1730.696080][T17653] FAT-fs (loop9): Filesystem has been set read-only
[ 1731.357353][T17655] loop0: detected capacity change from 0 to 128
[ 1731.529772][T17656] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1731.724053][   T26] audit: type=1800 audit(1733428375.074:308): pid=17658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2943" name="bus" dev="loop0" ino=1048672 res=0 errno=0
[ 1731.838784][ T4304] device hsr_slave_0 left promiscuous mode
[ 1731.863911][ T4304] device hsr_slave_1 left promiscuous mode
[ 1731.929562][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1731.986483][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1732.055058][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1732.094447][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1732.168493][ T4304] device bridge_slave_1 left promiscuous mode
[ 1732.195831][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1732.258270][ T4304] device bridge_slave_0 left promiscuous mode
[ 1732.292387][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1732.490135][ T4304] device veth1_macvtap left promiscuous mode
[ 1732.523224][ T4304] device veth0_macvtap left promiscuous mode
[ 1732.570992][ T4304] device veth1_vlan left promiscuous mode
[ 1732.604928][ T4304] device veth0_vlan left promiscuous mode
[ 1736.737671][T17706] loop8: detected capacity change from 0 to 2048
[ 1737.053543][T17716] input: syz1 as /devices/virtual/input/input34
[ 1738.712012][T17717] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1740.717181][T17742] loop0: detected capacity change from 0 to 512
[ 1740.748340][T17742] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.2964: casefold flag without casefold feature
[ 1740.834106][T17742] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2964: couldn't read orphan inode 15 (err -117)
[ 1740.917253][T17742] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1741.248297][ T4304] team0 (unregistering): Port device team_slave_1 removed
[ 1741.252103][   T26] audit: type=1800 audit(1733428383.980:309): pid=17746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2964" name="file1" dev="loop0" ino=19 res=0 errno=0
[ 1741.895149][ T4304] team0 (unregistering): Port device team_slave_0 removed
[ 1742.214746][T16741] EXT4-fs (loop0): unmounting filesystem.
[ 1742.840437][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1743.349519][T17763] input: syz1 as /devices/virtual/input/input35
[ 1743.715433][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1744.681629][T13060] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1745.253262][T13060] usb 9-1: Using ep0 maxpacket: 32
[ 1745.260532][T13060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1745.279463][T13060] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1745.297724][T13060] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1745.308203][T13060] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1745.347538][T13060] usb 9-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[ 1745.377380][T13060] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1745.400954][T13060] usb 9-1: config 0 descriptor??
[ 1745.576053][T17781] loop9: detected capacity change from 0 to 1024
[ 1745.745033][ T4497] hfsplus: b-tree write err: -5, ino 4
[ 1745.871492][T13060] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0
[ 1745.888541][T17783] loop9: detected capacity change from 0 to 16
[ 1745.894984][T13060] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0
[ 1745.909134][T17783] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1745.916954][T13060] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0
[ 1745.927967][T13060] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0
[ 1745.948569][T13060] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0
[ 1745.956576][T17783] syz.9.2975: attempt to access beyond end of device
[ 1745.956576][T17783] loop9: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1745.975816][T13060] ntrig 0003:1B96:000A.0014: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.8-1/input0
[ 1745.992498][T17783] syz.9.2975: attempt to access beyond end of device
[ 1745.992498][T17783] loop9: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1746.310542][T17786] loop9: detected capacity change from 0 to 128
[ 1746.391179][T17786] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1746.407027][T17786] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1746.439421][T17786] EXT4-fs warning (device loop9): ext4_group_extend:1870: can't shrink FS - resize aborted
[ 1746.538716][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1746.540820][ T4304] bond0 (unregistering): Released all slaves
[ 1746.682140][T17752] netlink: 276 bytes leftover after parsing attributes in process `syz.7.2965'.
[ 1746.692504][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1746.827416][T13060] usb 9-1: USB disconnect, device number 3
[ 1746.866145][T17780] tap0: tun_chr_ioctl cmd 21731
[ 1746.959888][T17486] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1747.021652][T17486] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1747.054874][T17486] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1747.092445][T17486] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1747.434153][T17809] input: syz1 as /devices/virtual/input/input36
[ 1748.273645][T17486] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1748.366536][T17817] loop8: detected capacity change from 0 to 1764
[ 1748.391357][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1748.408469][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1748.454378][T17486] 8021q: adding VLAN 0 to HW filter on device team0
[ 1749.064737][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1749.112352][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1749.159144][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1749.166484][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1749.372446][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1749.398818][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1749.454493][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1749.487177][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1749.494405][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1749.539849][   T26] audit: type=1326 audit(1733428391.745:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.0.2985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f515eb7ff19 code=0x0
[ 1749.568885][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1749.621382][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1749.739327][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1749.789031][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1749.849443][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1749.897336][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1749.941441][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1749.967665][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1749.994820][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1750.037772][T17486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1750.080848][T17486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1750.096268][T17838] loop8: detected capacity change from 0 to 512
[ 1750.112016][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1750.129649][T17838] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1750.137462][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1750.192149][T17838] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:164: inode #12: comm syz.8.2986: inline data xattr refers to an external xattr inode
[ 1750.267581][T17838] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2986: couldn't read orphan inode 12 (err -117)
[ 1750.332783][T17838] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1750.629348][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1750.871620][T17849] loop0: detected capacity change from 0 to 1024
[ 1750.990405][T11485] hfsplus: b-tree write err: -5, ino 4
[ 1751.821957][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1751.864881][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1751.882301][T17486] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1752.002208][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1752.039914][T17859] loop9: detected capacity change from 0 to 1024
[ 1752.047140][T17859] EXT4-fs: Ignoring removed i_version option
