last executing test programs:

9m36.570055857s ago: executing program 3 (id=24):
ioperm(0x0, 0x1, 0x18a)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x181900)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_io_uring_submit(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x15, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
recvmsg$unix(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0)
close(0x3)

9m35.090689924s ago: executing program 4 (id=29):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'})
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/242)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_script(r2, &(0x7f00000000c0), 0x10f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, r2, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100))

9m33.77582622s ago: executing program 4 (id=32):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x58}, 0x0)
open(0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023892)

9m32.496394906s ago: executing program 4 (id=36):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="03000000cb1507003800128008000100736974002c00028008000100", @ANYRES32=r3, @ANYBLOB="08000300ac14141005000a00006bbe0006000e001f000000060008"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10)
get_mempolicy(&(0x7f00000001c0), 0x0, 0x4c1, &(0x7f00009e4000/0x1000)=nil, 0x2)

9m32.175742067s ago: executing program 4 (id=38):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x14, r4, 0x31f, 0x70bd2d, 0xfffffff9}, 0x14}}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)

9m30.126071277s ago: executing program 4 (id=40):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = epoll_create1(0x0)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x59455247}})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1)
syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000600)={0xa0000010})
close_range(r0, 0xffffffffffffffff, 0x0)

9m28.860911893s ago: executing program 3 (id=42):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'})
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/242)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_script(r2, &(0x7f00000000c0), 0x10f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, r2, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100))

9m28.685235443s ago: executing program 3 (id=45):
unshare(0x2000400)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
ppoll(&(0x7f0000000480)=[{r1}, {r0}, {r3}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x2000)
socket$key(0xf, 0x3, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, 0x0, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

9m28.530707584s ago: executing program 4 (id=47):
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0)
syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
unshare(0x68040200)

9m27.082036041s ago: executing program 3 (id=50):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prctl$PR_MCE_KILL(0x35, 0x1, 0x8)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7fbf, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
io_setup(0x3, &(0x7f0000000180)=<r5=>0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc0200000000000000000000000000000f0004"], 0x84}}, 0x0)
io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100)

9m26.302699945s ago: executing program 3 (id=52):
socket$pppoe(0x18, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x8200, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000880)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x10000000, 0x0, 0x0, 0x53787780, 0x0, 0xffffffff, 0x8})
r4 = socket$netlink(0x10, 0x3, 0x15)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
socket$inet_dccp(0x2, 0x6, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4)
socket(0x10, 0x3, 0x0)

9m22.151864984s ago: executing program 3 (id=56):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x3, &(0x7f0000001700))
unshare(0x68040200)

9m13.162298885s ago: executing program 32 (id=47):
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0)
syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
unshare(0x68040200)

9m6.738967734s ago: executing program 33 (id=56):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x3, &(0x7f0000001700))
unshare(0x68040200)

4m48.561444884s ago: executing program 1 (id=693):
prlimit64(0x0, 0xd, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

4m47.574231778s ago: executing program 1 (id=696):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4m47.420454899s ago: executing program 1 (id=697):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080), 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'macvlan1\x00'}}, 0x1e)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x2, 0x20}, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;|\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xd)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe2a)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab00000000000000070000e60080b8785d96000100000000000000000000000000001d000000000000000000000000000000000000003700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4m44.597107162s ago: executing program 1 (id=702):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x81000c, &(0x7f0000000100)=ANY=[@ANYBLOB="63726561746f723dd7f3e00c2c6e6c733d64656661756c742c73657373696f6e3d3078666666666666666666666666666637662c63726561746f723d48e670162c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c626172726965722c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c666f7263652c63726561746f723d16d432332c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723da9076de42c626172726965722c7569643d9fb0b2a40de4ab51d36eaaa28dff473a6b3faf9b2d29089463effedf4a4d0f9290e4568f49a4083d2bd4901a91f6142cc7968d8e6ad62dba16c7082c313efd1df77b5b3fb8fccb98001d6b953e6779b657b2f01e4c506e2cc146b3b8c467eb7db3b3616ac38bc5c5e4ebf34c65197d281e5140c8f960442f5eed9fe8c0dc99cbc3e9649fa75cb0a7", @ANYRESHEX=0x0, @ANYRES16, @ANYRES16], 0x1, 0x6da, &(0x7f0000004980)="$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")
mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
umount2(&(0x7f0000002140)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x20, &(0x7f0000000b00)=ANY=[], 0x1, 0x0, 0x0)

