last executing test programs:

11.576037089s ago: executing program 1 (id=893):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r3 = dup(r2)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000200)=0x54)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x33, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_wolinfo={0x5, 0x0, 0x0, "bb692a93d34a"}})
sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x205}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1, &(0x7f00000002c0)}, 0x20004004)
write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='reno\x00', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
sendmmsg$inet(r3, &(0x7f0000000580), 0x0, 0x4050)
bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x6, 0x4, 0x6c03, 0xee, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x48)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
iopl(0x3)
inotify_init1(0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0)
r7 = openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
sendfile(r7, r6, 0x0, 0x4)
sendfile(r6, r7, 0x0, 0x0)

9.948615902s ago: executing program 2 (id=900):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000400)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x8)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x5, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000088caffff", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
epoll_create1(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
ioctl$BLKTRACESETUP(r5, 0x4c00, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940)
writev(r6, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)='3', 0x10}], 0x3)
r7 = epoll_create1(0x0)
socket(0x1, 0x80802, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x3}}}, 0xe4)
epoll_create1(0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000280))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

9.560039694s ago: executing program 1 (id=903):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000001f800)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}]}}]}, 0x38}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
dup2(0xffffffffffffffff, r7)
sendmmsg$inet6(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0)
r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x0, 0x3, 0x0, 0x7}]})
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0))
r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r9, &(0x7f0000004440)={0x2020}, 0x2020)

9.447129493s ago: executing program 2 (id=904):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x5a, @mcast2, 0x8}}, [0x1000, 0x2, 0x6f, 0x10001, 0x6, 0x0, 0x4af, 0x7e, 0x5000000000000, 0x0, 0x7fff, 0x5, 0x1, 0x3ff, 0x2]}, &(0x7f00000001c0)=0x100)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x0)
ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1, 0x2, 0x6, 0x7}, {0x80, 0x80, 0x1, 0x8cc}, {0x8, 0x50, 0x1, 0xfffffffc}, {0x5, 0x0, 0x8, 0x81}]})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB])
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x20000002)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001700)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe78190a0015c00200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900d1001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}}, 0x90)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r10)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r9, 0xfff, 0x6, 0x1000}, 0x14)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)

9.187608175s ago: executing program 1 (id=906):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="8d5deea6fee55c0e6cadc87aee0e7011ca6e4cf4c17c01c7a8c4508a7330886f33a7e25d082ead6f7ac99aa662b61987570a1171057bcb2888d411fd2a7c869847f830bc98437fffc84873e7d0e65c0cf7014748eb920ba5d50be661aa42b1f3b0229def38997ba0d41d835e54c48d409f68f35737d979ed8dbba9c1adf39482c65c71a761820277d3353104e000557663842307b0fad32da6daac31aec673e0c2524d537efac90fae0e130276", 0xad}])
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan0\x00'})
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r4, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x100000100000000, 0x12}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000711211000000000095d34525159870b973c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="003000000003000000000000000300000d0000000200000000020000000100000002000000000000000d000000000000000000000500000000006100"], 0x0, 0x4b, 0x0, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setitimer(0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT")
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_by_handle_at(r6, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x0)

8.744022541s ago: executing program 2 (id=907):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x4010, &(0x7f0000002200)={[{@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7ab4}}, {@jqfmt_vfsv0}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$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")
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x14f13b79faf8e7df)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x46, 0x40000000000008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
open(0x0, 0x0, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
fcntl$notify(r2, 0x402, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, 0x0, 0x80000)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5)
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x402c041)

8.0228094s ago: executing program 1 (id=909):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000080)="085dfddfdc11c8429a33dcfb4a02a05a38db214ddb0cd5d51fe0cdf6380997877ee4a15d23bb9c710183282eadb913d346db11ce", 0x34)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x40)
socket$kcm(0x11, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$caif_stream(0x25, 0x1, 0x1000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffb3, &(0x7f0000000240)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000200)=[{&(0x7f000000d000)=""/102400, 0x19000}, {0x0}], 0x2, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {}, [@NDA_VLAN={0x6, 0x5, 0x2}]}, 0x24}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private0, 0x0, 0x10}})
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private2}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x3, 0x2, 0x0, 0x80000000})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x275a, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})
write$UHID_CREATE2(r7, &(0x7f00000000c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
ioctl$UFFDIO_COPY(r6, 0xc020aa08, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f000092a000/0x1000)=nil, 0x4000, 0x0, 0x6040000})
syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d4267a100410aa61754f0102030109021200010000000009040000000206000025b47e3eaf2382cc763247396037078f0c223fceaf0ecdd72d41c455f71393d120050343d05c882e989e8248b527ceb5d438985ded3f4901c4"], 0x0)

7.732884854s ago: executing program 0 (id=911):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xfffffffc, <r2=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x0, 0x10}, 0xc)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x2040}}, 0xc000)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c)
r3 = socket(0x40000000015, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2717, 0x0, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x41020000, 0xac141400}}, 0x1c)
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200030600000000000000000c0000800800000027f418b52720674560f230dcf8aa19e6712aef9b9ce69c9840b6b581f0063040984553b2", @ANYRES32=0x0, @ANYBLOB], 0x1c}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, &(0x7f0000000200)=0x14)
ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000000)={@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xa, 0x13a, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @broadcast}], 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)

6.785095682s ago: executing program 2 (id=914):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x10000, 0x40, 0x0, 0x1}, 0x48)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x1, {0x1, 0x1, 0x4}, 0xff}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}]}]}, 0x30}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000780)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000007c0)={0x1, r4, 0x40, 0x1, 0x8, 0xb5, 0x2, 0x2, 0x7})
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000042)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0xa91, <r11=>0xffffffffffffffff, 0x1})
connect(r11, &(0x7f0000000440)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80)
ioctl$DRM_IOCTL_GET_CAP(r11, 0xc010640c, &(0x7f0000000400)={0x3})

6.699709169s ago: executing program 4 (id=915):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x3c}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}]}, 0x34}}, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02"], 0x5)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9"], 0x17)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0x0, 0x2)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="f5c78fea75301600"], 0x1b)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
r4 = getpid()
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000b00000900030073797a320000000044000000060a010c00000000000000000100000008000b40000000001c0004801800018008000100636d70000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
r7 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r7, &(0x7f0000000100)='reno\x00', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)

6.615064536s ago: executing program 0 (id=916):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vbi(&(0x7f0000003d80), 0x1, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0)
readv(r4, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000080)=""/61, 0x3d}], 0x2)
syz_usb_disconnect(r3)
syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=<r5=>0x0, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x1ff)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x90)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x10, 0x1, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9})
dup2(r8, r7)
io_uring_enter(0xffffffffffffffff, 0x567, 0xd16d, 0x15, 0x0, 0x0)
r9 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r11=>0x0})
bind$packet(r10, &(0x7f0000000300)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[], 0x0)
getgroups(0x0, 0x0)
ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000003ec0))
socket$kcm(0x10, 0x2, 0x0)

6.479295557s ago: executing program 3 (id=917):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000090, &(0x7f00000002c0), 0x1, 0x1108, &(0x7f0000001440)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0xfea7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
ftruncate(r1, 0xf88)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_MODES_OURS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc, 0x5, "2641e9569a3767f7"}]}]}, 0x44}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100006d00010000000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350064756d6d793000000000000000000000cc003480140035"], 0x100}}, 0x0)
eventfd2(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000480)="1eb6b2116a7a4aea", 0x8}], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000540)={0xf, 0x8}, 0x10)
ftruncate(r0, 0x1fa0000)
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@private, 0x0, 0x4}}, 0xe8)
sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800006bdf1ef198ed00000000dbaaf8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

6.103341508s ago: executing program 2 (id=918):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000001f800)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}]}}]}, 0x38}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
dup2(0xffffffffffffffff, r7)
sendmmsg$inet6(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0)
r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x0, 0x3, 0x0, 0x7}]})
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0))
r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r9, &(0x7f0000004440)={0x2020}, 0x2020)

5.558362653s ago: executing program 4 (id=919):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000005186b62f009500ced700000054e640c8e20b2d83368a356deec04a6f5b11ae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x120}, {0x6}}, {{@in=@empty}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x1}}, 0xe8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r3)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a", 0xf, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x25]}}, &(0x7f0000001540)=""/141, 0x2e, 0x8d, 0x1}, 0x20)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x200000000000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000400)="2e64460f01f866ba6100b0faee3e650f01eec744240000000000c7442402a000c0fec7442406000000000f011c2466b8e1008ed0c421695723b805000000b90e0000000f01d948b820590000000000000f23c80f21f8350800b0000f23f866b89d008ec80f07", 0x66}], 0x1, 0x0, 0x0, 0x61)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140))
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

4.856486681s ago: executing program 4 (id=920):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB], 0x2c}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x10, 0xc, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, @echo}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb}, 0xc)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00'})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0xe)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x401, 0x19, "1587bf7f165487b3"})
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

4.689918654s ago: executing program 1 (id=921):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000090, &(0x7f00000002c0), 0x1, 0x1108, &(0x7f0000001440)="$eJzs2L+KE0EcB/DvbKJwVWSuXwJaKMhxR3yBKxTSXGFtF2y0M5WSx/Fx5Cr74x4gxYF9ZLO3Kv5BzkRF+Xxg2Z0fM/PdKecXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6IyT20kOm6QOtSZJSdr2fH6ZpB3qd96NmpQ8fT5fPn41e7Lsp6WrNSndqu24ntytdVZn9aQ+Ojy9V5ev37wcfRFZ0ubiarU4OFvv9Shddpez2ex1WwAAAPjnbXY22fYPvrGe/ijyYL/5AAAAwM/8jp4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK+qw0eTpCRtez6/TNL+3d8CAAAAdlTS5Nnke/W+DfDZw7yflG198KF0c47ztl//4Obpt26+BAAAAP5TJTl7cX0fv5/xp3t5dxefZpyjo358/cr6NBklOf5qn4ur1WL7TFeL8icPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8ZAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAUwUAAP//lI7U9w==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0xfea7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
ftruncate(r1, 0xf88)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_MODES_OURS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc, 0x5, "2641e9569a3767f7"}]}]}, 0x44}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100006d00010000000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350064756d6d793000000000000000000000cc003480140035"], 0x100}}, 0x0)
eventfd2(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000480)="1eb6b2116a7a4aea", 0x8}], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000540)={0xf, 0x8}, 0x10)
ftruncate(r0, 0x1fa0000)
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@private, 0x0, 0x4}}, 0xe8)
sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800006bdf1ef198ed00000000dbaaf8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

4.62537959s ago: executing program 2 (id=922):
socket$inet6(0x10, 0x3, 0x0)
open(0x0, 0x141040, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x208101, 0x0)
write$tcp_mem(r1, &(0x7f0000000100)={0x1ff, 0x2d, 0x0, 0xa, 0x6, 0x2c}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x5, 0x2, 0xa, 0x201}], {0x14, 0x10}}, 0x98}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1\x00', &(0x7f0000000340)=@ethtool_per_queue_op={0x4b, 0x0, [], "8f6356f6770b5399bb1ad6f96936cab200c659d01c92369cd3fb932cfe4ad5cac9bd4fca720a0721418a7c70239a59b785d9f7e1c40ed85d47b5109ba7e1b7484d25209bc74081163dbec68d1f1a2f49e5a6c815d01ea24dde3f4c291f1295e7e800000000"}})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x7a, 0x4)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x60, 0x2}, @cond})
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
write$char_usb(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xd26}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004800}, 0x4004010)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@generic={0x88f5}}}, 0x0)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
r5 = dup(r4)
mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.62106624s ago: executing program 3 (id=923):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000de220000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r4=>0x0})
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="0e030e00c4e8120006001e0089e9aaa911d7c2290f0086dd1327c9167c642c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c15", 0x40, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000400)={r4, 0x1, 0x6, @multicast}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0xd8, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbd1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xd8}}, 0xc1)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000df251000000008002c00030000000500300000000000050033000100050037000000000005003800"/62], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000001014010000000000000000000400020000000000fc416f1092eb3069480a9a23649b410dd2cf8b54fd3ef1898c08b205efaf727d74fbf8b51ff8af6f04f5dc55ab1ffd2056fabcd0de73ad168c6bfd2e9f51c676aedc"], 0x18}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x2, 0x220108, 0x4, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000100), 0x0}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r6, 0x8b2a, &(0x7f0000000040))
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000440), 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000070000008180"], 0x30}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000001c0))
recvfrom$unix(r9, &(0x7f0000000340)=""/184, 0xb8, 0x100, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet_tcp_buf(r7, 0x6, 0x3d, &(0x7f0000000480)="f89e0258c805ff88014f9f4da202ec513b23d8cf536a671585743b38d167289ceae034a9dd73e6a2d2171ab3b4fe21fec0afa25470a5d3ca8a79eb1217581ec91f4f5fe6e1c92802d7494a753832f02876715d9e399b1d489a1868f2b0a519fa04c9106e06f1cbba56d5b2791b7fef01b3", 0x71)

4.153462109s ago: executing program 0 (id=924):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x68b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cgroup.freeze\x00', 0x7a05, 0x1700)
acct(&(0x7f00000001c0)='./file0\x00')
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
setfsgid(0xee00)
setresgid(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8)
r5 = io_uring_setup(0x1de0, &(0x7f00000004c0)={0x0, 0x3, 0x0, 0x100003, 0x2})
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000380)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0)
mknodat(r6, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00')