[ 1752.053273][T17859] EXT4-fs: Ignoring removed orlov option
[ 1752.060215][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1752.086637][T17486] device veth0_vlan entered promiscuous mode
[ 1752.094931][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1752.175236][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1752.231293][T17486] device veth1_vlan entered promiscuous mode
[ 1752.279241][T17859] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1754.756523][ T4266] Bluetooth: hci1: command 0x0406 tx timeout
[ 1754.849804][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1754.858574][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1754.866567][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1755.906554][T17873] input: syz1 as /devices/virtual/input/input37
[ 1756.432438][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1756.455742][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1756.469674][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1756.529819][T17486] device veth0_macvtap entered promiscuous mode
[ 1756.580276][T17486] device veth1_macvtap entered promiscuous mode
[ 1756.643640][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1756.690783][   T26] audit: type=1326 audit(1733428398.434:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17882 comm="syz.9.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12857ff19 code=0x7ffc0000
[ 1756.704661][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1756.778910][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1756.781377][   T26] audit: type=1326 audit(1733428398.462:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17882 comm="syz.9.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12857ff19 code=0x7ffc0000
[ 1756.811499][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1756.877095][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1756.882354][T17886] loop0: detected capacity change from 0 to 1764
[ 1756.913925][   T26] audit: type=1326 audit(1733428398.462:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17882 comm="syz.9.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe12857ff19 code=0x7ffc0000
[ 1756.922017][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1756.974027][   T26] audit: type=1326 audit(1733428398.462:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17882 comm="syz.9.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12857ff19 code=0x7ffc0000
[ 1757.011588][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1757.055910][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1757.086361][   T26] audit: type=1326 audit(1733428398.462:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17882 comm="syz.9.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12857ff19 code=0x7ffc0000
[ 1757.098304][T17486] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1757.174801][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1757.192545][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1757.226391][   T26] audit: type=1326 audit(1733428398.462:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17882 comm="syz.9.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe12857ff19 code=0x7ffc0000
[ 1757.302305][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1757.700935][   T26] audit: type=1326 audit(1733428398.462:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17882 comm="syz.9.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12857ff19 code=0x7ffc0000
[ 1757.828068][   T26] audit: type=1326 audit(1733428398.462:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17882 comm="syz.9.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12857ff19 code=0x7ffc0000
[ 1757.863142][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1757.881703][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1757.892614][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1757.903145][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1757.913062][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1757.938429][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1758.200436][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1758.376750][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1758.562872][T17486] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1758.593166][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1758.621001][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1758.661253][T17486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1758.690491][T17486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1758.724772][T17486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1758.775946][T17486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1759.435229][T11485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1759.632737][ T6377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1759.665656][T11485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1759.687288][ T6377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1760.728419][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1760.769259][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1760.907234][T17923] loop8: detected capacity change from 0 to 256
[ 1761.021901][T17923] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1761.042383][T17930] loop9: detected capacity change from 0 to 1024
[ 1761.229051][T17930] EXT4-fs: Ignoring removed i_version option
[ 1761.305645][T17930] EXT4-fs: Ignoring removed orlov option
[ 1761.738272][T17930] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1763.052270][T17944] input: syz1 as /devices/virtual/input/input38
[ 1763.282217][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1764.408917][T17954] loop9: detected capacity change from 0 to 128
[ 1766.407020][   T26] audit: type=1800 audit(1733428407.508:319): pid=17978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3007" name="bus" dev="loop9" ino=1048677 res=0 errno=0
[ 1767.215127][T17975] delete_channel: no stack
[ 1767.219727][T17975] delete_channel: no stack
[ 1767.337488][T17992] loop9: detected capacity change from 0 to 1764
[ 1774.721268][   T26] audit: type=1326 audit(1733428415.301:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.0.3026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f515eb7ff19 code=0x0
[ 1775.031715][T18062] loop9: detected capacity change from 0 to 2048
[ 1775.667723][T18062] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.3028: bad orphan inode 8192
[ 1775.777964][T18062] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1778.109739][T18073] EXT4-fs warning (device loop9): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5358506911055865837
[ 1779.512496][T18096] loop0: detected capacity change from 0 to 32768
[ 1779.519447][T18096] XFS: ikeep mount option is deprecated.
[ 1779.525093][T18096] XFS: ikeep mount option is deprecated.
[ 1779.708826][T15190] EXT4-fs (loop9): unmounting filesystem.
[ 1779.916539][T18096] XFS (loop0): Mounting V5 Filesystem
[ 1780.001644][T11391] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1780.086984][T18096] XFS (loop0): Ending clean mount
[ 1780.164458][T16741] XFS (loop0): Unmounting Filesystem
[ 1780.438948][T11391] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1780.648455][T11391] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1780.759199][T18115] loop8: detected capacity change from 0 to 512
[ 1780.802696][T18115] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1780.979027][T18115] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3039: invalid indirect mapped block 4294967295 (level 1)
[ 1781.026494][T11391] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1781.037766][T18115] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3039: invalid indirect mapped block 4294967295 (level 1)
[ 1781.079887][T18115] EXT4-fs (loop8): 2 truncates cleaned up
[ 1781.099639][T18115] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1781.121004][ T7774] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1781.326206][ T7774] usb 3-1: config 0 has an invalid interface number: 229 but max is 0
[ 1781.345766][ T7774] usb 3-1: config 0 has no interface number 0
[ 1781.349734][T18135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3038'.
[ 1781.359642][ T7774] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19
[ 1781.423369][ T7774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1781.486672][ T7774] usb 3-1: config 0 descriptor??