4m43.094268009s ago: executing program 1 (id=707):
ioperm(0x0, 0x1, 0x18a)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x181900)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_io_uring_submit(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x15, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20)
recvmsg$unix(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0)
close(0x3)

4m41.813591305s ago: executing program 1 (id=713):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080), 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'macvlan1\x00'}}, 0x1e)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;|\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xd)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe2a)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab00000000000000070000e60080b8785d96000100000000000000000000000000001d000000000000000000000000000000000000003700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4m40.301785642s ago: executing program 34 (id=713):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080), 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'macvlan1\x00'}}, 0x1e)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;|\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xd)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe2a)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab00000000000000070000e60080b8785d96000100000000000000000000000000001d000000000000000000000000000000000000003700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4m16.336923891s ago: executing program 6 (id=763):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, &(0x7f00000003c0), &(0x7f00000001c0))
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

4m15.087880647s ago: executing program 6 (id=765):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008", @ANYRES32], 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x1c7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
connect$inet(r3, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0)
recvmsg(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/160, 0xa0}], 0x1}, 0x20)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
readv(r0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0xc00000)

4m13.914593033s ago: executing program 6 (id=766):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
lstat(&(0x7f0000000600)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000900))
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaa"], 0x0)
r2 = io_uring_setup(0xfe, &(0x7f0000000140)={0x0, 0xd391, 0x0, 0x3, 0x2b})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
listxattr(&(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

4m13.266087576s ago: executing program 6 (id=767):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa0081a, &(0x7f0000000800)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRES64], 0x21, 0x14fd, &(0x7f0000003f40)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./bus\x00', 0x10e0070, &(0x7f0000000840)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES64=0x0, @ANYRES32], 0x0, 0x6a4, &(0x7f0000000100)="$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")
ftruncate(0xffffffffffffffff, 0x2ff8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x1)
ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140))
ftruncate(r1, 0x2ff8)

4m10.639600838s ago: executing program 6 (id=771):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0)
r4 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0x400, 0x300, 0x300, 0x0, 0xffffffff, 0x0, 0x20, 0x2000000, {}, {}, {0x656, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x20, 0x0, 0x1, 0x3c, 0x0, 0x0, 0xc})
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, 0x0)

4m10.06747361s ago: executing program 6 (id=772):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_setup(0x206, &(0x7f0000000200)=<r4=>0x0)
syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
io_submit(r4, 0x0, &(0x7f0000000240))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, &(0x7f00000001c0)=0xa)
socketpair(0x11, 0x4, 0x976c, &(0x7f0000000100))
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000180)={{0x2, 0x1, 0x200, 0x0, 0x7}, 0x2, 0x6, 0x766f})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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")

4m9.695053342s ago: executing program 35 (id=772):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_setup(0x206, &(0x7f0000000200)=<r4=>0x0)
syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
io_submit(r4, 0x0, &(0x7f0000000240))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, &(0x7f00000001c0)=0xa)
socketpair(0x11, 0x4, 0x976c, &(0x7f0000000100))
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000180)={{0x2, 0x1, 0x200, 0x0, 0x7}, 0x2, 0x6, 0x766f})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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")

16.782623983s ago: executing program 7 (id=1340):
truncate(0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x92)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

15.36722346s ago: executing program 0 (id=1343):
syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00')
open(&(0x7f0000000180)='./bus\x00', 0x10f27f, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf91c1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e03}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setrlimit(0x9, &(0x7f0000000000))
io_setup(0x2004, &(0x7f0000000680))
pipe2$9p(&(0x7f00000001c0), 0x0)

14.404478214s ago: executing program 0 (id=1351):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd26}, 0x18}, 0x1, 0x0, 0x0, 0x4000048}, 0x0)

13.13869926s ago: executing program 7 (id=1354):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0xc005}, 0x0)
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000000)=""/245, &(0x7f0000000100)=0xf5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)={0x50000008})
mount$tmpfs(0x0, 0x0, 0x0, 0x1210020, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lstat(&(0x7f0000000380)='./file0\x00', 0x0)
setresgid(0x0, 0xee00, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'hsr0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000001cc0), 0x400000000000026, 0x0)

12.975204221s ago: executing program 0 (id=1355):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r0 = inotify_init1(0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0xa, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)
r7 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x1}, 0x0, 0x0)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000001080)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xe, 0x6000, @fd=r7, 0x9, 0x0, 0x0, 0x0, 0x1, {0x2}})
io_uring_enter(r7, 0x46f3, 0x0, 0x0, 0x0, 0x0)

12.220213344s ago: executing program 7 (id=1357):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x0)