3.189351538s ago: executing program 0 (id=925):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020202000900030073797a32000000000900010073797a30000000001400020032"], 0x40}, 0x1, 0x40030000000000}, 0x0)
r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r7 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1)
socket$inet6(0xa, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=<r8=>0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e300000000008000300000000fd07000b"], 0x50}}, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES64=r5, @ANYRESDEC=r8], 0x150}}, 0x0)
sendfile(r6, r7, 0x0, 0x7ffff000)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r11, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0})
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r12)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0)

3.062989538s ago: executing program 3 (id=926):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup2(r1, r1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f0000000500)="bec4f2ed76efed76a260aa", 0xb, 0x40044044, &(0x7f0000000340)={0xa, 0xfffb, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="11eba5c75f85c28502c56b2b440bc89917fab802928b0bef934c1044d5bf577b4beca9fd3fd685bc0375ae95f5c009d06f6ba61e73a73f5e8e74b6eb46e900c50fcc0ba6c8e0", 0x46, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xffff, 0x4}, 0x8)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a010e04"], 0xd)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e008efff8f161dd8e4b0be371f6cf31f4d50000"], 0x24}}, 0x0)
pipe(0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x8, 0xa, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x3, 0x2000000}]}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x0, 0x8, 0xfffffffc, 0xac5b}})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04330affffffff07ff03000000"], 0xd)
syz_emit_ethernet(0xb3, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="6766c7442400433300006766c744240201000000670f01142465f20f79c5660fd230baf80c66b8a8bfc98066efbafc0c66b8d7a2000066ef3e0fc71e5cc83e0fc7bf00600fc7af4160668f381d7600baf80c66b89424688cc08a97b870bafc0cec", 0x61}], 0x1, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7, 0x1, 0x1, 0x500, 0x1, 0x840002})
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8}, 0x1c)
splice(r3, &(0x7f0000000380)=0x7, r2, &(0x7f0000000540)=0x9, 0x2, 0x4)
shutdown(r8, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000040)=0x84)

3.007749223s ago: executing program 4 (id=927):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000140)=@udp6=r1}, 0x20)
r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x196}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)
shutdown(r1, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000600)={[{@data_writeback}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodelalloc}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x5522, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r10}, 0x10)
ioctl$USBDEVFS_DISCSIGNAL(r9, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb049968b0a77337115cb5e534ae803e71246f423229019cd0a4c30767456f86dba221625a099049e4b3b794f467613cbf14916367d1769f7308b573ebb93d67ab2fbf196aea78464cb1578dbd1c3629eaf09736f6bc1cc12a1f26db97783"})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r8, 0x80045510, &(0x7f0000000000))

2.745172995s ago: executing program 0 (id=928):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d3174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8c536f64df3ead70943de5d656df13bb45b52f00"/219, @ANYRESDEC], 0x1, 0x368, &(0x7f0000000180)="$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")
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7fffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r1, &(0x7f00000057c0)=[{{&(0x7f0000002d80)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000680)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x3fffffffffffe2e, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x9000, 0x0, 0x0)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000001ac0), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x30}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x15, &(0x7f0000000980)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018230000", @ANYRES32=r5, @ANYBLOB="00000000041000008510000006000000"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x62, &(0x7f00000007c0)=""/98, 0x41000, 0x5d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0xd, 0x9, 0x3c5f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x10, 0x7}, 0x90)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(0xffffffffffffffff)

2.685985749s ago: executing program 3 (id=929):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = eventfd2(0x9, 0x80801)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000004c0), 0x4)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x3}, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x60, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @random, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}}, 0x0)
r9 = eventfd(0x1)
r10 = eventfd2(0x9, 0x1)
r11 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001780)='devices.deny\x00', 0x2, 0x0)
io_submit(r1, 0x4, &(0x7f0000001840)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000580)="5c80cd752ce4f7acfa9c237004f425d7ef3472dbbad1a9ffc66cc084a4407bb8dfd589cb2444d73941397841557d968bd18d8f7585bf80a9c1be8148496e49a852cca0febb8a89deb9f8141127cea464dfccd1297f3eb697ea3f704ffb3b0fca8b1cb9ef6190ac917223ae0f8bb73c2a5ae2926bed2bffaeda4f7df114c0f77ba8ee2a41db6fc22311470688c7e6aaf145acea2bac35b865be44", 0x9a, 0xfffffffffffffff7, 0x0, 0x0, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x1f, r2, &(0x7f0000000680)="af0e9a9c496bad5dbedd1d84d8f1ea432c076cb81cdb547b0ffac06518e4befcda878163ec28e896fc2a2890e20cc0d199f1c498d73f8d86c652a80cf3b8d49d7d718a9a7ac18acf9c2157d2700e182a398faa4683", 0x55, 0x37ce, 0x0, 0x2, r9}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x1ff, r0, &(0x7f0000000740)="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", 0x1000, 0x10001, 0x0, 0x3, r10}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x4, 0x8, r11, &(0x7f00000017c0)="8da2c3", 0x3, 0x7fffffff, 0x0, 0x2}])
io_getevents(r1, 0x0, 0x0, 0x0, 0x0)
r12 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r12, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r12, 0x10008)
r13 = accept4(r12, 0x0, 0x0, 0x0)
write$binfmt_elf64(r13, &(0x7f0000000240)=ANY=[], 0x78)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
sendto$inet(r13, &(0x7f0000000400)="a7", 0x1, 0x0, 0x0, 0x0)

2.013604994s ago: executing program 4 (id=930):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001640))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file2\x00'})
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe800000000000000000000000000600ff0200000000000000f6804f87000001890090780000000000000000000000000000ffffac1414aa00"/94], 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_rr_get_interval(0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0))
setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
timer_create(0x0, 0x0, &(0x7f0000000200))
syz_io_uring_setup(0x0, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
pread64(r3, &(0x7f0000000180)=""/38, 0x26, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x0, 0x1, 0x2})
r5 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x25c8}, 0x3})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)

1.785216423s ago: executing program 1 (id=931):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x552d, &(0x7f000000d000)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8141, 0x0)
fallocate(r3, 0x0, 0x0, 0x8010000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000040)=0x7fffffff)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"})
eventfd(0xb)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000300)=0x1000000004)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000000)={0x0, 0x2000000}, 0xc)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r6, &(0x7f0000003180)={0x2020}, 0x2020)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="670f015b0066bad00466b8030066efc4c1cd642264f30fc77304660f382026670f00959900c744240007002dd5c744240200000000c7442406000000000f011c24c4c2f9326100360fc72de50000000f20e035100000000f22e0", 0x5a}], 0x1, 0x0, 0x0, 0xfffffe70)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRESOCT=r5, @ANYRES64=r7, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}})
ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}})

1.569974451s ago: executing program 3 (id=932):
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x10)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000040000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x24, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r4 = syz_pidfd_open(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0xb, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5501, &(0x7f00000000c0)={{}, "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"})
socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)=0x7, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7, 0x10001}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TIOCSTI(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})

450.969463ms ago: executing program 0 (id=933):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000090, &(0x7f00000002c0), 0x1, 0x1108, &(0x7f0000001440)="$eJzs2L+KE0EcB/DvbKJwVWSuXwJaKMhxR3yBKxTSXGFtF2y0M5WSx/Fx5Cr74x4gxYF9ZLO3Kv5BzkRF+Xxg2Z0fM/PdKecXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6IyT20kOm6QOtSZJSdr2fH6ZpB3qd96NmpQ8fT5fPn41e7Lsp6WrNSndqu24ntytdVZn9aQ+Ojy9V5ev37wcfRFZ0ubiarU4OFvv9Shddpez2ex1WwAAAPjnbXY22fYPvrGe/ijyYL/5AAAAwM/8jp4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK+qw0eTpCRtez6/TNL+3d8CAAAAdlTS5Nnke/W+DfDZw7yflG198KF0c47ztl//4Obpt26+BAAAAP5TJTl7cX0fv5/xp3t5dxefZpyjo358/cr6NBklOf5qn4ur1WL7TFeL8icPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8ZAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAUwUAAP//lI7U9w==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0xfea7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
ftruncate(r1, 0xf88)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_MODES_OURS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc, 0x5, "2641e9569a3767f7"}]}]}, 0x44}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100006d00010000000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350064756d6d793000000000000000000000cc003480140035"], 0x100}}, 0x0)
eventfd2(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000480)="1eb6b2116a7a4aea", 0x8}], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000540)={0xf, 0x8}, 0x10)
ftruncate(r0, 0x1fa0000)
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@private, 0x0, 0x4}}, 0xe8)
sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800006bdf1ef198ed00000000dbaaf8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

323.579184ms ago: executing program 3 (id=934):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc3528c13e245075073feaebad2ba4189b5fb06f42a5354f9aadf6970f543a4b56e61b4b8", 0xfdef, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r3 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8=r0, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYRESHEX, @ANYRES64, @ANYRESDEC, @ANYRES32=r1, @ANYBLOB="e89d10d22dfe3c81811469c50b5609a828eb379586ac689ac3e54f82fab21238d987d2557b84be0f63575c9c6bba5b5fba2b53105cdfbce6623f1a2e06f815e5390790b55a8a3f14334408ad49bc5254131a2d4dd0f24c0c1ecdd76681655034785a662669c15964ff361c08b086b9af13ef3f36e3ec79fa16a5f3e62c2b0da309f3b8debc5f382e87e639f0049395c636c4049f257c9ae3b9f625c9c4decdc094869fe3ca4d3c0ae05ec6c43260b5f27e7dfafc1af9df8ac0a78146d2b344733cdf884a36fb6a80f051fb25da8199e5fe68a28908c53873919d87ecb5b47dc5bd7268fdeb214548c42a9f", @ANYBLOB="b3a6259fb88c657f77b22f973d242164b6fd799edb1edc0b6f4e244411de112d22d083323439c396e4d4241c7a243ae53d346f8d68253b33a9", @ANYRES32, @ANYBLOB="ff949dfbc9c436274d95ed36259334cfd11eb5f59251ba62fd6b84bf0d3b", @ANYRES16=r0, @ANYRESDEC=r0], 0x80, 0x151a, &(0x7f0000002a80)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x20102, 0x166)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r6 = socket$inet(0x2, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x107382)
ioctl$LOOP_CLR_FD(r9, 0x4c08)
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x128}}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18ffff000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202069250000000069e4ca2e53e29d002020207baaf8ff00000000bfa100000000000000000000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
renameat2(r4, &(0x7f0000000440)='./bus/file0\x00', r3, &(0x7f0000000180)='./bus/file0\x00', 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000014c0)={@broadcast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @empty, @remote, @empty}}}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x4e23, 0xfffd, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb4, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6a6, &(0x7f00000007c0)="$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")

0s ago: executing program 4 (id=935):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x1)
ioperm(0x0, 0x0, 0x1)
r1 = getpid()
syz_pidfd_open(0x0, 0x0)
r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
r3 = dup2(r2, r2)
openat$cgroup_int(r3, 0x0, 0x657, 0xfeffffff)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, &(0x7f0000000180))
syz_io_uring_setup(0x67fd, &(0x7f0000000100), 0x0, 0x0)
r5 = io_uring_setup(0x4d63, &(0x7f0000000080))
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r7 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}})
getpid()
openat$vimc1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x12ac, &(0x7f0000000200)={@local, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x2}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x126e, 0x2b, 0x0, @private2, @local, {[@fragment={0x89, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x67}, @srh={0x3a, 0x8, 0x4, 0x4, 0x5, 0x0, 0x7, [@mcast1, @local, @local, @loopback]}, @srh={0x88, 0x12, 0x4, 0x9, 0xc, 0x28, 0x0, [@loopback, @remote, @rand_addr=' \x01\x00', @private1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, @private0]}, @srh={0x16, 0xa, 0x4, 0x5, 0x0, 0x0, 0x1000, [@initdev={0xfe, 0x88, '\x00', 0x7f, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x67, 0xa, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0xff, 0x8, [0x6ea, 0xc, 0x2, 0x28, 0x3, 0x9, 0xfffffffffffffffc, 0x709e, 0x4]}}]}, @fragment={0x14, 0x0, 0x4, 0x1, 0x0, 0x15, 0x68}, @dstopts={0x8a, 0x206, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @generic={0xf, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x9a}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x43}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @mcast1}]}], {0x0, 0x0, 0x86, 0x0, @opaque="502a5965c41a436bad5670a2fb6c8ee99c9e1d1a6207447ae313a91817dd62005474ef44f728e954e9cd0063e67661991c31d2ffb646a7d022a2a22f57b5be738668d7b37fa17144b29cb014b1614c28b07bd6f8d4c3625df98fe05340f73a333bf7adfe5e5bfb27e58df37c981fd6643162f5214b5a3ed0bb744e59df08"}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