[ 1781.586259][T12680] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1781.599253][T12680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1781.609830][T12680] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1781.628901][T12680] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1781.642501][T12680] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1781.654128][T12680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1781.799149][T15428] EXT4-fs error (device loop8): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[ 1781.829078][T15428] EXT4-fs error (device loop8): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[ 1781.855174][    T7] usb 3-1: USB disconnect, device number 8
[ 1782.497180][T18124] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1782.561147][T15428] EXT4-fs (loop8): unmounting filesystem.
[ 1782.611881][T12680] Bluetooth: Wrong link type (-71)
[ 1783.613081][T18167] loop0: detected capacity change from 0 to 512
[ 1783.680772][T18167] EXT4-fs: Ignoring removed bh option
[ 1784.680789][T18167] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1784.714737][T12680] Bluetooth: hci3: command 0x0409 tx timeout
[ 1784.745320][T18167] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1784.826878][T18136] chnl_net:caif_netlink_parms(): no params data found
[ 1784.883603][T18167] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1784.899066][T18167] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1784.955999][T18167] EXT4-fs (loop0): shut down requested (2)
[ 1786.411771][T16741] EXT4-fs (loop0): unmounting filesystem.
[ 1787.458440][T12680] Bluetooth: hci3: command 0x041b tx timeout
[ 1787.676667][   T26] audit: type=1326 audit(1733428427.425:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.0.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515eb7ff19 code=0x7ffc0000
[ 1787.748383][   T26] audit: type=1326 audit(1733428427.425:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.0.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515eb7ff19 code=0x7ffc0000
[ 1787.804487][T18136] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1787.838373][T18136] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1787.841125][   T26] audit: type=1326 audit(1733428427.444:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.0.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f515eb7ff19 code=0x7ffc0000
[ 1787.881573][T18136] device bridge_slave_0 entered promiscuous mode
[ 1787.933499][T18136] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1787.951439][   T26] audit: type=1326 audit(1733428427.444:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.0.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515eb7ff19 code=0x7ffc0000
[ 1787.977858][T18136] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1788.026703][T18136] device bridge_slave_1 entered promiscuous mode
[ 1788.133473][   T26] audit: type=1326 audit(1733428427.444:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.0.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515eb7ff19 code=0x7ffc0000
[ 1788.240028][   T26] audit: type=1326 audit(1733428427.444:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.0.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f515eb7ff19 code=0x7ffc0000
[ 1788.346878][   T26] audit: type=1326 audit(1733428427.519:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.0.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515eb7ff19 code=0x7ffc0000
[ 1788.436460][   T26] audit: type=1326 audit(1733428427.519:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.0.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515eb7ff19 code=0x7ffc0000
[ 1788.583185][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1789.739795][T18218] input: syz1 as /devices/virtual/input/input39
[ 1791.174199][T12680] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1791.318530][ T7543] Bluetooth: hci3: command 0x040f tx timeout
[ 1791.353279][T18136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1791.410125][T18136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1791.424269][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1791.435009][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1791.445200][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1791.453383][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1791.461560][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1791.468944][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1791.918544][T18227] input: syz1 as /devices/virtual/input/input40
[ 1791.932855][T18136] team0: Port device team_slave_0 added
[ 1791.954094][T18136] team0: Port device team_slave_1 added
[ 1793.274589][T18232] loop0: detected capacity change from 0 to 32768
[ 1793.281706][T18232] XFS: ikeep mount option is deprecated.
[ 1793.287469][T18232] XFS: ikeep mount option is deprecated.
[ 1793.413042][T18232] XFS (loop0): Mounting V5 Filesystem
[ 1793.574505][ T4266] Bluetooth: hci3: command 0x0419 tx timeout
[ 1793.607432][T18136] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1793.657158][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1794.065064][T18136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1794.165090][T18136] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1794.172117][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1794.218817][T18232] XFS (loop0): Ending clean mount
[ 1794.327943][T16741] XFS (loop0): Unmounting Filesystem
[ 1794.503825][T18136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1794.553509][T18251] loop7: detected capacity change from 0 to 2048
[ 1794.854972][T18136] device hsr_slave_0 entered promiscuous mode
[ 1794.898875][T18136] device hsr_slave_1 entered promiscuous mode
[ 1794.955928][T18136] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1794.984880][T18136] Cannot create hsr debugfs directory
[ 1795.027894][T12680] Bluetooth: hci4: command 0x0409 tx timeout
[ 1795.613351][T15663] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1796.464265][T18250] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1797.193986][T11391] device hsr_slave_0 left promiscuous mode
[ 1797.205257][T11391] device hsr_slave_1 left promiscuous mode
[ 1797.251264][T12680] Bluetooth: hci4: command 0x041b tx timeout
[ 1797.272989][T11391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1797.280506][T11391] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1797.307500][T11391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1797.328097][T11391] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1797.345498][T11391] device bridge_slave_1 left promiscuous mode
[ 1797.371285][T11391] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1797.397559][T11391] device bridge_slave_0 left promiscuous mode
[ 1797.414782][T18275] relay: one or more items not logged [item size (48) > sub-buffer size (10)]
[ 1797.431149][T11391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1798.882762][T11391] device veth1_macvtap left promiscuous mode
[ 1798.903941][T11391] device veth0_macvtap left promiscuous mode
[ 1798.947401][T11391] device veth1_vlan left promiscuous mode
[ 1798.957036][T11391] device veth0_vlan left promiscuous mode
[ 1799.476124][T12680] Bluetooth: hci4: command 0x040f tx timeout
[ 1800.327790][T18290] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1801.480263][T18292] input: syz1 as /devices/virtual/input/input41
[ 1801.864328][T12680] Bluetooth: hci4: command 0x0419 tx timeout
[ 1804.269401][T18308] loop7: detected capacity change from 0 to 2048