11.788458036s ago: executing program 7 (id=1359):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200), 0x0)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9840365a80905ae7e5f175ec"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"32f164282525ffffdcbf1a0c"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="31000000030000000000000000000000000000000000000010000000000000005b293a402c"], 0x31)
write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xe0)
write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38)

11.592557417s ago: executing program 0 (id=1361):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xfff, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000200)=0x4, 0x4)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
bind(r2, &(0x7f0000000000)=@hci={0xa, 0x1, 0x2}, 0x80)

11.569771757s ago: executing program 7 (id=1362):
syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00')
open(&(0x7f0000000180)='./bus\x00', 0x10f27f, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf91c1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e03}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01030020000000000000340003782bd1d264c81e76c0b0bbb90000"], 0x14}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2})
write$bt_hci(r0, &(0x7f0000000280)=ANY=[], 0x6)
io_setup(0x2004, &(0x7f0000000680))
pipe2$9p(&(0x7f00000001c0), 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x18448, &(0x7f00000000c0)=ANY=[], 0x1, 0x61d6, &(0x7f0000006940)="$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")

11.245895008s ago: executing program 0 (id=1364):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x8d)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0x0, 0x1}, 0x0, 0x0, 0x401, {0x0, 0x8}})

10.957682739s ago: executing program 2 (id=1366):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008", @ANYRES32], 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x1c7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0)
recvmsg(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/160, 0xa0}], 0x1}, 0x20)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
readv(r0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0xc00000)

10.560791241s ago: executing program 8 (id=1367):
openat$sndseq(0xffffff9c, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="050001"], 0x9)

9.191461318s ago: executing program 8 (id=1369):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='C'], 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
capset(&(0x7f0000000300)={0x20080522}, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))

9.091014838s ago: executing program 8 (id=1370):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioperm(0x0, 0x444, 0xb1f)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x59455247}})
syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000600)={0xa0000010})
close_range(r0, 0xffffffffffffffff, 0x0)

5.570603874s ago: executing program 8 (id=1374):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00')
r1 = fsopen(&(0x7f0000000040)='gfs2\x00', 0x1)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xd0f3a97f57f86bc5)
ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000240))
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @private0, 0x2}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)

5.486742605s ago: executing program 5 (id=1375):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3, 0x0, 0x2, 0x2}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001805000020206425"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000340)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_io_uring_setup(0x106d45, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0xe63, 0x1, 0x2, 0x0, 0x0, 0xfffffffffffffff6}, 0x0, &(0x7f0000000240)={0x403}, 0x0, 0x0)
r5 = syz_open_dev$usbfs(0x0, 0x400000000000000f, 0x1112c1)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, 0x0)
mknod$loop(&(0x7f0000002180)='./file0\x00', 0x2000, 0x1)
mount(&(0x7f0000002400)=@loop={'/dev/loop', 0x0}, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)='affs\x00', 0x10000, &(0x7f00000024c0)='\x00')

4.855146948s ago: executing program 0 (id=1376):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendfile(r3, r2, 0x0, 0x8000fffffffe)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0x400})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x3, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10018}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e22}}, @FRA_DST={0x8, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x4c}}, 0x48000)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$I2C_PEC(r2, 0x708, 0x7)
ioctl$KDSETMODE(r5, 0x4b3a, 0x1)
ioctl$TCXONC(r5, 0x4b3a, 0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100))
r8 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465)
ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0xc0884123, &(0x7f0000000000)=0xa8f)
stat(&(0x7f00000009c0)='./file0\x00', 0x0)

4.4194845s ago: executing program 5 (id=1377):
ioperm(0x0, 0x1, 0x18a)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x181900)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_io_uring_submit(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x15, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20)
recvmsg$unix(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0)
close(0x3)

4.35059484s ago: executing program 8 (id=1378):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0xf5d3d000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0xfffd, 0x3, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x1, 0x7}}, 0xe8)
mkdir(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140)=[{0xffffffffffffffff}, {0x0}], 0x2, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001dc, 0x24040840)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r6, 0x6, 0x1, 0x0, &(0x7f000001f380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

3.664228333s ago: executing program 5 (id=1379):
openat$sndseq(0xffffff9c, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="050001"], 0x9)

3.491524524s ago: executing program 2 (id=1380):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
syz_open_dev$loop(&(0x7f0000000280), 0xc65, 0x20000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00))
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
close_range(r7, 0xffffffffffffffff, 0x0)
sendmmsg$sock(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000)