details
[  267.802507][ T6485] EXT4-fs (loop1): free_blocks=2415919104
[  267.808875][ T6485] EXT4-fs (loop1): dirty_blocks=16
[  267.814541][ T6485] EXT4-fs (loop1): Block reservation details
[  267.820955][ T6485] EXT4-fs (loop1): i_reserved_data_blocks=1
[  267.994233][ T6485] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  268.006526][ T6485] EXT4-fs (loop1): This should not happen!! Data will be lost
[  268.006526][ T6485] 
[  268.156942][   T25] audit: type=1800 audit(1723878619.230:225): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.632" name="file3" dev="loop0" ino=89 res=0 errno=0
[  268.488986][ T3573] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[  268.761301][ T6491] device syz_tun entered promiscuous mode
[  268.802747][ T6491] device batadv_slave_0 entered promiscuous mode
[  268.838212][ T6491] device syz_tun left promiscuous mode
[  268.873127][ T6491] device batadv_slave_0 left promiscuous mode
[  268.921839][ T6468] device gretap0 left promiscuous mode
[  268.930771][ T6468] bridge0: port 3(gretap0) entered disabled state
[  269.087467][ T6507] loop1: detected capacity change from 0 to 16
[  269.130290][   T25] audit: type=1326 audit(1723878620.371:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.2.640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac25536e79 code=0x0
[  269.162610][ T6508] netlink: 'syz.0.637': attribute type 2 has an invalid length.
[  269.208952][ T6507] erofs: (device loop1): mounted with root inode @ nid 36.
[  269.298021][ T6510] team0: Port device macvlan1 added
[  269.427493][ T6513] device dummy0 entered promiscuous mode
[  269.769741][ T3573] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[  269.819373][ T6519] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192]
[  269.872131][   T25] audit: type=1800 audit(1723878621.091:227): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.639" name="file3" dev="loop1" ino=89 res=0 errno=0
[  270.133559][ T6513] device dummy0 left promiscuous mode
[  270.519552][ T6514] device team_slave_0 entered promiscuous mode
[  270.526276][ T6514] device team_slave_1 entered promiscuous mode
[  270.555365][ T6514] device vlan2 entered promiscuous mode
[  270.574546][ T6514] device team0 entered promiscuous mode
[  270.580227][ T6514] device macvlan1 entered promiscuous mode
[  270.593928][ T6514] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  270.842467][ T6536] netlink: 'syz.2.643': attribute type 1 has an invalid length.
[  270.880328][ T6536] netlink: 'syz.2.643': attribute type 1 has an invalid length.
[  270.925191][   T25] audit: type=1326 audit(1723878622.172:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.1.642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efda76a1e79 code=0x0
[  271.051280][ T6534] loop3: detected capacity change from 0 to 8192
[  271.195825][ T6534] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  271.244108][ T6534] REISERFS (device loop3): using ordered data mode
[  271.252423][ T6534] reiserfs: using flush barriers
[  271.264815][ T6534] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  271.319174][ T6534] REISERFS (device loop3): checking transaction log (loop3)
[  271.452907][ T6523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.531066][ T6546] device syz_tun entered promiscuous mode
[  271.586492][ T6546] device batadv_slave_0 entered promiscuous mode
[  271.657788][ T6546] device syz_tun left promiscuous mode
[  271.663176][ T6534] REISERFS (device loop3): Using tea hash to sort names
[  271.671343][ T6534] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  271.725686][ T6546] device batadv_slave_0 left promiscuous mode
[  271.732304][ T6534] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  271.885771][ T6534] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  272.100739][ T6561] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.645'.
[  272.114078][ T6557] device syz_tun entered promiscuous mode
[  272.132800][ T6557] device batadv_slave_0 entered promiscuous mode
[  272.205486][ T6563] usb usb7: usbfs: process 6563 (syz.2.651) did not claim interface 0 before use
[  272.548085][   T25] audit: type=1326 audit(1723878623.793:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac25536e79 code=0x0
[  272.589395][ T6557] device syz_tun left promiscuous mode
[  272.623824][ T6557] device batadv_slave_0 left promiscuous mode
[  272.690854][ T6569] device dummy0 entered promiscuous mode
[  272.703544][ T6569] device dummy0 left promiscuous mode
[  272.886174][ T6571] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  272.899818][ T6577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.654'.
[  273.089127][ T6582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.654'.
[  273.108062][ T6579] ip6t_rpfilter: unknown options
[  273.121547][ T6577] loop3: detected capacity change from 0 to 512
[  273.447974][ T6587] loop0: detected capacity change from 0 to 2048
[  273.498139][ T6587] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  273.518810][ T6587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  273.664808][ T6577] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  273.791787][ T6577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  273.809260][ T6577] System zones: 1-12
[  273.818567][ T6577] EXT4-fs (loop3): orphan cleanup on readonly fs
[  273.858666][ T6577] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.654: bg 0: block 361: padding at end of block bitmap is not set
[  273.963417][ T6577] EXT4-fs (loop3): Remounting filesystem read-only
[  273.990794][ T6592] device syz_tun entered promiscuous mode
[  273.991156][ T6577] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  274.008599][ T6592] device batadv_slave_0 entered promiscuous mode
[  274.094418][ T6592] device syz_tun left promiscuous mode
[  274.101230][ T6577] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.654: invalid indirect mapped block 12 (level 1)
[  274.114878][ T6592] device batadv_slave_0 left promiscuous mode
[  274.188828][ T6577] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.654: invalid indirect mapped block 2 (level 2)
[  274.298648][ T6577] EXT4-fs (loop3): 1 truncate cleaned up
[  274.360825][ T6577] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000400000,errors=remount-ro,min_batch_time=0x000000000000007f. Quota mode: none.
[  274.413617][ T6577] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 5: comm syz.3.654: lblock 0 mapped to illegal pblock 5 (length 1)
[  275.451081][ T6608] netlink: 44 bytes leftover after parsing attributes in process `syz.2.663'.
[  275.466603][ T6608] loop2: detected capacity change from 0 to 512
[  275.572300][ T6577] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.654: error -117 reading directory block
[  276.257008][ T6608] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  276.321648][ T6608] EXT4-fs (loop2): 1 truncate cleaned up
[  276.327781][ T6608] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,bsdgroups,stripe=0x0000000000000004,block_validity,debug_want_extra_isize=0x000000000000002e,,errors=continue. Quota mode: writeback.
[  276.357349][ T6606] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.663: corrupted in-inode xattr
[  276.391148][ T6606] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1745: inode #15: comm syz.2.663: unable to update i_inline_off
[  276.404809][ T6606] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #15: comm syz.2.663: corrupted in-inode xattr
[  276.423123][ T6606] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.663: corrupted in-inode xattr
[  276.501478][ T6618] device syz_tun entered promiscuous mode
[  276.532607][ T6618] device batadv_slave_0 entered promiscuous mode
[  276.592816][   T25] audit: type=1326 audit(1723878627.845:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.1.669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efda76a1e79 code=0x0
[  276.618921][ T6618] device syz_tun left promiscuous mode
[  276.736604][ T6632] loop2: detected capacity change from 0 to 256
[  276.776523][ T6618] device batadv_slave_0 left promiscuous mode
[  276.796452][ T6624] device vlan0 entered promiscuous mode
[  276.818078][ T6633] device dummy0 entered promiscuous mode
[  277.111702][ T6633] device dummy0 left promiscuous mode
[  277.167805][ T6635] device vlan0 left promiscuous mode
[  277.261033][ T6632] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  277.307470][   T25] audit: type=1800 audit(1723878628.555:231): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.670" name="file1" dev="loop2" ino=1048649 res=0 errno=0
[  278.577409][ T6655] attempt to access beyond end of device
[  278.577409][ T6655] loop2: rw=0, want=304, limit=256
[  279.533320][ T5392] Bluetooth: hci0: command 0x0409 tx timeout
[  279.665104][ T6657] mmap: syz.4.671 (6657) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  280.031510][ T6683] loop3: detected capacity change from 0 to 16
[  280.078217][ T6682] program syz.4.680 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.193673][ T6683] erofs: (device loop3): mounted with root inode @ nid 36.
[  280.224506][ T6669] loop0: detected capacity change from 0 to 8192
[  280.397221][ T6669] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  280.400599][ T6693] device syz_tun entered promiscuous mode
[  280.893075][ T6669] REISERFS (device loop0): using ordered data mode
[  280.904323][ T6693] device batadv_slave_0 entered promiscuous mode
[  280.932551][ T6693] device syz_tun left promiscuous mode
[  280.942402][ T6686] loop1: detected capacity change from 0 to 8192
[  280.957558][ T6669] reiserfs: using flush barriers
[  280.970651][ T6693] device batadv_slave_0 left promiscuous mode
[  280.984142][ T6669] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  281.037903][ T6669] REISERFS (device loop0): checking transaction log (loop0)
[  281.045724][ T6686] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified.
[  281.298630][ T6669] REISERFS (device loop0): Using tea hash to sort names
[  281.372459][ T6669] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  281.445015][ T6678] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  281.448864][ T6669] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  281.826335][ T6714] loop2: detected capacity change from 0 to 2048
[  281.893182][ T6714] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  281.922211][ T6714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  282.178382][ T6669] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  282.297679][ T6719] netlink: 76 bytes leftover after parsing attributes in process `syz.1.688'.
[  282.383279][ T6728] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.677'.
[  282.483547][ T6723] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  282.483547][ T6723]    program syz.1.688 not setting count and/or reply_len properly
[  282.615490][ T6730] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -6 0
[  283.545571][ T6707] loop3: detected capacity change from 0 to 32768
[  283.659898][ T6707] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.684 (6707)
[  283.666018][ T6756] loop2: detected capacity change from 0 to 16
[  283.694893][ T6754] loop0: detected capacity change from 0 to 512
[  283.735417][ T6707] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  283.763168][ T6707] BTRFS info (device loop3): using free space tree
[  283.772676][ T6707] BTRFS info (device loop3): has skinny extents
[  283.794504][ T6754] EXT4-fs (loop0): Ignoring removed orlov option
[  283.811860][ T6756] erofs: (device loop2): mounted with root inode @ nid 36.
[  283.856464][ T6754] EXT4-fs (loop0): Test dummy encryption mode enabled
[  283.951665][ T6754] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  283.980144][ T6754] System zones: 1-12
[  284.057948][ T6754] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.690: casefold flag without casefold feature
[  284.302525][ T5392] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  284.311982][ T6754] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.690: missing EA_INODE flag
[  284.332654][ T5392] Bluetooth: hci1: Injecting HCI hardware error event
[  284.351024][ T6754] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.690: error while reading EA inode 12 err=-117
[  284.377040][ T3586] Bluetooth: hci1: hardware error 0x00
[  284.429165][ T6754] EXT4-fs (loop0): 1 orphan inode deleted
[  284.467257][ T6754] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback.
[  284.489196][    C1] vkms_vblank_simulate: vblank timer overrun
[  284.719640][ T6707] BTRFS error (device loop3): open_ctree failed
[  284.776444][ T6748] loop1: detected capacity change from 0 to 40427
[  284.810954][ T6789] loop2: detected capacity change from 0 to 64
[  285.055627][ T6748] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  285.114488][ T6748] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  285.193134][ T6748] F2FS-fs (loop1): invalid crc value
[  285.224263][ T6795] overlayfs: missing 'lowerdir'
[  285.245121][ T6748] F2FS-fs (loop1): Found nat_bits in checkpoint
[  285.346690][ T6748] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  285.353786][ T6748] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  286.001212][ T6816] loop3: detected capacity change from 0 to 2048
[  286.099972][ T6810] loop0: detected capacity change from 0 to 2048
[  286.214933][ T6816] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  286.234614][ T6816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  286.592509][ T6808] loop2: detected capacity change from 0 to 8192
[  286.716999][ T6808] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  286.753121][ T6810] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  286.790685][ T6808] REISERFS (device loop2): using ordered data mode
[  286.804792][ T6808] reiserfs: using flush barriers
[  286.844598][ T6808] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  286.929236][ T6808] REISERFS (device loop2): checking transaction log (loop2)
[  287.031078][ T3706] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  287.105941][ T6827] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  287.121349][ T6827] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  287.133899][ T6827] EXT4-fs (loop0): This should not happen!! Data will be lost
[  287.133899][ T6827] 
[  287.143653][ T6827] EXT4-fs (loop0): Total free blocks count 0
[  287.149702][ T6827] EXT4-fs (loop0): Free/Dirty block details
[  287.155726][ T6827] EXT4-fs (loop0): free_blocks=2415919104
[  287.161488][ T6827] EXT4-fs (loop0): dirty_blocks=16
[  287.166678][ T6827] EXT4-fs (loop0): Block reservation details
[  287.172720][ T6827] EXT4-fs (loop0): i_reserved_data_blocks=1
[  287.236067][ T6827] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  287.248481][ T6827] EXT4-fs (loop0): This should not happen!! Data will be lost
[  287.248481][ T6827] 
[  287.696419][ T3706] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  287.889894][ T6808] REISERFS (device loop2): Using tea hash to sort names
[  287.905142][ T6808] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  287.937359][ T6808] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  287.947607][ T6834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  288.002297][ T6832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.704'.
[  288.197106][   T25] audit: type=1804 audit(1723878639.451:232): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.698" name="/newroot/161/bus/bus/file0" dev="overlay" ino=965 res=1 errno=0
[  288.234826][ T6837] xt_TCPMSS: Only works on TCP SYN packets
[  288.261557][   T25] audit: type=1804 audit(1723878639.451:233): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.698" name="/newroot/161/bus/bus/file0" dev="overlay" ino=965 res=1 errno=0
[  288.378117][ T6843] device syz_tun entered promiscuous mode
[  288.412597][ T6843] device batadv_slave_0 entered promiscuous mode
[  288.415081][ T6849] loop2: detected capacity change from 0 to 16
[  288.427155][ T6843] device syz_tun left promiscuous mode
[  288.433643][ T6843] device batadv_slave_0 left promiscuous mode
[  288.458149][ T6845] loop0: detected capacity change from 0 to 8192
[  288.500640][ T6851] sg_write: process 521 (syz.4.713) changed security contexts after opening file descriptor, this is not allowed.
[  288.505503][ T6849] erofs: (device loop2): mounted with root inode @ nid 36.
[  288.569096][ T6854] loop1: detected capacity change from 0 to 1024
[  289.050854][ T6845] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  290.529298][ T6845] REISERFS (device loop0): using ordered data mode
[  290.562999][ T6845] reiserfs: using flush barriers
[  290.579145][ T6845] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  290.602036][ T6845] REISERFS (device loop0): checking transaction log (loop0)
[  290.704266][ T5549] hfsplus: bad catalog entry type
[  290.946922][ T6845] REISERFS (device loop0): Using tea hash to sort names
[  290.963021][ T6845] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  291.013959][ T6845] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  291.132905][ T6845] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  291.139430][ T6872] loop2: detected capacity change from 0 to 8192
[  291.251339][ T6872] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  291.292879][ T6872] REISERFS (device loop2): using ordered data mode
[  291.313664][ T6876] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.711'.
[  291.328562][ T6872] reiserfs: using flush barriers
[  291.346758][ T6872] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  291.518850][ T6872] REISERFS (device loop2): checking transaction log (loop2)
[  291.554927][ T6865] loop3: detected capacity change from 0 to 32768
[  291.824931][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'.
[  291.912543][ T6887] netlink: 76 bytes leftover after parsing attributes in process `syz.4.724'.
[  292.585179][ T6872] REISERFS (device loop2): Using tea hash to sort names