[ 1804.362793][T18293] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1804.511268][T18308] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1804.871246][T11391] team0 (unregistering): Port device team_slave_1 removed
[ 1804.972222][T11391] team0 (unregistering): Port device team_slave_0 removed
[ 1805.081686][T11391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1805.196860][T11391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1806.231720][T11391] bond0 (unregistering): Released all slaves
[ 1806.667328][T18326] input: syz1 as /devices/virtual/input/input42
[ 1808.441469][T18345] loop7: detected capacity change from 0 to 2048
[ 1808.476827][T18345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1808.492941][T18212] chnl_net:caif_netlink_parms(): no params data found
[ 1808.679152][T12680] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[ 1808.689478][T12680] CPU: 1 PID: 12680 Comm: kworker/u5:1 Not tainted 6.1.119-syzkaller #0
[ 1808.697847][T12680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1808.707938][T12680] Workqueue: hci2 hci_rx_work
[ 1808.712678][T12680] Call Trace:
[ 1808.715996][T12680]  <TASK>
[ 1808.718958][T12680]  dump_stack_lvl+0x1e3/0x2cb
[ 1808.723692][T12680]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1808.729199][T12680]  ? panic+0x764/0x764
[ 1808.733318][T12680]  sysfs_create_dir_ns+0x2c6/0x390
[ 1808.738480][T12680]  ? sysfs_warn_dup+0xa0/0xa0
[ 1808.743211][T12680]  kobject_add_internal+0x6df/0xd10
[ 1808.748545][T12680]  kobject_add+0x14e/0x210
[ 1808.753001][T12680]  ? device_add+0x3c2/0xfd0
[ 1808.757553][T12680]  ? kobject_init+0x1d0/0x1d0
[ 1808.762268][T12680]  ? __raw_spin_lock_init+0x41/0x100
[ 1808.767595][T12680]  ? get_device_parent+0x128/0x400
[ 1808.772770][T12680]  device_add+0x476/0xfd0
[ 1808.777174][T12680]  hci_conn_add_sysfs+0xe4/0x1f0
[ 1808.782148][T12680]  le_conn_complete_evt+0xcc6/0x1320
[ 1808.787496][T12680]  ? trace_contention_end+0x61/0x170
[ 1808.792836][T12680]  ? hci_le_big_info_adv_report_evt+0x390/0x390
[ 1808.799138][T12680]  ? __mutex_unlock_slowpath+0x218/0x750
[ 1808.804814][T12680]  ? mutex_unlock+0x10/0x10
[ 1808.809346][T12680]  ? skb_pull_data+0x10e/0x220
[ 1808.814160][T12680]  hci_le_conn_complete_evt+0x188/0x410
[ 1808.819763][T12680]  hci_event_packet+0xa40/0x1510
[ 1808.824749][T12680]  ? hci_remote_host_features_evt+0x210/0x210
[ 1808.830874][T12680]  ? bis_list+0x290/0x290
[ 1808.835236][T12680]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1808.840474][T12680]  ? kcov_remote_start+0x4ae/0x7c0
[ 1808.845633][T12680]  ? lockdep_hardirqs_on+0x90/0x130
[ 1808.850873][T12680]  ? hci_send_to_monitor+0x99/0x4d0
[ 1808.856122][T12680]  hci_rx_work+0x3cd/0xce0
[ 1808.860580][T12680]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1808.865816][T12680]  ? process_one_work+0x7a9/0x11d0
[ 1808.870964][T12680]  process_one_work+0x8a9/0x11d0
[ 1808.875964][T12680]  ? worker_detach_from_pool+0x260/0x260
[ 1808.881643][T12680]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1808.887227][T12680]  ? kthread_data+0x4e/0xc0
[ 1808.891792][T12680]  ? wq_worker_running+0x97/0x190
[ 1808.896860][T12680]  worker_thread+0xa47/0x1200
[ 1808.901583][T12680]  ? _raw_spin_unlock+0x40/0x40
[ 1808.906480][T12680]  ? release_firmware_map_entry+0x186/0x186
[ 1808.912424][T12680]  ? _raw_spin_unlock+0x40/0x40
[ 1808.917329][T12680]  kthread+0x28d/0x320
[ 1808.921433][T12680]  ? worker_clr_flags+0x190/0x190
[ 1808.926490][T12680]  ? kthread_blkcg+0xd0/0xd0
[ 1808.931135][T12680]  ret_from_fork+0x1f/0x30
[ 1808.935630][T12680]  </TASK>
[ 1808.945575][T12680] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1808.959593][T12680] Bluetooth: hci2: failed to register connection device
[ 1809.007825][T13133] UDF-fs: error (device loop7): udf_read_inode: (ino 1329) failed !bh
[ 1809.147445][T13133] UDF-fs: error (device loop7): udf_read_inode: (ino 1329) failed !bh
[ 1811.542883][T18212] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1811.550050][T18212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1811.597746][T18212] device bridge_slave_0 entered promiscuous mode
[ 1811.624509][T18212] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1811.645772][T18212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1811.681356][T18212] device bridge_slave_1 entered promiscuous mode
[ 1811.896339][T18212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1811.995065][T18212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1812.239388][T11391] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1812.307932][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1812.543210][T18212] team0: Port device team_slave_0 added
[ 1812.935153][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1812.949160][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1812.962134][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1812.965343][T11391] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1812.984119][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1812.995649][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1813.011495][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1813.760102][T18212] team0: Port device team_slave_1 added
[ 1813.925408][T18136] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1813.981090][T18136] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1814.066491][T18136] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1814.109151][T18212] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1814.116175][T18212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1814.212728][T18212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1814.248305][T18212] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1814.255312][T18212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1814.288058][T18212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1814.300793][T18136] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1814.347413][T11391] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1814.783270][T11391] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1814.907395][T18212] device hsr_slave_0 entered promiscuous mode
[ 1814.941415][T18212] device hsr_slave_1 entered promiscuous mode
[ 1814.965451][T18212] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1814.982606][T18212] Cannot create hsr debugfs directory
[ 1815.512167][T11391] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1815.723202][ T4266] Bluetooth: hci2: command 0x0409 tx timeout
[ 1815.739002][T11391] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1815.799462][T18392] chnl_net:caif_netlink_parms(): no params data found
[ 1815.818752][T18136] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1815.969037][T11391] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1816.838652][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1816.858607][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1816.889659][T18136] 8021q: adding VLAN 0 to HW filter on device team0
[ 1816.969845][T11391] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1817.279473][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1817.305922][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1817.318312][T11485] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1817.325518][T11485] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1817.342906][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1817.689352][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1817.708385][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1817.723880][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1817.731038][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1817.789625][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1817.811575][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1817.834291][T18392] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1817.856941][T18392] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1817.867816][T18392] device bridge_slave_0 entered promiscuous mode
[ 1817.946659][ T4266] Bluetooth: hci2: command 0x041b tx timeout
[ 1818.148402][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1818.159844][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1818.181654][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1818.204466][T18392] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1818.211636][T18392] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1818.248196][T18392] device bridge_slave_1 entered promiscuous mode
[ 1818.290047][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1818.308907][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1818.573257][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1818.704935][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1818.992087][T18136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1819.086035][T18136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1819.113489][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1819.122106][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1819.188155][T18392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1819.207551][T18392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1819.292919][T18392] team0: Port device team_slave_0 added
[ 1819.318151][T18392] team0: Port device team_slave_1 added
[ 1819.746597][T18392] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1819.814444][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1819.939140][T18392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1820.047599][T18392] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1820.068476][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1820.170080][ T4266] Bluetooth: hci2: command 0x040f tx timeout
[ 1820.266247][T18392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1820.489043][T18392] device hsr_slave_0 entered promiscuous mode
[ 1820.503870][T18392] device hsr_slave_1 entered promiscuous mode
[ 1820.526997][T18392] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1820.544170][T18392] Cannot create hsr debugfs directory
[ 1820.554367][T18459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1820.580301][T18459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1820.588000][T18459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1820.666676][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1820.683396][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1821.399589][T18471] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1822.405745][ T4266] Bluetooth: hci2: command 0x0419 tx timeout
[ 1822.678724][T18136] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1822.903732][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1822.914916][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1823.041519][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1823.059194][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1823.072440][T18136] device veth0_vlan entered promiscuous mode
[ 1823.166967][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1823.176298][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1823.194436][T18212] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1823.212863][T18212] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1823.716450][T18212] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1824.049615][T18136] device veth1_vlan entered promiscuous mode
[ 1824.087474][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1824.118762][T18212] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1824.727385][T18136] device veth0_macvtap entered promiscuous mode
[ 1824.749229][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1824.767799][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1824.776785][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1824.855687][T18136] device veth1_macvtap entered promiscuous mode
[ 1825.064229][T18136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1825.077057][T18136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1825.091589][T18136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1825.104777][T18136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1825.162889][T18136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1825.186582][T18136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1825.197071][T18136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1825.208164][T18136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1825.220703][T18136] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1825.258454][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1825.278958][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1825.296364][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1825.370745][T18136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1825.408467][T18136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1825.440392][T18136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1825.461769][T18136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1825.484016][T18136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1825.501105][T18136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1825.512894][T18136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1825.548828][T18136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1825.573508][T18136] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1825.783744][T18212] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1825.832520][T18212] 8021q: adding VLAN 0 to HW filter on device team0
[ 1825.901884][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1825.912651][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1825.939770][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1825.965018][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1825.987844][T18136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1825.998798][T18136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1826.008592][T18136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1826.017345][T18136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1826.075876][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1826.093969][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1826.113787][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1826.121034][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1826.136155][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1826.263854][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1826.274032][T18512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1826.287160][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1826.295908][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1826.303069][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1826.315366][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1826.333763][T18392] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1826.355961][T18392] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1826.381735][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1826.398975][T11391] device hsr_slave_0 left promiscuous mode
[ 1826.406218][T11391] device hsr_slave_1 left promiscuous mode
[ 1826.412584][T11391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1826.420803][T11391] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1826.429333][T11391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1826.437382][T11391] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1826.445150][T11391] device bridge_slave_1 left promiscuous mode