[  292.601877][ T6877] chnl_net:caif_netlink_parms(): no params data found
[  292.619427][ T6872] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  292.687635][ T6872] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  292.779660][ T6872] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  292.881166][ T6889] loop0: detected capacity change from 0 to 512
[  293.045236][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.078251][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.186583][   T25] audit: type=1326 audit(1723878644.443:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a21529e79 code=0x0
[  293.223725][ T6889] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: writeback.
[  293.255860][ T6877] device bridge_slave_0 entered promiscuous mode
[  293.301850][ T6889] ext4 filesystem being mounted at /151/bus supports timestamps until 2038 (0x7fffffff)
[  293.373570][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.441480][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.471304][ T5394] Bluetooth: hci2: command 0x0409 tx timeout
[  293.472247][ T6877] device bridge_slave_1 entered promiscuous mode
[  293.816159][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.890795][ T6905] CIFS: VFS: Malformed UNC in devname
[  293.920822][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.961551][   T25] audit: type=1326 audit(1723878645.153:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac25536e79 code=0x7ffc0000
[  294.120657][   T25] audit: type=1326 audit(1723878645.153:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac25536e79 code=0x7ffc0000
[  294.165748][   T25] audit: type=1326 audit(1723878645.153:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac25535810 code=0x7ffc0000
[  294.237542][ T6877] team0: Port device team_slave_0 added
[  294.317462][   T25] audit: type=1326 audit(1723878645.153:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac25535810 code=0x7ffc0000
[  294.370322][ T6877] team0: Port device team_slave_1 added
[  294.398772][   T25] audit: type=1326 audit(1723878645.153:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac25536e79 code=0x7ffc0000
[  294.421752][   T25] audit: type=1326 audit(1723878645.153:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac25536e79 code=0x7ffc0000
[  294.440548][ T6915] loop0: detected capacity change from 0 to 2048
[  294.467553][   T25] audit: type=1326 audit(1723878645.163:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac25536e79 code=0x7ffc0000
[  294.554913][ T6920] xt_limit: Overflow, try lower: 6/2147483648
[  294.813734][   T25] audit: type=1326 audit(1723878645.163:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac25536e79 code=0x7ffc0000
[  294.949201][ T6915] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  294.965400][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.072804][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.122180][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.207237][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.218230][ T6931] loop2: detected capacity change from 0 to 8192
[  295.220072][   T25] audit: type=1326 audit(1723878645.163:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac25536e79 code=0x7ffc0000
[  295.260507][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.294138][ T6931] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  295.297451][   T25] audit: type=1326 audit(1723878645.163:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fac25536e79 code=0x7ffc0000
[  295.310483][ T6931] REISERFS (device loop2): using ordered data mode
[  295.332833][ T6931] reiserfs: using flush barriers
[  295.338808][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.349614][ T6931] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  295.368263][ T3797] IPVS: stopping backup sync thread 4100 ...
[  295.380347][ T6931] REISERFS (device loop2): checking transaction log (loop2)
[  295.394373][ T6877] device hsr_slave_0 entered promiscuous mode
[  295.411636][ T6877] device hsr_slave_1 entered promiscuous mode
[  295.418552][ T6877] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.426217][ T6877] Cannot create hsr debugfs directory
[  295.550380][ T3619] Bluetooth: hci2: command 0x041b tx timeout
[  295.664782][ T6931] REISERFS (device loop2): Using tea hash to sort names
[  295.673515][ T6931] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  295.758935][ T6938] team0: No ports can be present during mode change
[  296.000469][ T6931] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  296.159060][ T6945] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  296.256353][ T6944] loop3: detected capacity change from 0 to 8192
[  296.303194][ T3797] device hsr_slave_0 left promiscuous mode
[  296.313083][ T3797] device hsr_slave_1 left promiscuous mode
[  296.326517][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.342322][ T6944] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  296.352812][ T6944] REISERFS (device loop3): using ordered data mode
[  296.359327][ T6944] reiserfs: using flush barriers
[  296.375475][ T6944] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  296.377051][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_0
[  296.399723][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.408381][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.417598][ T3797] device team0 left promiscuous mode
[  296.423227][ T3797] device team_slave_0 left promiscuous mode
[  296.427259][ T6944] REISERFS (device loop3): checking transaction log (loop3)
[  296.430583][ T3797] device team_slave_1 left promiscuous mode
[  296.444076][ T3797] bridge0: port 3(team0) entered disabled state
[  296.452190][ T3797] device bridge_slave_1 left promiscuous mode
[  296.458484][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.473325][ T3797] device bridge_slave_0 left promiscuous mode
[  296.494067][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.546043][ T3797] device veth1_macvtap left promiscuous mode
[  296.566986][ T3797] device veth0_macvtap left promiscuous mode
[  296.588039][ T3797] device veth1_vlan left promiscuous mode
[  296.598698][ T3797] device veth0_vlan left promiscuous mode
[  296.611001][ T6944] REISERFS (device loop3): Using tea hash to sort names
[  296.618251][ T6944] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  296.632718][ T6944] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  296.700178][ T6944] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  296.808936][ T6942] loop0: detected capacity change from 0 to 32768
[  296.909274][ T3797] team0 (unregistering): Port device team_slave_1 removed
[  296.933111][ T3797] team0 (unregistering): Port device team_slave_0 removed
[  296.953147][ T6942] XFS (loop0): Mounting V5 Filesystem
[  296.958905][ T3797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.974419][ T3797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.018144][ T6942] XFS (loop0): Ending clean mount
[  297.028340][ T6942] XFS (loop0): Quotacheck needed: Please wait.
[  297.063694][ T3797] bond0 (unregistering): Released all slaves
[  297.098090][ T6942] XFS (loop0): Quotacheck: Done.
[  297.129645][ T6948] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.732'.
[  297.224207][ T6877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.239918][ T5392] Bluetooth: hci4: command 0x2016 tx timeout
[  297.329682][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'.
[  297.381432][ T6877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.424102][ T3568] XFS (loop0): Unmounting Filesystem
[  297.543618][ T6980] loop2: detected capacity change from 0 to 8192
[  297.571632][ T6877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.641457][ T5394] Bluetooth: hci2: command 0x040f tx timeout
[  297.695457][ T6980] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  297.747881][ T5392] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  297.759757][ T6980] REISERFS (device loop2): using ordered data mode
[  297.799401][ T6980] reiserfs: using flush barriers
[  297.805572][ T6980] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  297.830232][ T6877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.890604][ T6980] REISERFS (device loop2): checking transaction log (loop2)
[  298.029075][ T5392] usb 4-1: Using ep0 maxpacket: 32
[  298.081302][ T6999] loop0: detected capacity change from 0 to 512
[  298.100536][ T6877] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  298.134693][ T6877] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  298.149348][ T5392] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  298.178427][ T5392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.204058][ T6877] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  298.235549][ T6980] REISERFS (device loop2): Using tea hash to sort names
[  298.246059][ T5392] usb 4-1: config 0 descriptor??
[  298.268777][ T6980] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  298.294942][ T6980] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  298.300981][ T6877] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  298.310547][ T5392] rndis_host: probe of 4-1:0.0 failed with error -22
[  298.333756][ T6999] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  298.376853][ T6999] EXT4-fs (loop0): 1 truncate cleaned up
[  298.387476][ T6999] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[  298.408921][ T5394] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  298.522226][ T6980] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  298.574656][ T7003] loop3: detected capacity change from 0 to 512
[  298.660095][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.686772][ T7004] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.739'.
[  298.717633][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  298.736358][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  298.757079][ T6877] 8021q: adding VLAN 0 to HW filter on device team0
[  298.770050][ T5394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.802608][ T7003] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.741: invalid indirect mapped block 10 (level 1)
[  298.898194][ T5394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.909909][ T7003] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.741: invalid indirect mapped block 8 (level 1)
[  298.946370][ T7003] EXT4-fs (loop3): 1 truncate cleaned up
[  298.960066][ T5394] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  298.993806][ T6877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  299.018211][ T7003] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  299.038727][ T5394] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  299.056018][ T6877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  299.079059][ T5394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.103825][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  299.130802][ T5394] usb 5-1: config 0 descriptor??
[  299.149153][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  299.180669][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.187740][ T5392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.206971][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  299.216176][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  299.249287][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.256406][ T5392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.278483][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  299.287608][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  299.304876][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  299.325959][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  299.348648][   T25] kauditd_printk_skb: 45 callbacks suppressed
[  299.348662][   T25] audit: type=1800 audit(1723878650.616:290): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.741" name="bus" dev="loop3" ino=18 res=0 errno=0
[  299.349364][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  299.403080][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  299.412806][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  299.422033][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  299.439318][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  299.454024][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  299.469928][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  299.478189][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  299.496443][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  299.605509][ T3646] usb 4-1: USB disconnect, device number 9
[  299.623294][ T5394] acrux 0003:1A34:0802.0005: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0
[  299.655996][ T5394] acrux 0003:1A34:0802.0005: no inputs found
[  299.675444][ T5394] acrux 0003:1A34:0802.0005: Failed to enable force feedback support, error: -19
[  299.675696][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.738618][ T3619] Bluetooth: hci2: command 0x0419 tx timeout
[  299.845288][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  299.864078][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  299.901282][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  299.912591][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  300.296127][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  300.326787][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  300.362376][ T6877] device veth0_vlan entered promiscuous mode
[  300.386428][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  300.395796][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  300.432872][ T6877] device veth1_vlan entered promiscuous mode
[  300.498042][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  300.539869][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  300.585649][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  300.638613][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  300.642555][ T7034] loop2: detected capacity change from 0 to 2048
[  300.706624][ T6877] device veth0_macvtap entered promiscuous mode
[  300.736444][ T7029] loop3: detected capacity change from 0 to 8192
[  300.770752][ T6877] device veth1_macvtap entered promiscuous mode
[  300.815017][ T7034] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.877334][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  300.891557][ T7029] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  300.906464][ T7029] REISERFS (device loop3): using ordered data mode
[  300.907170][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  300.917268][ T7029] reiserfs: using flush barriers
[  300.935105][ T7029] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  300.937757][ T3646] usb 5-1: reset high-speed USB device number 12 using dummy_hcd
[  300.974157][ T7029] REISERFS (device loop3): checking transaction log (loop3)
[  301.127305][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.149498][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.169917][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.182081][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.192817][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.203492][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.214563][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.231758][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.245780][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.279999][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.321330][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.346726][ T7038] device syz_tun entered promiscuous mode
[  301.359806][ T7038] device batadv_slave_0 entered promiscuous mode
[  301.370313][ T7038] device syz_tun left promiscuous mode
[  301.383838][ T7029] REISERFS (device loop3): Using tea hash to sort names
[  301.402406][ T7029] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  301.417757][ T7029] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  301.439305][ T7038] device batadv_slave_0 left promiscuous mode
[  301.513369][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  301.525959][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  301.539899][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.572811][ T7029] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  301.582961][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.616725][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.636320][ T7045] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.751'.
[  301.647212][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.662698][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.673730][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.692682][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.710774][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.725151][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.743526][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.755613][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.800258][ T6877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.830341][ T6877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.856011][ T6877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.865529][ T6877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.896354][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  301.916967][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  302.004759][ T7050] loop2: detected capacity change from 0 to 8192
[  302.010034][ T7054] loop0: detected capacity change from 0 to 512
[  302.110251][  T823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.126066][  T823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.149186][ T7054] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.753: casefold flag without casefold feature
[  302.170895][ T7050] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  302.180964][ T7054] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.753: missing EA_INODE flag