[ 1826.451817][T11391] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1826.460367][T11391] device bridge_slave_0 left promiscuous mode
[ 1826.466684][T11391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1826.483222][T11391] device hsr_slave_0 left promiscuous mode
[ 1826.491532][T11391] device hsr_slave_1 left promiscuous mode
[ 1826.498096][T11391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1826.505853][T11391] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1826.513899][T11391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1826.521588][T11391] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1826.529424][T11391] device bridge_slave_1 left promiscuous mode
[ 1826.535888][T11391] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1826.544142][T11391] device bridge_slave_0 left promiscuous mode
[ 1826.550397][T11391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1826.620368][T11391] device veth1_macvtap left promiscuous mode
[ 1826.626483][T11391] device veth0_macvtap left promiscuous mode
[ 1826.632829][T11391] device veth1_vlan left promiscuous mode
[ 1826.638881][T11391] device veth0_vlan left promiscuous mode
[ 1826.646846][T11391] device veth1_macvtap left promiscuous mode
[ 1826.653564][T11391] device veth0_macvtap left promiscuous mode
[ 1826.660498][T11391] device veth1_vlan left promiscuous mode
[ 1826.666449][T11391] device veth0_vlan left promiscuous mode
[ 1830.392859][T11391] team0 (unregistering): Port device team_slave_1 removed
[ 1830.553084][T11391] team0 (unregistering): Port device team_slave_0 removed
[ 1830.660292][T11391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1830.837607][T11391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1832.866797][T11391] bond0 (unregistering): Released all slaves
[ 1833.757273][T11391] team0 (unregistering): Port device team_slave_1 removed
[ 1833.839434][T11391] team0 (unregistering): Port device team_slave_0 removed
[ 1833.981841][T11391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1834.129337][T11391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1835.129089][T11391] bond0 (unregistering): Released all slaves
[ 1835.265659][T18392] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1835.276215][T18392] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1835.350724][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1835.366662][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1835.379623][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1835.397952][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1835.412880][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1835.425643][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1835.435667][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1835.453223][T18212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1835.496366][T18212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1835.511368][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1835.550237][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1835.783862][ T4862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1835.814951][ T4862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1835.920751][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1835.948260][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1835.977436][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1836.032460][T18392] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1836.053440][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1836.128956][T18392] 8021q: adding VLAN 0 to HW filter on device team0
[ 1836.340376][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1836.353013][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1836.503937][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1836.522780][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1836.559569][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1836.566737][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1836.575044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1836.602301][T18562] delete_channel: no stack
[ 1836.606992][T18562] delete_channel: no stack
[ 1836.609318][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1836.634187][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1836.647587][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1836.654818][ T4862] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1836.695522][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1836.742825][T18212] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1836.787048][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1836.809545][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1836.837281][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1836.846599][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1836.860091][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1836.869926][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1836.907112][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1836.916739][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1836.982478][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1837.032836][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1837.074480][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1837.098167][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1837.132986][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1837.164542][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1837.207510][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1837.297740][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1837.334678][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1837.349181][T18212] device veth0_vlan entered promiscuous mode
[ 1837.408075][T18212] device veth1_vlan entered promiscuous mode
[ 1837.577881][T18212] device veth0_macvtap entered promiscuous mode
[ 1837.597603][T18212] device veth1_macvtap entered promiscuous mode
[ 1837.847361][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1837.898471][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1837.978427][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1838.323463][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1838.331982][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1838.373055][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1838.408775][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1838.481215][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1839.030354][T18589] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1839.159228][T18212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1839.245968][T18212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1839.306943][T18212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1839.361871][T18212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1839.407203][T18212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1839.474129][T18212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1839.724155][T18212] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1839.735498][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1840.342369][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1840.398236][T18600] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1840.424779][T18212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1840.459012][T18212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1840.481679][T18212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1840.507321][T18212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1840.522768][T18212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1840.555754][T18212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1840.584476][T18212] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1840.610749][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1840.643342][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1840.686292][T18212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1840.695071][T18212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1840.849448][T18212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1840.883670][T18212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1840.928929][T18602] delete_channel: no stack