[  302.182886][ T3740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.195274][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  302.218580][ T7050] REISERFS (device loop2): using ordered data mode
[  302.225438][ T7054] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.753: error while reading EA inode 2 err=-117
[  302.238056][ T3740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.243289][ T7054] EXT4-fs (loop0): 1 orphan inode deleted
[  302.249589][ T7050] reiserfs: using flush barriers
[  302.252403][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  302.262279][ T7054] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  302.284893][ T7050] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  302.324289][ T7050] REISERFS (device loop2): checking transaction log (loop2)
[  302.357466][   T21] usb 5-1: USB disconnect, device number 12
[  302.620819][ T7050] REISERFS (device loop2): Using tea hash to sort names
[  302.837888][   T25] audit: type=1326 audit(1723878654.028:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8eb8de79 code=0x7ffc0000
[  303.360996][   T25] audit: type=1326 audit(1723878654.028:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8eb8de79 code=0x7ffc0000
[  303.386851][ T7050] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  303.403245][ T7050] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  303.423237][   T25] audit: type=1326 audit(1723878654.038:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f6f8eb8de79 code=0x7ffc0000
[  303.477781][   T25] audit: type=1326 audit(1723878654.038:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8eb8de79 code=0x7ffc0000
[  303.501442][ T7050] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  303.515426][   T25] audit: type=1326 audit(1723878654.038:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8eb8de79 code=0x7ffc0000
[  303.575016][   T25] audit: type=1326 audit(1723878654.038:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8eb8de79 code=0x7ffc0000
[  303.643884][ T7065] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.750'.
[  303.674697][   T25] audit: type=1326 audit(1723878654.038:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8eb8de79 code=0x7ffc0000
[  303.701273][   T25] audit: type=1326 audit(1723878654.038:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8eb8de79 code=0x7ffc0000
[  303.724795][   T25] audit: type=1326 audit(1723878654.048:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8eb8de79 code=0x7ffc0000
[  303.893727][ T7071] loop3: detected capacity change from 0 to 2048
[  304.024388][ T7079] loop2: detected capacity change from 0 to 16
[  304.075332][ T7072] device veth0_vlan left promiscuous mode
[  304.129360][ T7079] erofs: (device loop2): mounted with root inode @ nid 36.
[  304.817815][ T3586] Bluetooth: hci4: link tx timeout
[  304.830939][ T3586] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  304.835749][ T3573] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[  304.886925][ T7084] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192]
[  304.910855][   T25] kauditd_printk_skb: 9 callbacks suppressed
[  304.914635][   T25] audit: type=1800 audit(1723878656.169:309): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.756" name="file3" dev="loop2" ino=89 res=0 errno=0
[  305.089454][ T7071] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  305.479798][ T7089] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  305.495161][ T7089] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  305.507550][ T7089] EXT4-fs (loop3): This should not happen!! Data will be lost
[  305.507550][ T7089] 
[  305.517325][ T7089] EXT4-fs (loop3): Total free blocks count 0
[  305.523440][ T7089] EXT4-fs (loop3): Free/Dirty block details
[  305.529520][ T7089] EXT4-fs (loop3): free_blocks=2415919104
[  305.535340][ T7089] EXT4-fs (loop3): dirty_blocks=16
[  305.540489][ T7089] EXT4-fs (loop3): Block reservation details
[  305.546792][ T7089] EXT4-fs (loop3): i_reserved_data_blocks=1
[  305.605123][ T7089] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  305.617519][ T7089] EXT4-fs (loop3): This should not happen!! Data will be lost
[  305.617519][ T7089] 
[  306.008669][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'.
[  306.056537][ T3766] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.138127][ T7092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.759'.
[  306.403180][ T7098] loop3: detected capacity change from 0 to 8192
[  306.543784][ T7105] loop2: detected capacity change from 0 to 8
[  306.555151][ T7098] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  306.573764][ T7098] REISERFS (device loop3): using ordered data mode
[  306.714784][ T7098] reiserfs: using flush barriers
[  306.984755][ T3618] Bluetooth: hci4: command 0x0406 tx timeout
[  307.484312][ T7098] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  307.509005][ T7098] REISERFS (device loop3): checking transaction log (loop3)
[  307.519739][ T7114] netlink: 'syz.4.767': attribute type 10 has an invalid length.
[  307.531130][ T7105] SQUASHFS error: zlib decompression failed, data probably corrupt
[  307.587955][ T7105] SQUASHFS error: Failed to read block 0x9b: -5
[  307.627469][ T7105] SQUASHFS error: Unable to read metadata cache entry [99]
[  307.649539][ T3766] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.670112][ T7105] SQUASHFS error: Unable to read inode 0x127
[  307.690007][ T7115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'.
[  307.699333][ T7098] REISERFS (device loop3): Using tea hash to sort names
[  307.714499][ T7098] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  307.758488][ T7117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.768'.
[  307.769618][ T7098] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  307.837834][ T7114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  307.907795][ T7098] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  307.988358][ T3766] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.102783][ T7098] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.762'.
[  308.120258][ T7124] loop0: detected capacity change from 0 to 16
[  308.132830][ T3766] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.196881][ T7124] erofs: (device loop0): mounted with root inode @ nid 36.
[  308.446556][ T5392] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  308.449661][ T7109] chnl_net:caif_netlink_parms(): no params data found
[  308.749246][ T3586] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[  308.787461][ T7130] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192]
[  308.837360][   T25] audit: type=1800 audit(1723878660.071:310): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.770" name="file3" dev="loop0" ino=89 res=0 errno=0
[  308.933879][ T5392] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  309.073566][ T5392] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.103565][ T5392] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  309.124305][ T5392] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  309.643339][ T5392] usb 5-1: New USB device found, idVendor=0525, idProduct=a402, bcdDevice= 0.40
[  309.662608][ T5392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.712458][ T5392] usb 5-1: Product: syz
[  309.733287][ T5392] usb 5-1: Manufacturer: syz
[  309.743298][ T5392] usb 5-1: SerialNumber: syz
[  309.773502][ T3619] Bluetooth: hci2: command 0x0409 tx timeout
[  309.816692][ T5392] cdc_ncm 5-1:1.0: skipping garbage
[  309.873337][ T5392] cdc_ncm 5-1:1.0: skipping garbage
[  309.902818][ T5392] cdc_ncm 5-1:1.0: invalid descriptor buffer length
[  309.932223][ T5392] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  309.977251][ T5392] cdc_ncm 5-1:1.0: bind() failure
[  310.041752][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.092249][ T7122] input: syz0 as /devices/virtual/input/input13
[  310.141929][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.202736][ T7109] device bridge_slave_0 entered promiscuous mode
[  310.276899][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.321245][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.347423][ T7109] device bridge_slave_1 entered promiscuous mode
[  310.387254][ T3646] usb 5-1: USB disconnect, device number 13
[  310.506459][ T7109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.620663][ T7109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.988424][ T7172] 9pnet: Insufficient options for proto=fd
[  310.997931][ T7172] loop0: detected capacity change from 0 to 16
[  312.154757][ T3646] Bluetooth: hci2: command 0x041b tx timeout
[  312.210465][ T7172] erofs: (device loop0): erofs_read_superblock: blkszbits 0 isn't supported on this platform
[  312.258552][ T7109] team0: Port device team_slave_0 added
[  312.448554][ T7109] team0: Port device team_slave_1 added
[  312.462066][ T7179] xt_TCPMSS: Only works on TCP SYN packets
[  312.546508][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.586293][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.612361][    C0] vkms_vblank_simulate: vblank timer overrun
[  312.726372][ T7109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.797913][ T7188] device syz_tun entered promiscuous mode
[  312.827064][ T7188] device batadv_slave_0 entered promiscuous mode
[  312.852224][ T7188] device syz_tun left promiscuous mode
[  312.880463][ T7188] device batadv_slave_0 left promiscuous mode
[  312.976145][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.986991][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.012971][    C0] vkms_vblank_simulate: vblank timer overrun
[  313.025903][ T7109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.152584][ T7175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.167706][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  313.265874][ T7109] device hsr_slave_0 entered promiscuous mode
[  313.297737][ T7194] loop0: detected capacity change from 0 to 512
[  313.306327][ T7109] device hsr_slave_1 entered promiscuous mode
[  313.340280][ T7109] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.377224][ T7109] Cannot create hsr debugfs directory
[  313.485680][ T3766] device hsr_slave_0 left promiscuous mode
[  313.502328][ T3766] device hsr_slave_1 left promiscuous mode
[  313.529157][ T7194] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  313.542031][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.549898][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.559443][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.567608][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.579467][ T3766] device bridge_slave_1 left promiscuous mode
[  313.585820][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.594183][ T7194] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038 (0x7fffffff)
[  313.631280][ T3646] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  313.642786][ T3766] device bridge_slave_0 left promiscuous mode
[  313.649055][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.719074][ T3766] device veth1_macvtap left promiscuous mode
[  313.744322][ T3766] device veth0_macvtap left promiscuous mode
[  313.754108][ T3766] device veth1_vlan left promiscuous mode
[  313.759890][ T3766] device veth0_vlan left promiscuous mode
[  313.871200][ T3646] usb 4-1: Using ep0 maxpacket: 16
[  313.991368][ T3646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 36352, setting to 64
[  314.015164][ T3646] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  314.055808][ T3646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.095996][ T3646] usb 4-1: config 0 descriptor??
[  314.154545][ T3646] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  314.181354][ T3613] Bluetooth: hci2: command 0x040f tx timeout
[  314.547863][ T3766] team0 (unregistering): Port device team_slave_1 removed
[  314.574550][ T3766] team0 (unregistering): Port device team_slave_0 removed
[  314.593541][ T3766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.617625][ T3766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.728081][ T7191] udc-core: couldn't find an available UDC or it's busy
[  314.736783][ T7191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  314.832300][ T7224] netlink: 'syz.0.781': attribute type 25 has an invalid length.
[  314.893658][ T3766] bond0 (unregistering): Released all slaves
[  315.094285][ T7214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.780'.
[  315.107633][ T7192] udc-core: couldn't find an available UDC or it's busy
[  315.134403][ T7192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  315.249125][   T25] audit: type=1326 audit(1723878666.514:311): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a21529e79 code=0x0
[  315.956743][ T7109] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  315.971352][ T7229] can: request_module (can-proto-5) failed.
[  315.995241][ T7109] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  316.022971][ T7109] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  316.083786][ T7109] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  316.260047][ T3646] Bluetooth: hci2: command 0x0419 tx timeout
[  316.315016][ T6785] usb 4-1: USB disconnect, device number 10
[  316.348836][ T7109] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.379959][ T3619] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  316.424899][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  316.434252][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  316.468117][ T7109] 8021q: adding VLAN 0 to HW filter on device team0
[  316.512318][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  316.525258][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  316.544033][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.551144][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.624181][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  316.629762][ T3619] usb 5-1: Using ep0 maxpacket: 16
[  316.637969][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  316.658894][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  316.690149][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.697298][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.699429][ T7247] loop3: detected capacity change from 0 to 8192
[  316.735908][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  316.765907][ T7247] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  316.770421][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  316.789716][ T7247] REISERFS (device loop3): using ordered data mode
[  316.797255][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  316.806547][ T7247] reiserfs: using flush barriers
[  316.819629][ T7247] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  316.843087][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  316.896660][ T7109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  316.923016][ T3619] usb 5-1: New USB device found, idVendor=506f, idProduct=be92, bcdDevice=b8.ea
[  316.940435][ T3619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.948444][ T3619] usb 5-1: Product: syz
[  316.960287][ T7247] REISERFS (device loop3): checking transaction log (loop3)
[  316.973103][ T3619] usb 5-1: Manufacturer: syz
[  316.977719][ T3619] usb 5-1: SerialNumber: syz
[  316.997148][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  317.003482][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  317.006244][ T7109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  317.029293][ T3619] usb 5-1: config 0 descriptor??
[  317.128687][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  317.143403][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  317.174674][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  317.210273][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  317.232011][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  317.244778][ T7247] REISERFS (device loop3): Using tea hash to sort names
[  317.262316][ T7247] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  317.279511][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  317.298346][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  317.315333][ T7247] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  317.359837][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  317.443906][ T7247] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  317.915961][ T7253] chnl_net:caif_netlink_parms(): no params data found
[  318.206128][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  318.222225][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  318.267788][ T7109] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.231296][ T6785] Bluetooth: hci5: command 0x0409 tx timeout
[  319.255931][ T3619] usb 5-1: USB disconnect, device number 14
[  319.447253][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  319.456696][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  319.481115][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  319.498084][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  319.589288][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.621956][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.769099][ T7253] device bridge_slave_0 entered promiscuous mode
[  319.776752][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  319.785671][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  319.815557][ T7109] device veth0_vlan entered promiscuous mode
[  319.985832][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.003564][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.032863][ T7253] device bridge_slave_1 entered promiscuous mode
[  320.054247][ T7109] device veth1_vlan entered promiscuous mode
[  320.136507][ T7109] device veth0_macvtap entered promiscuous mode
[  320.191271][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  320.209777][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  320.237738][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  320.260299][ T7109] device veth1_macvtap entered promiscuous mode
[  320.272482][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.315597][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.356277][ T7302] loop3: detected capacity change from 0 to 8192
[  320.364299][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.393720][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.411649][ T7302] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  320.427036][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.444089][ T7302] REISERFS (device loop3): using ordered data mode
[  320.451953][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.466286][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.477195][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.477932][ T7302] reiserfs: using flush barriers
[  320.496757][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.515577][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.543271][ T7302] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  320.560406][ T7302] REISERFS (device loop3): checking transaction log (loop3)
[  320.570663][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.591431][ T7109] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.620826][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.023482][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  321.032551][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  321.041498][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  321.052729][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.064097][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.074114][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.097518][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.124999][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.134696][ T7302] REISERFS (device loop3): Using tea hash to sort names
[  321.161135][ T7302] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  321.167167][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.225113][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.227002][ T7302] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  321.250800][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.268669][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.297458][ T6786] Bluetooth: hci5: command 0x041b tx timeout
[  321.303573][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.336575][ T7109] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.354632][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'.
[  321.364661][ T7319] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139)
[  321.395137][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  321.412133][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  321.429629][ T7329] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  321.450699][ T7109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.483019][ T7109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.513979][ T7109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.555527][ T7109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.603637][ T7253] team0: Port device team_slave_0 added
[  321.658439][ T7253] team0: Port device team_slave_1 added
[  321.670015][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'.
[  321.785138][ T7343] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.791'.
[  321.841232][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.862284][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.998874][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  322.079154][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  322.108594][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.217240][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.402058][ T7253] device hsr_slave_0 entered promiscuous mode
[  322.437691][ T7253] device hsr_slave_1 entered promiscuous mode
[  322.456589][ T7253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  322.474407][ T7253] Cannot create hsr debugfs directory
[  322.497260][ T3766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.526573][ T3766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.598238][ T3804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.625273][ T3804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.640588][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  322.704506][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  322.907555][ T7253] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.103570][ T7371] binder: 7370:7371 ioctl c0306201 0 returned -14
[  323.454166][ T3614] Bluetooth: hci5: command 0x040f tx timeout
[  323.573321][ T7253] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.693835][ T7253] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.813352][ T7253] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.970712][ T7394] device syz_tun entered promiscuous mode
[  324.022961][ T7394] device batadv_slave_0 entered promiscuous mode
[  324.060312][ T7394] device syz_tun left promiscuous mode
[  324.089095][ T7394] device batadv_slave_0 left promiscuous mode
[  324.339950][ T7399] vivid-006: disconnect
[  324.374602][ T7253] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  324.461623][ T7253] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  324.524414][ T7253] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  324.613746][ T7398] vivid-006: reconnect
[  324.807241][ T7253] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  325.157942][ T7412] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680
[  325.254137][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.338260][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  325.354756][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  325.391956][ T7253] 8021q: adding VLAN 0 to HW filter on device team0
[  325.466243][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  325.502870][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  325.531787][ T7428] overlayfs: empty lowerdir
[  325.567919][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.575057][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.676234][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  325.732060][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  325.884355][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.891594][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.416199][ T7253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  326.456727][ T7253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  326.526076][ T6785] Bluetooth: hci5: command 0x0419 tx timeout
[  326.561909][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  326.655789][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  326.756278][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  326.798303][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  326.847148][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  326.862041][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  326.872526][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  326.884225][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  326.893923][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  326.905506][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  326.934321][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  326.967402][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'.
[  327.030793][ T7417] chnl_net:caif_netlink_parms(): no params data found
[  327.052706][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  327.074059][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  327.101327][ T7452] device team0 entered promiscuous mode
[  327.111318][ T7452] device team_slave_0 entered promiscuous mode
[  327.135881][ T5276] Bluetooth: hci6: command 0x0409 tx timeout
[  327.143160][ T7452] device team_slave_1 entered promiscuous mode
[  327.254887][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  327.262405][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  327.462144][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.146000][ T7448] device team0 left promiscuous mode
[  328.151480][ T7448] device team_slave_0 left promiscuous mode
[  328.165753][ T7448] device team_slave_1 left promiscuous mode
[  328.483122][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  328.505541][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  328.545377][ T7470] xt_cgroup: path and classid specified
[  329.257689][ T7460] netlink: 48 bytes leftover after parsing attributes in process `syz.3.812'.
[  329.272915][ T5276] Bluetooth: hci6: command 0x041b tx timeout
[  329.282296][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.306364][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.336019][ T7417] device bridge_slave_0 entered promiscuous mode
[  329.381494][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  329.404246][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  329.412813][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.421349][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.456564][ T7417] device bridge_slave_1 entered promiscuous mode
[  329.465643][   T25] audit: type=1326 audit(1723878680.741:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.4.818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a21529e79 code=0x0
[  329.510773][ T7253] device veth0_vlan entered promiscuous mode
[  329.529007][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  329.537703][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  329.583656][ T3697] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  329.635242][ T7475] device dummy0 entered promiscuous mode
[  329.647689][ T7475] device dummy0 left promiscuous mode
[  329.661338][ T7417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.673023][   T25] audit: type=1326 audit(1723878680.941:313): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.3.819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82e1728e79 code=0x0
[  329.674815][ T7253] device veth1_vlan entered promiscuous mode
[  329.709815][ T7417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.750973][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  329.762737][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  329.780905][ T7253] device veth0_macvtap entered promiscuous mode
[  329.798271][ T7417] team0: Port device team_slave_0 added
[  329.807565][ T7253] device veth1_macvtap entered promiscuous mode
[  329.818581][ T7417] team0: Port device team_slave_1 added
[  329.849817][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.861195][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.871598][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.883922][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.894582][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.906152][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.916874][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.928005][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.939168][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.950242][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.960787][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.971802][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.985440][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.993288][ T3697] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.023975][ T3697] usb 2-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  330.076661][ T3697] usb 2-1: config 1 interface 0 has no altsetting 0
[  330.109608][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  330.119330][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  330.130333][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  330.139842][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  330.150811][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.160335][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.187518][ T7417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.202297][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.213423][ T3697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  330.224043][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  330.232360][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.243059][ T3697] usb 2-1: SerialNumber: syz
[  330.247982][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.268058][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.278656][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.303911][ T3697] cdc_ether 2-1:1.0: skipping garbage
[  330.310373][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.321150][ T3697] cdc_ether 2-1:1.0: invalid descriptor buffer length
[  330.333775][ T3697] cdc_ether: probe of 2-1:1.0 failed with error -22
[  330.344754][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.357920][ T7480] can: request_module (can-proto-5) failed.
[  330.377784][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.388458][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.399361][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.409896][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.422159][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.435178][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.449929][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.462990][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.528235][ T7417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.548278][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  330.563995][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  330.579157][ T7253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.589542][ T7253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.599522][ T7253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.609347][ T7253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.681836][ T7417] device hsr_slave_0 entered promiscuous mode
[  330.697982][ T7417] device hsr_slave_1 entered promiscuous mode
[  330.794902][ T7417] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.803256][ T7417] Cannot create hsr debugfs directory
[  331.293031][ T3614] Bluetooth: hci6: command 0x040f tx timeout
[  331.322155][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.342771][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'.
[  331.402980][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.419196][  T823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.471251][  T823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.501157][ T7417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.527823][ T6785] usb 2-1: USB disconnect, device number 10
[  331.581539][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  331.589958][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  331.629972][ T7417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.731007][ T7503] device veth0_to_hsr entered promiscuous mode
[  331.754779][ T7503] device veth0_to_hsr left promiscuous mode
[  331.760830][ T7507] loop2: detected capacity change from 0 to 128
[  331.815202][ T7507] FAT-fs (loop2): bogus number of reserved sectors
[  331.848429][ T7507] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  331.862855][ T7507] FAT-fs (loop2): Can't find a valid FAT filesystem
[  331.872455][ T7417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.891966][ T7502] device veth0_vlan left promiscuous mode
[  331.994719][ T7417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.086092][ T7514] netlink: 'syz.2.785': attribute type 3 has an invalid length.
[  332.140555][ T7507] loop2: detected capacity change from 0 to 16
[  332.187993][ T7417] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  332.211028][ T7417] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  332.218594][ T7507] erofs: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿ0xffffffffffffffff01777777777777777777777ÿ18446744073709551615'
[  332.240806][ T7417] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  332.263157][ T7518] loop3: detected capacity change from 0 to 16
[  332.271455][ T7417] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  332.385809][ T7518] erofs: (device loop3): mounted with root inode @ nid 36.
[  332.521745][   T25] audit: type=1326 audit(1723878683.793:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.4.829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a21529e79 code=0x0
[  332.526729][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.560145][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  332.569216][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  332.701833][ T3586] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[  332.735851][ T7522] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192]
[  332.808145][ T7417] 8021q: adding VLAN 0 to HW filter on device team0
[  332.850195][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  332.864873][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  332.875767][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.882889][ T5392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.202681][ T7523] device dummy0 entered promiscuous mode
[  333.235937][ T7523] device dummy0 left promiscuous mode
[  333.245025][   T25] audit: type=1800 audit(1723878684.033:315): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.828" name="file3" dev="loop3" ino=89 res=0 errno=0
[  333.356627][ T7532] tmpfs: Unknown parameter 'usrquota'
[  333.472588][ T5276] Bluetooth: hci6: command 0x0419 tx timeout
[  333.701047][ T7530] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20003
[  333.712371][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  333.722187][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  333.731261][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  333.739764][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.746908][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.211091][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.830'.
[  334.245286][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  334.293646][ T7536] loop2: detected capacity change from 0 to 1024