[ 1840.934043][T18602] delete_channel: no stack
[ 1841.191892][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1841.235318][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1841.266785][T18392] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1841.351017][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1841.372361][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1841.448746][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1841.496272][T11391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1841.523013][T11391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1841.562143][    T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1841.600180][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1841.778037][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1841.809444][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1841.858500][    T7] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1841.907569][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1841.950757][    T7] usb 3-1: config 0 descriptor??
[ 1842.237447][ T4266] Bluetooth: hci0: command 0x0406 tx timeout
[ 1842.474800][    T7] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor
[ 1842.490781][    T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0015/input/input43
[ 1843.348870][    T7] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[ 1843.434556][    T7] usb 3-1: USB disconnect, device number 9
[ 1843.622276][T18630] input: syz1 as /devices/virtual/input/input44
[ 1843.770867][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1843.791910][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1843.943881][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1843.976729][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1844.066237][T18392] device veth0_vlan entered promiscuous mode
[ 1844.092913][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1844.118846][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1844.441794][T18392] device veth1_vlan entered promiscuous mode
[ 1845.010558][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1845.493499][T18646] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1845.718359][T18392] device veth0_macvtap entered promiscuous mode
[ 1845.786833][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1845.821196][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1846.518126][T18659] input: syz1 as /devices/virtual/input/input45
[ 1847.315543][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1848.102671][T18664] loop3: detected capacity change from 0 to 2048
[ 1848.222199][T18664] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1848.298332][T18392] device veth1_macvtap entered promiscuous mode
[ 1848.320684][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1848.331363][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1848.342267][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1848.373224][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1848.703875][T18664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1848.844850][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1848.888337][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1848.918437][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1848.974983][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1849.044412][T18392] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1849.100950][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1849.136830][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1849.211032][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1849.259259][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1849.269253][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1849.323288][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1849.333190][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1849.388523][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1849.454590][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1849.472454][T18677] ==================================================================
[ 1849.480582][T18677] BUG: KASAN: use-after-free in cpu_map_enqueue+0x2dd/0x370
[ 1849.488572][T18677] Read of size 4 at addr ffff888043f9b078 by task syz.1.3164/18677
[ 1849.496849][T18677] 
[ 1849.499198][T18677] CPU: 0 PID: 18677 Comm: syz.1.3164 Not tainted 6.1.119-syzkaller #0
[ 1849.507382][T18677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1849.515658][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1849.517449][T18677] Call Trace:
[ 1849.517462][T18677]  <TASK>
[ 1849.533553][T18677]  dump_stack_lvl+0x1e3/0x2cb
[ 1849.538283][T18677]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1849.543903][T18677]  ? panic+0x764/0x764
[ 1849.548025][T18677]  ? _printk+0xd1/0x111
[ 1849.552223][T18677]  ? __virt_addr_valid+0x17f/0x530
[ 1849.557377][T18677]  ? __virt_addr_valid+0x17f/0x530
[ 1849.558465][T18392] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1849.562505][T18677]  print_report+0x15f/0x4f0
[ 1849.574485][T18677]  ? __virt_addr_valid+0x17f/0x530
[ 1849.579660][T18677]  ? __virt_addr_valid+0x17f/0x530
[ 1849.584935][T18677]  ? __virt_addr_valid+0x45b/0x530
[ 1849.590088][T18677]  ? __phys_addr+0xb6/0x170
[ 1849.594674][T18677]  ? cpu_map_enqueue+0x2dd/0x370
[ 1849.599650][T18677]  kasan_report+0x136/0x160
[ 1849.604190][T18677]  ? cpu_map_enqueue+0x2dd/0x370
[ 1849.609164][T18677]  cpu_map_enqueue+0x2dd/0x370
[ 1849.613959][T18677]  xdp_do_redirect_frame+0x2f0/0x660
[ 1849.619278][T18677]  bpf_test_run_xdp_live+0xbf4/0x1ea0
[ 1849.624682][T18677]  ? stack_trace_save+0x113/0x1c0
[ 1849.629765][T18677]  ? bpf_test_run_xdp_live+0x75c/0x1ea0
[ 1849.635345][T18677]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1849.640931][T18677]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1849.647137][T18677]  ? lockdep_hardirqs_on+0x94/0x130
[ 1849.652384][T18677]  ? __might_fault+0xa1/0x110
[ 1849.657091][T18677]  ? __might_sleep+0xb0/0xb0
[ 1849.661713][T18677]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1849.667995][T18677]  ? __might_fault+0xa1/0x110
[ 1849.672704][T18677]  ? __might_fault+0xbd/0x110
[ 1849.677425][T18677]  ? _copy_from_user+0x109/0x170
[ 1849.682412][T18677]  ? bpf_test_init+0x15a/0x180
[ 1849.687209][T18677]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1849.692705][T18677]  bpf_prog_test_run_xdp+0x7d1/0x1130
[ 1849.698117][T18677]  ? dev_put+0x80/0x80
[ 1849.702220][T18677]  ? dev_put+0x80/0x80
[ 1849.706397][T18677]  bpf_prog_test_run+0x32f/0x3a0
[ 1849.711379][T18677]  __sys_bpf+0x3eb/0x6c0
[ 1849.715655][T18677]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[ 1849.721071][T18677]  ? print_irqtrace_events+0x210/0x210
[ 1849.726568][T18677]  ? print_irqtrace_events+0x210/0x210