[  334.300774][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  334.309943][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  334.325865][ T7539] loop1: detected capacity change from 0 to 16
[  334.327418][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  334.354113][ T7540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.834'.
[  334.443598][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  334.468193][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  334.491978][ T7539] erofs: (device loop1): mounted with root inode @ nid 36.
[  334.621672][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  334.650197][ T7417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  335.032004][ T7534] netlink: 'syz.2.830': attribute type 20 has an invalid length.
[  335.057512][ T7417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  335.129999][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  335.138854][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  335.147964][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  335.157613][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  335.166144][ T7547] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  335.209358][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  335.382273][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'.
[  335.397208][ T7563] device batadv_slave_0 entered promiscuous mode
[  335.438709][ T7563] loop1: detected capacity change from 0 to 512
[  335.543584][ T7563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  335.592493][ T7563] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff)
[  335.679974][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  335.707416][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  335.794355][ T7417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.854781][ T7563] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #2: comm syz.1.840: corrupted inode contents
[  335.893145][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  335.896750][ T7563] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #2: comm syz.1.840: mark_inode_dirty error
[  335.903167][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  335.927304][ T7563] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #2: comm syz.1.840: corrupted inode contents
[  335.952213][ T7563] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.840: mark_inode_dirty error
[  335.971836][ T7571] xt_CT: You must specify a L4 protocol and not use inversions on it
[  336.050802][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  336.068104][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  336.087229][ T7562] device batadv_slave_0 left promiscuous mode
[  336.103573][ T7417] device veth0_vlan entered promiscuous mode
[  336.121569][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  336.136039][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  336.163704][ T7417] device veth1_vlan entered promiscuous mode
[  336.222327][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  336.254444][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  336.265865][ T7577] loop2: detected capacity change from 0 to 16
[  336.290557][ T7579] loop1: detected capacity change from 0 to 128
[  336.290955][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  336.315941][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  336.339045][ T7417] device veth0_macvtap entered promiscuous mode
[  336.365558][ T7417] device veth1_macvtap entered promiscuous mode
[  336.396848][ T7577] erofs: (device loop2): mounted with root inode @ nid 36.
[  336.422750][ T7579] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  336.450010][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.539950][ T7579] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  336.586652][   T25] audit: type=1800 audit(1723878687.865:316): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.843" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  336.714701][ T3586] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[  336.740717][ T7585] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192]
[  336.822792][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.437059][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.448429][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.476624][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.540797][   T25] audit: type=1800 audit(1723878688.045:317): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.844" name="file3" dev="loop2" ino=89 res=0 errno=0
[  337.565676][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.623789][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.655585][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.705529][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.755534][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.795244][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.825352][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.883406][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.923021][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.992576][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.031097][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  338.042801][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  338.064412][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  338.087858][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  338.097259][ T7597] loop2: detected capacity change from 0 to 16
[  338.118556][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.179134][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.216901][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.252275][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.295888][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.323074][ T7599] loop1: detected capacity change from 0 to 8192
[  338.333216][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.348204][ T7604] fuse: Bad value for 'fd'
[  338.352756][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.366295][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.384603][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.409180][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.419783][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.464041][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.518858][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.558951][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.595821][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.618070][ T7599] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  338.643198][ T7597] erofs: (device loop2): mounted with root inode @ nid 36.
[  338.743892][ T7599] REISERFS (device loop1): using ordered data mode
[  338.752324][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  338.765963][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  338.779124][ T7599] reiserfs: using flush barriers
[  338.785145][ T7599] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  339.437373][ T7417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.490275][ T7599] REISERFS (device loop1): checking transaction log (loop1)
[  339.695880][ T7417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.853534][ T7613] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46
[  340.337519][ T7417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.394101][ T7417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.408938][ T7599] REISERFS (device loop1): Using tea hash to sort names
[  340.426441][ T7599] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  340.449372][ T7253] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46
[  340.505843][ T7599] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  340.525735][ T7253] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  340.594107][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.854'.
[  340.664122][ T7599] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  340.702590][ T7253] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  340.722372][   T25] audit: type=1326 audit(1723878692.007:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a21529e79 code=0x0
[  340.768197][ T7619] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.849'.
[  340.816559][ T3797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.826335][   T25] audit: type=1326 audit(1723878692.107:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.3.855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82e1728e79 code=0x0
[  340.911761][ T3797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.947344][ T7620] loop3: detected capacity change from 0 to 256
[  340.976414][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  340.994705][ T3797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.024031][ T3797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.029820][ T7620] UDF-fs: bad mount option "ÿ" or missing value
[  341.113447][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  341.235587][ T7628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.803'.
[  341.392966][ T7630] loop1: detected capacity change from 0 to 16
[  341.504079][ T7630] erofs: (device loop1): mounted with root inode @ nid 36.
[  342.288662][   T25] audit: type=1800 audit(1723878693.498:320): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.856" name="file3" dev="loop1" ino=89 res=0 errno=0
[  342.464377][ T3586] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[  342.946784][ T7644] overlayfs: missing 'lowerdir'
[  343.274286][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'.
[  343.590617][ T7659] netlink: 'syz.0.865': attribute type 10 has an invalid length.
[  343.825019][ T7663] loop1: detected capacity change from 0 to 8192
[  343.848906][ T7659] team0: Port device netdevsim0 added
[  343.920701][ T7663] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  343.976588][ T7663] REISERFS (device loop1): using ordered data mode
[  343.983112][ T7663] reiserfs: using flush barriers
[  344.026047][ T7663] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  344.106717][ T7663] REISERFS (device loop1): checking transaction log (loop1)
[  344.116579][ T7626] loop2: detected capacity change from 0 to 32768
[  344.346941][ T3562] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by udevd (3562)
[  344.673628][ T7673] netlink: 'syz.0.868': attribute type 1 has an invalid length.
[  344.749428][ T7673] loop0: detected capacity change from 0 to 16
[  344.810882][ T7673] erofs: (device loop0): mounted with root inode @ nid 36.
[  344.842115][ T7663] REISERFS (device loop1): Using tea hash to sort names
[  344.853312][ T7676] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.867'.
[  344.902383][ T7663] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  344.934053][ T7663] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  345.058953][ T7663] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  345.121075][ T7673] mac80211_hwsim hwsim36 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  345.232707][ T7688] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.866'.
[  345.336550][ T7689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.514013][ T7695] bridge0: port 3(team0) entered blocking state
[  345.567823][ T7695] bridge0: port 3(team0) entered disabled state
[  345.628162][ T7695] bridge0: port 3(team0) entered blocking state
[  345.634447][ T7695] bridge0: port 3(team0) entered forwarding state
[  345.737054][ T7700] loop1: detected capacity change from 0 to 16
[  345.828959][ T7700] erofs: (device loop1): mounted with root inode @ nid 36.
[  346.684857][   T25] audit: type=1800 audit(1723878697.890:321): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.873" name="file3" dev="loop1" ino=89 res=0 errno=0
[  346.712906][ T3586] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[  346.831674][ T7710] loop1: detected capacity change from 0 to 512
[  347.609891][ T7713] loop3: detected capacity change from 0 to 2048
[  347.689201][ T3804] wlan0: Trigger new scan to find an IBSS to join
[  347.790059][ T7716] netlink: 'syz.0.878': attribute type 1 has an invalid length.
[  347.837253][ T7713] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  347.895609][ T7713] EXT4-fs (loop3): shut down requested (2)
[  347.903431][ T7710] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,noquota,,errors=continue. Quota mode: writeback.
[  347.931999][ T7710] ext4 filesystem being mounted at /17/éq‰Y’3aK supports timestamps until 2038 (0x7fffffff)
[  348.125529][ T7728] netlink: 48 bytes leftover after parsing attributes in process `syz.1.877'.
[  348.303731][   T25] audit: type=1326 audit(1723878699.581:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.3.875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82e1728e79 code=0x0
[  350.707191][ T7744] loop2: detected capacity change from 0 to 8192
[  350.829989][ T7744] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  350.852800][ T7744] REISERFS (device loop2): using ordered data mode
[  350.859465][ T7744] reiserfs: using flush barriers
[  350.873858][ T7744] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  350.935980][ T7744] REISERFS (device loop2): checking transaction log (loop2)
[  351.141470][ T7753] loop3: detected capacity change from 0 to 8192
[  351.247906][ T7756] fuse: Unknown parameter ''
[  351.317904][ T7756] loop0: detected capacity change from 0 to 512
[  351.353388][ T7753] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  351.420126][ T7753] REISERFS (device loop3): using ordered data mode
[  351.748003][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.884'.
[  351.799472][ T7761] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  351.823849][ T7753] reiserfs: using flush barriers
[  352.132600][ T7753] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  352.268557][ T7753] REISERFS (device loop3): checking transaction log (loop3)
[  352.342720][ T7764] loop0: detected capacity change from 0 to 256
[  352.354125][ T7744] REISERFS (device loop2): Using tea hash to sort names
[  352.396786][ T7744] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  352.423158][ T7764] exfat: Unknown parameter '1844674407370955161500000000000000000000'
[  352.462160][ T7744] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  352.714838][ T7769] No such timeout policy "syz0"
[  352.864169][ T3797] wlan0: Trigger new scan to find an IBSS to join
[  353.334824][ T7770] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  353.372388][ T7773] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  353.396995][ T7753] REISERFS (device loop3): Using tea hash to sort names
[  353.471927][ T7753] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  353.482275][ T7768] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.881'.
[  353.517639][ T7778] loop1: detected capacity change from 0 to 16
[  353.529267][ T7753] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  353.617028][ T7778] erofs: (device loop1): mounted with root inode @ nid 36.
[  353.653798][ T7753] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  353.783704][ T7753] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.883'.
[  354.289987][ T7785] netlink: 100 bytes leftover after parsing attributes in process `syz.4.892'.
[  354.516461][ T7787] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  354.582334][ T1232] wlan0: Creating new IBSS network, BSSID 76:66:88:9e:0f:e7
[  354.599385][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'.
[  354.950976][ T3617] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  355.052302][ T7812] netlink: 9 bytes leftover after parsing attributes in process `syz.4.896'.
[  355.320915][ T3617] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  355.328554][ T3617] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  355.372091][ T3617] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  355.415750][ T3617] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 17185, setting to 8
[  355.785256][ T7826] netlink: 176 bytes leftover after parsing attributes in process `syz.0.899'.
[  355.833789][ T7826] device ip6gretap0 entered promiscuous mode
[  355.840043][ T7826] netlink: 176 bytes leftover after parsing attributes in process `syz.0.899'.
[  355.860856][ T3617] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  355.868300][ T3617] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  355.920799][ T3617] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  355.957933][ T3617] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 17185, setting to 8
[  355.991708][ T7834] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  356.050878][ T3617] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  356.058765][ T3617] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  356.088412][ T3617] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  356.100749][ T3617] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 17185, setting to 8
[  356.350622][ T3617] usb 4-1: string descriptor 0 read error: -22
[  356.367350][ T3617] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  356.440206][ T3617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.505683][ T3617] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  356.743306][ T7846] loop0: detected capacity change from 0 to 8192
[  356.771632][ T7844] netlink: 'syz.2.904': attribute type 9 has an invalid length.
[  356.805218][ T7850] loop1: detected capacity change from 0 to 512
[  356.860065][ T7846] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  356.870836][ T7846] REISERFS (device loop0): using ordered data mode
[  356.889613][ T7846] reiserfs: using flush barriers
[  356.933401][ T7850] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  356.953578][ T7850] EXT4-fs (loop1): 1 truncate cleaned up
[  356.953657][ T7846] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  356.976853][ T7850] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[  356.997904][ T7846] REISERFS (device loop0): checking transaction log (loop0)
[  357.206127][ T7859] netlink: 'syz.4.908': attribute type 10 has an invalid length.
[  357.286175][ T7859] team0: Port device netdevsim0 added
[  357.327105][ T7861] loop2: detected capacity change from 0 to 1024
[  357.399826][ T7846] REISERFS (device loop0): Using tea hash to sort names
[  357.428046][ T7846] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  357.490628][ T7861] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  357.518863][ T7846] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  357.646985][ T7861] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  357.722518][ T7846] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  357.746973][ T7861] EXT4-fs (loop2): orphan cleanup on readonly fs
[  357.832852][ T6785] usb 4-1: USB disconnect, device number 11
[  357.849558][ T7861] EXT4-fs error (device loop2): ext4_free_blocks:6226: comm syz.2.907: Freeing blocks not in datazone - block = 0, count = 4096
[  357.949455][ T7865] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.905'.
[  358.033461][ T7861] EXT4-fs (loop2): Remounting filesystem read-only
[  358.113745][ T7861] EXT4-fs (loop2): 1 orphan inode deleted
[  358.126024][ T7861] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000004,lazytime,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback.
[  358.250317][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'.
[  358.290324][ T7872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.912'.
[  358.394801][ T7872] netlink: 'syz.4.912': attribute type 5 has an invalid length.
[  358.405038][ T3617] Bluetooth: hci2: command 0x2016 tx timeout
[  358.488858][ T6785] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  358.550081][ T7875] netlink: 'syz.3.913': attribute type 10 has an invalid length.
[  358.710388][ T6785] usb 2-1: device descriptor read/64, error -71
[  359.181834][ T7875] device wlan1 entered promiscuous mode
[  359.230330][ T6785] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  359.258804][ T7875] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  359.445724][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.914'.
[  359.460143][ T6785] usb 2-1: device descriptor read/64, error -71
[  359.540232][ T3617] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  359.578858][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'.
[  359.590265][ T6785] usb usb2-port1: attempt power cycle
[  359.676101][ T7895] loop3: detected capacity change from 0 to 8192
[  359.833853][ T7895] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  359.867869][ T7895] REISERFS (device loop3): using ordered data mode
[  359.884794][ T7895] reiserfs: using flush barriers
[  359.905410][ T7895] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  359.921867][ T3617] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  359.941966][ T7895] REISERFS (device loop3): checking transaction log (loop3)
[  359.970639][ T3617] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  360.002065][ T3617] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  360.020585][ T6785] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  360.086300][ T3617] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  360.120360][ T6785] usb 2-1: device descriptor read/8, error -71
[  360.143232][ T3617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.195324][ T7895] REISERFS (device loop3): Using tea hash to sort names
[  360.211951][ T3617] usb 1-1: invalid MIDI out EP 0
[  360.245713][ T7895] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  360.339721][ T3617] snd-usb-audio: probe of 1-1:27.0 failed with error -22
[  360.457529][ T6785] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  360.478924][ T7903] trusted_key: encrypted_key: insufficient parameters specified
[  360.489299][ T7895] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  360.507281][ T3587] udevd[3587]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  360.544430][ T3617] usb 1-1: USB disconnect, device number 11
[  360.867755][ T6785] usb 2-1: device descriptor read/8, error -71
[  360.922345][ T7909] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  361.010715][ T6785] usb usb2-port1: unable to enumerate USB device
[  361.095033][ T7909] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.917'.
[  361.475734][ T7916] loop1: detected capacity change from 0 to 8192
[  361.536977][ T7916] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  361.554817][ T7916] REISERFS (device loop1): using ordered data mode
[  361.564699][ T7916] reiserfs: using flush barriers
[  361.577152][ T7916] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  361.601759][ T7916] REISERFS (device loop1): checking transaction log (loop1)
[  361.882787][ T7924] netlink: 'syz.3.923': attribute type 12 has an invalid length.
[  362.003717][ T7929] ebt_limit: overflow, try lower: 0/0
[  362.545064][   T21] Bluetooth: hci5: command 0x2016 tx timeout
[  362.660253][ T7924] bond0: option primary_reselect: invalid value (255)
[  362.741767][ T7916] REISERFS (device loop1): Using tea hash to sort names
[  362.827003][ T7916] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  362.861441][ T7916] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  363.804805][ T7944] loop0: detected capacity change from 0 to 256
[  363.835241][ T7945] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  363.926303][ T7944] FAT-fs (loop0): Directory bread(block 64) failed
[  363.938784][ T7944] FAT-fs (loop0): Directory bread(block 65) failed
[  363.956360][ T7944] FAT-fs (loop0): Directory bread(block 66) failed
[  363.970065][ T7916] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.921'.
[  363.985362][ T7944] FAT-fs (loop0): Directory bread(block 67) failed
[  364.019828][ T7944] FAT-fs (loop0): Directory bread(block 68) failed
[  364.082959][ T7944] FAT-fs (loop0): Directory bread(block 69) failed
[  364.129855][ T7944] FAT-fs (loop0): Directory bread(block 70) failed
[  364.175029][ T7944] FAT-fs (loop0): Directory bread(block 71) failed
[  364.240794][ T7944] FAT-fs (loop0): Directory bread(block 72) failed
[  364.248838][ T7944] FAT-fs (loop0): Directory bread(block 73) failed
[  364.421171][   T25] audit: type=1800 audit(1723878715.699:323): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.928" name="bus" dev="loop0" ino=1048666 res=0 errno=0
[  364.474226][ T7958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.932'.
[  364.879517][ T7964] attempt to access beyond end of device
[  364.879517][ T7964] loop0: rw=2049, want=1300, limit=256
[  364.916961][ T7964] attempt to access beyond end of device
[  364.916961][ T7964] loop0: rw=2051, want=1320, limit=256
[  364.990211][   T25] audit: type=1326 audit(1723878716.239:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368f776e79 code=0x7ffc0000
[  365.460415][   T25] audit: type=1326 audit(1723878716.239:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f368f775810 code=0x7ffc0000
[  365.598685][   T25] audit: type=1326 audit(1723878716.239:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f368f7786a7 code=0x7ffc0000
[  365.600553][ T7970] loop3: detected capacity change from 0 to 256
[  365.705244][   T25] audit: type=1326 audit(1723878716.239:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f368f776e79 code=0x7ffc0000
[  365.736241][   T25] audit: type=1326 audit(1723878716.249:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f368f7786a7 code=0x7ffc0000
[  365.764394][   T25] audit: type=1326 audit(1723878716.249:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f368f775b0a code=0x7ffc0000
[  365.791790][   T25] audit: type=1326 audit(1723878716.249:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368f776e79 code=0x7ffc0000
[  365.829035][   T25] audit: type=1326 audit(1723878716.249:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f368f776e79 code=0x7ffc0000
[  365.856836][ T7970] exfat: Unknown parameter '1844674407370955161500000000000000000000'
[  365.889173][   T25] audit: type=1326 audit(1723878716.259:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368f776e79 code=0x7ffc0000
[  365.927203][ T7968] loop0: detected capacity change from 0 to 8192
[  366.116632][ T7968] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  366.178903][ T7968] REISERFS (device loop0): using ordered data mode
[  366.191100][ T7960] loop1: detected capacity change from 0 to 40427
[  366.233464][ T7968] reiserfs: using flush barriers
[  366.243558][ T7968] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  366.254593][ T7960] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  366.270489][ T7968] REISERFS (device loop0): checking transaction log (loop0)
[  366.321112][ T7970] loop3: detected capacity change from 0 to 1024
[  366.330178][ T7960] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  366.418059][ T7960] F2FS-fs (loop1): invalid crc value
[  366.470842][ T7970] 
[  366.473174][ T7970] ======================================================
[  366.480165][ T7970] WARNING: possible circular locking dependency detected
[  366.487178][ T7970] 5.15.164-syzkaller #0 Not tainted
[  366.492345][ T7970] ------------------------------------------------------
[  366.499338][ T7970] syz.3.934/7970 is trying to acquire lock:
[  366.505208][ T7970] ffff88807e064488 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10
[  366.516226][ T7970] 
[  366.516226][ T7970] but task is already holding lock:
[  366.523562][ T7970] ffff88807a8c20b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  366.533014][ T7970] 
[  366.533014][ T7970] which lock already depends on the new lock.
[  366.533014][ T7970] 
[  366.543417][ T7970] 
[  366.543417][ T7970] the existing dependency chain (in reverse order) is:
[  366.552417][ T7970] 
[  366.552417][ T7970] -> #1 (&tree->tree_lock){+.+.}-{3:3}:
[  366.560136][ T7970]        lock_acquire+0x1db/0x4f0
[  366.565144][ T7970]        __mutex_lock_common+0x1da/0x25a0
[  366.570874][ T7970]        mutex_lock_nested+0x17/0x20
[  366.576151][ T7970]        hfsplus_file_truncate+0x864/0xb80
[  366.581945][ T7970]        hfsplus_delete_inode+0x170/0x220
[  366.587657][ T7970]        hfsplus_unlink+0x50d/0x7f0
[  366.592840][ T7970]        vfs_unlink+0x359/0x5f0
[  366.597851][ T7970]        do_unlinkat+0x4a3/0x950
[  366.602765][ T7970]        __x64_sys_unlink+0x45/0x50
[  366.607939][ T7970]        do_syscall_64+0x3b/0xb0
[  366.612954][ T7970]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  366.619347][ T7970] 
[  366.619347][ T7970] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  366.628350][ T7970]        validate_chain+0x1649/0x5930
[  366.633712][ T7970]        __lock_acquire+0x1295/0x1ff0
[  366.639075][ T7970]        lock_acquire+0x1db/0x4f0
[  366.644088][ T7970]        __mutex_lock_common+0x1da/0x25a0
[  366.649789][ T7970]        mutex_lock_nested+0x17/0x20
[  366.655051][ T7970]        hfsplus_file_extend+0x1d2/0x1b10
[  366.660753][ T7970]        hfsplus_bmap_reserve+0x101/0x4e0
[  366.666555][ T7970]        hfsplus_create_cat+0x1a9/0x1ba0
[  366.672172][ T7970]        hfsplus_fill_super+0x13e6/0x1c90
[  366.677916][ T7970]        mount_bdev+0x2c9/0x3f0
[  366.682833][ T7970]        legacy_get_tree+0xeb/0x180
[  366.688010][ T7970]        vfs_get_tree+0x88/0x270
[  366.692921][ T7970]        do_new_mount+0x2ba/0xb40
[  366.697920][ T7970]        __se_sys_mount+0x2d5/0x3c0
[  366.703091][ T7970]        do_syscall_64+0x3b/0xb0
[  366.708101][ T7970]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  366.714509][ T7970] 
[  366.714509][ T7970] other info that might help us debug this:
[  366.714509][ T7970] 
[  366.724718][ T7970]  Possible unsafe locking scenario:
[  366.724718][ T7970] 
[  366.732147][ T7970]        CPU0                    CPU1
[  366.737484][ T7970]        ----                    ----
[  366.742841][ T7970]   lock(&tree->tree_lock);
[  366.747318][ T7970]                                lock(&HFSPLUS_I(inode)->extents_lock);
[  366.755618][ T7970]                                lock(&tree->tree_lock);
[  366.762649][ T7970]   lock(&HFSPLUS_I(inode)->extents_lock);
[  366.768427][ T7970] 
[  366.768427][ T7970]  *** DEADLOCK ***
[  366.768427][ T7970] 
[  366.776541][ T7970] 3 locks held by syz.3.934/7970:
[  366.781553][ T7970]  #0: ffff88802249e0e0 (&type->s_umount_key#88/1){+.+.}-{3:3}, at: alloc_super+0x210/0x940
[  366.791620][ T7970]  #1: ffff88801d1f0198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90
[  366.801592][ T7970]  #2: ffff88807a8c20b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  366.811479][ T7970] 
[  366.811479][ T7970] stack backtrace:
[  366.817361][ T7970] CPU: 0 PID: 7970 Comm: syz.3.934 Not tainted 5.15.164-syzkaller #0
[  366.825411][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  366.835452][ T7970] Call Trace:
[  366.838716][ T7970]  <TASK>
[  366.841625][ T7970]  dump_stack_lvl+0x1e3/0x2d0
[  366.846390][ T7970]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  366.852004][ T7970]  ? print_circular_bug+0x12b/0x1a0
[  366.857191][ T7970]  check_noncircular+0x2f8/0x3b0
[  366.862111][ T7970]  ? add_chain_block+0x850/0x850
[  366.867028][ T7970]  ? lockdep_lock+0x11f/0x2a0
[  366.871681][ T7970]  validate_chain+0x1649/0x5930
[  366.876505][ T7970]  ? validate_chain+0x112/0x5930
[  366.881681][ T7970]  ? finish_lock_switch+0x8f/0x100
[  366.886794][ T7970]  ? reacquire_held_locks+0x660/0x660
[  366.892156][ T7970]  ? reacquire_held_locks+0x660/0x660
[  366.897500][ T7970]  ? reacquire_held_locks+0x660/0x660
[  366.902845][ T7970]  ? __lock_acquire+0x1295/0x1ff0
[  366.907847][ T7970]  ? mark_lock+0x98/0x340
[  366.912147][ T7970]  ? look_up_lock_class+0x77/0x120
[  366.917232][ T7970]  ? register_lock_class+0x100/0x9a0
[  366.922503][ T7970]  ? is_dynamic_key+0x1f0/0x1f0
[  366.927329][ T7970]  ? mark_lock+0x98/0x340
[  366.931631][ T7970]  __lock_acquire+0x1295/0x1ff0
[  366.936457][ T7970]  lock_acquire+0x1db/0x4f0
[  366.940933][ T7970]  ? hfsplus_file_extend+0x1d2/0x1b10
[  366.946287][ T7970]  ? read_lock_is_recursive+0x10/0x10
[  366.951721][ T7970]  ? __might_sleep+0xc0/0xc0
[  366.956283][ T7970]  ? is_bpf_text_address+0x24f/0x260
[  366.961540][ T7970]  ? stack_trace_save+0x1c0/0x1c0
[  366.966561][ T7970]  ? __kernel_text_address+0x94/0x100
[  366.971915][ T7970]  ? unwind_get_return_address+0x49/0x80
[  366.977524][ T7970]  __mutex_lock_common+0x1da/0x25a0
[  366.982700][ T7970]  ? hfsplus_file_extend+0x1d2/0x1b10
[  366.988055][ T7970]  ? hfsplus_file_extend+0x1d2/0x1b10
[  366.993485][ T7970]  ? mutex_lock_io_nested+0x60/0x60
[  366.998661][ T7970]  ? read_lock_is_recursive+0x10/0x10
[  367.004008][ T7970]  mutex_lock_nested+0x17/0x20
[  367.008835][ T7970]  hfsplus_file_extend+0x1d2/0x1b10
[  367.014011][ T7970]  ? hfsplus_get_block+0x14e0/0x14e0
[  367.019270][ T7970]  ? __mutex_lock_common+0x444/0x25a0
[  367.024620][ T7970]  ? hfsplus_find_init+0x146/0x1c0
[  367.029706][ T7970]  ? mutex_lock_io_nested+0x60/0x60
[  367.034877][ T7970]  hfsplus_bmap_reserve+0x101/0x4e0
[  367.040051][ T7970]  hfsplus_create_cat+0x1a9/0x1ba0
[  367.045140][ T7970]  ? look_up_lock_class+0x77/0x120
[  367.050232][ T7970]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  367.055762][ T7970]  ? hfsplus_find_cat+0x5c0/0x5c0
[  367.060839][ T7970]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  367.066728][ T7970]  ? enqueue_timer+0x233/0x540
[  367.071488][ T7970]  ? do_raw_spin_unlock+0x137/0x8b0
[  367.076673][ T7970]  ? _raw_spin_unlock+0x24/0x40
[  367.081499][ T7970]  ? hfsplus_new_inode+0x5c9/0x740
[  367.086588][ T7970]  hfsplus_fill_super+0x13e6/0x1c90
[  367.091785][ T7970]  ? hfsplus_mount+0x40/0x40
[  367.096373][ T7970]  ? snprintf+0xd6/0x120
[  367.100597][ T7970]  ? vscnprintf+0x80/0x80
[  367.105073][ T7970]  ? set_blocksize+0x1ec/0x370
[  367.109828][ T7970]  mount_bdev+0x2c9/0x3f0
[  367.114131][ T7970]  ? hfsplus_mount+0x40/0x40
[  367.118690][ T7970]  legacy_get_tree+0xeb/0x180
[  367.123359][ T7970]  ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0
[  367.128897][ T7970]  vfs_get_tree+0x88/0x270
[  367.133314][ T7970]  do_new_mount+0x2ba/0xb40
[  367.137802][ T7970]  ? do_move_mount_old+0x160/0x160
[  367.142887][ T7970]  ? user_path_at_empty+0x12b/0x180
[  367.148063][ T7970]  __se_sys_mount+0x2d5/0x3c0
[  367.152806][ T7970]  ? __x64_sys_mount+0xc0/0xc0
[  367.157542][ T7970]  ? syscall_enter_from_user_mode+0x2e/0x240
[  367.163495][ T7970]  ? lockdep_hardirqs_on+0x94/0x130
[  367.168669][ T7970]  ? __x64_sys_mount+0x1c/0xc0
[  367.173407][ T7970]  do_syscall_64+0x3b/0xb0
[  367.177808][ T7970]  ? clear_bhb_loop+0x15/0x70
[  367.182463][ T7970]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  367.188348][ T7970] RIP: 0033:0x7f82e172a61a
[  367.192740][ T7970] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.212340][ T7970] RSP: 002b:00007f82dfba4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  367.220750][ T7970] RAX: ffffffffffffffda RBX: 00007f82dfba4ef0 RCX: 00007f82e172a61a
[  367.228699][ T7970] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007f82dfba4eb0
[  367.236645][ T7970] RBP: 0000000020000000 R08: 00007f82dfba4ef0 R09: 0000000002000010
[  367.244611][ T7970] R10: 0000000002000010 R11: 0000000000000246 R12: 0000000020000080
[  367.252560][ T7970] R13: 00007f82dfba4eb0 R14: 00000000000006a6 R15: 0000000020000100
[  367.260520][ T7970]  </TASK>
[  367.341657][ T7960] F2FS-fs (loop1): Found nat_bits in checkpoint
[  367.400842][ T7960] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  367.408149][ T7960] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  367.432369][ T7968] REISERFS (device loop0): Using tea hash to sort names
[  367.459476][ T7968] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  367.488047][ T7968] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  367.629489][ T7968] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  367.717883][ T7968] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.933'.