[ 1849.732062][T18677]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1849.738068][T18677]  ? lockdep_hardirqs_on+0x94/0x130
[ 1849.743298][T18677]  __x64_sys_bpf+0x78/0x90
[ 1849.747758][T18677]  do_syscall_64+0x3b/0xb0
[ 1849.752213][T18677]  ? clear_bhb_loop+0x45/0xa0
[ 1849.756928][T18677]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1849.762856][T18677] RIP: 0033:0x7fea3bb7ff19
[ 1849.767308][T18677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1849.787495][T18677] RSP: 002b:00007fea3c944058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1849.795965][T18677] RAX: ffffffffffffffda RBX: 00007fea3bd45fa0 RCX: 00007fea3bb7ff19
[ 1849.804499][T18677] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a
[ 1849.812514][T18677] RBP: 00007fea3bbf3986 R08: 0000000000000000 R09: 0000000000000000
[ 1849.821084][T18677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1849.829180][T18677] R13: 0000000000000000 R14: 00007fea3bd45fa0 R15: 00007ffd612f01c8
[ 1849.837207][T18677]  </TASK>
[ 1849.840389][T18677] 
[ 1849.842746][T18677] The buggy address belongs to the physical page:
[ 1849.849218][T18677] page:ffffea00010fe6c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x43f9b
[ 1849.859602][T18677] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1849.866815][T18677] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[ 1849.875441][T18677] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 1849.884060][T18677] page dumped because: kasan: bad access detected
[ 1849.890509][T18677] page_owner tracks the page as freed
[ 1849.895902][T18677] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 18279, tgid 18279 (syz.7.3065), ts 1798394852943, free_ts 1800147273147
[ 1849.914189][T18677]  post_alloc_hook+0x18d/0x1b0
[ 1849.919001][T18677]  get_page_from_freelist+0x3731/0x38d0
[ 1849.924595][T18677]  __alloc_pages+0x28d/0x770
[ 1849.929229][T18677]  __folio_alloc+0xf/0x30
[ 1849.933601][T18677]  vma_alloc_folio+0x486/0x990
[ 1849.938396][T18677]  shmem_alloc_and_acct_folio+0x5a8/0xd50
[ 1849.944150][T18677]  shmem_get_folio_gfp+0x13f0/0x3470
[ 1849.949496][T18677]  shmem_write_begin+0x16e/0x4e0
[ 1849.954493][T18677]  generic_perform_write+0x2fc/0x5e0
[ 1849.959903][T18677]  __generic_file_write_iter+0x176/0x400
[ 1849.965573][T18677]  generic_file_write_iter+0xab/0x310
[ 1849.970995][T18677]  __kernel_write_iter+0x2ff/0x710
[ 1849.976155][T18677]  dump_user_range+0x43d/0x8e0
[ 1849.981029][T18677]  elf_core_dump+0x3d2b/0x4590
[ 1849.985818][T18677]  do_coredump+0x18b7/0x2700
[ 1849.990422][T18677]  get_signal+0x1454/0x17d0
[ 1849.994945][T18677] page last free stack trace:
[ 1849.999638][T18677]  free_unref_page_prepare+0xf63/0x1120
[ 1850.005215][T18677]  free_unref_page_list+0x663/0x900
[ 1850.010446][T18677]  release_pages+0x2836/0x2b40
[ 1850.015223][T18677]  __pagevec_release+0x80/0xf0
[ 1850.020000][T18677]  shmem_undo_range+0x865/0x2390
[ 1850.024962][T18677]  shmem_evict_inode+0x265/0xa60
[ 1850.029906][T18677]  evict+0x529/0x930
[ 1850.033921][T18677]  do_unlinkat+0x509/0x820
[ 1850.038453][T18677]  __x64_sys_unlink+0x45/0x50
[ 1850.043178][T18677]  do_syscall_64+0x3b/0xb0
[ 1850.047614][T18677]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1850.053533][T18677] 
[ 1850.055858][T18677] Memory state around the buggy address:
[ 1850.061484][T18677]  ffff888043f9af00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1850.069549][T18677]  ffff888043f9af80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1850.077646][T18677] >ffff888043f9b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1850.085724][T18677]                                                                 ^
[ 1850.093726][T18677]  ffff888043f9b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1850.101821][T18677]  ffff888043f9b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1850.109950][T18677] ==================================================================
[ 1850.118210][T18677] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1850.125432][T18677] CPU: 0 PID: 18677 Comm: syz.1.3164 Not tainted 6.1.119-syzkaller #0
[ 1850.133614][T18677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1850.143677][T18677] Call Trace:
[ 1850.146979][T18677]  <TASK>
[ 1850.149923][T18677]  dump_stack_lvl+0x1e3/0x2cb
[ 1850.154653][T18677]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1850.160144][T18677]  ? panic+0x764/0x764
[ 1850.164226][T18677]  ? rcu_is_watching+0x11/0xb0
[ 1850.169003][T18677]  ? vscnprintf+0x59/0x80
[ 1850.173346][T18677]  panic+0x318/0x764
[ 1850.177245][T18677]  ? check_panic_on_warn+0x1d/0xa0
[ 1850.182362][T18677]  ? memcpy_page_flushcache+0xfc/0xfc
[ 1850.187744][T18677]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 1850.193652][T18677]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1850.199554][T18677]  ? _raw_spin_unlock+0x40/0x40
[ 1850.204413][T18677]  ? print_report+0x4a3/0x4f0
[ 1850.209095][T18677]  check_panic_on_warn+0x7e/0xa0
[ 1850.214043][T18677]  ? cpu_map_enqueue+0x2dd/0x370
[ 1850.218987][T18677]  end_report+0x66/0x110
[ 1850.223249][T18677]  kasan_report+0x143/0x160
[ 1850.227773][T18677]  ? cpu_map_enqueue+0x2dd/0x370
[ 1850.232728][T18677]  cpu_map_enqueue+0x2dd/0x370
[ 1850.237504][T18677]  xdp_do_redirect_frame+0x2f0/0x660
[ 1850.242803][T18677]  bpf_test_run_xdp_live+0xbf4/0x1ea0
[ 1850.248183][T18677]  ? stack_trace_save+0x113/0x1c0
[ 1850.253229][T18677]  ? bpf_test_run_xdp_live+0x75c/0x1ea0
[ 1850.258783][T18677]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1850.264330][T18677]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1850.270504][T18677]  ? lockdep_hardirqs_on+0x94/0x130
[ 1850.275722][T18677]  ? __might_fault+0xa1/0x110
[ 1850.280406][T18677]  ? __might_sleep+0xb0/0xb0
[ 1850.285001][T18677]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1850.291254][T18677]  ? __might_fault+0xa1/0x110
[ 1850.295940][T18677]  ? __might_fault+0xbd/0x110
[ 1850.300630][T18677]  ? _copy_from_user+0x109/0x170
[ 1850.305580][T18677]  ? bpf_test_init+0x15a/0x180
[ 1850.310354][T18677]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1850.315820][T18677]  bpf_prog_test_run_xdp+0x7d1/0x1130
[ 1850.321206][T18677]  ? dev_put+0x80/0x80
[ 1850.325289][T18677]  ? dev_put+0x80/0x80
[ 1850.329363][T18677]  bpf_prog_test_run+0x32f/0x3a0
[ 1850.334318][T18677]  __sys_bpf+0x3eb/0x6c0
[ 1850.338594][T18677]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[ 1850.343988][T18677]  ? print_irqtrace_events+0x210/0x210
[ 1850.349469][T18677]  ? print_irqtrace_events+0x210/0x210
[ 1850.354952][T18677]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1850.360979][T18677]  ? lockdep_hardirqs_on+0x94/0x130
[ 1850.366197][T18677]  __x64_sys_bpf+0x78/0x90
[ 1850.370664][T18677]  do_syscall_64+0x3b/0xb0
[ 1850.375104][T18677]  ? clear_bhb_loop+0x45/0xa0
[ 1850.379798][T18677]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1850.385707][T18677] RIP: 0033:0x7fea3bb7ff19
[ 1850.390126][T18677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1850.409828][T18677] RSP: 002b:00007fea3c944058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1850.418249][T18677] RAX: ffffffffffffffda RBX: 00007fea3bd45fa0 RCX: 00007fea3bb7ff19
[ 1850.426229][T18677] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a
[ 1850.434212][T18677] RBP: 00007fea3bbf3986 R08: 0000000000000000 R09: 0000000000000000
[ 1850.442187][T18677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1850.450161][T18677] R13: 0000000000000000 R14: 00007fea3bd45fa0 R15: 00007ffd612f01c8
[ 1850.458144][T18677]  </TASK>
[ 1850.461303][T18677] Kernel Offset: disabled
[ 1850.465633][T18677] Rebooting in 86400 seconds..