3.147621436s ago: executing program 7 (id=1381):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7)
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f00000003c0)='./file1\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40007fffffff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x43a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580"], 0x5c}}, 0x0)

2.520090939s ago: executing program 5 (id=1382):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0)
open(0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023892)

2.05776407s ago: executing program 2 (id=1383):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000380)='./file0\x00', 0x1400)
rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00')

1.519792043s ago: executing program 5 (id=1384):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
ioperm(0x0, 0x444, 0xb1f)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x59455247}})
syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000600)={0xa0000010})
close_range(r0, 0xffffffffffffffff, 0x0)

1.369980624s ago: executing program 2 (id=1385):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x0)

1.210188085s ago: executing program 2 (id=1386):
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x181000, 0x12)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", 0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = io_uring_setup(0x1de0, &(0x7f0000000440))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x19, 0x20000000, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000280)=0x280501, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)

1.132240155s ago: executing program 8 (id=1387):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x8d)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0)

160.088659ms ago: executing program 5 (id=1388):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00')
r1 = fsopen(&(0x7f0000000040)='gfs2\x00', 0x1)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xd0f3a97f57f86bc5)
ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000240))
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @private0, 0x2}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)

0s ago: executing program 2 (id=1389):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
ppoll(&(0x7f0000000480)=[{r1}, {r0}, {r3}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x2000)
socket$key(0xf, 0x3, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, 0x0, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.0.94'.
[  111.736207][ T4213] Bluetooth: hci1: Injecting HCI hardware error event
[  111.921330][ T4179] Bluetooth: hci1: hardware error 0x00
[  111.934802][ T4170] Bluetooth: hci5: command 0x040f tx timeout
[  112.949316][ T4547] device hsr_slave_0 entered promiscuous mode
[  112.987447][ T4547] device hsr_slave_1 entered promiscuous mode
[  113.862523][ T4547] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.879643][ T4547] Cannot create hsr debugfs directory
[  113.927506][ T4620] device macsec0 entered promiscuous mode
[  114.018483][ T4620] device veth1_macvtap left promiscuous mode
[  114.025819][ T4213] Bluetooth: hci5: command 0x0419 tx timeout
[  114.715654][ T4617] chnl_net:caif_netlink_parms(): no params data found
[  114.750117][   T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  114.777289][ T4547] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  114.819024][ T4547] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  115.006444][ T4547] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  115.313829][   T21] usb 3-1: Using ep0 maxpacket: 32
[  115.562531][ T4547] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  115.782438][ T4170] Bluetooth: hci6: command 0x0409 tx timeout
[  115.933974][   T21] usb 3-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71
[  115.943815][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.163697][   T21] usb 3-1: Product: syz
[  116.167924][   T21] usb 3-1: Manufacturer: syz
[  116.178170][   T21] usb 3-1: SerialNumber: syz
[  116.195220][   T21] usb 3-1: config 0 descriptor??
[  116.247183][   T21] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  116.274451][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  116.287832][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  116.298901][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  116.307179][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  116.315581][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  116.323193][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  116.331374][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  116.557415][   T21] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  116.568572][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  116.576723][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  116.585764][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  116.593377][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  116.601613][   T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  116.748190][   T21] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  116.817234][   T21] usb 3-1: USB disconnect, device number 3
[  116.938917][   T21] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  117.346571][   T21] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  117.401245][   T21] keyspan 3-1:0.0: device disconnected
[  117.425333][ T4288] udevd[4288]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory
[  117.515083][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.522223][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.545724][ T4617] device bridge_slave_0 entered promiscuous mode
[  117.862744][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.884928][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.939984][ T4617] device bridge_slave_1 entered promiscuous mode
[  118.533734][ T4157] Bluetooth: hci6: command 0x041b tx timeout
[  119.291365][ T4414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.465214][ T4665] 9pnet_virtio: no channels available for device syz
[  119.647300][ T4617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.735519][ T4414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.812058][ T4617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.886856][ T4414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.092115][ T4617] team0: Port device team_slave_0 added
[  120.159671][ T4673] xt_TCPMSS: Only works on TCP SYN packets
[  120.169242][ T4673] CIFS mount error: No usable UNC path provided in device string!
[  120.169242][ T4673] 
[  120.179494][ T4673] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  120.342397][ T4617] team0: Port device team_slave_1 added
[  120.925701][    T7] Bluetooth: hci6: command 0x040f tx timeout
[  121.026183][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.033179][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.143762][ T4617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.335777][ T4414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.704217][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.711207][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.834834][ T4617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.957843][ T4547] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.026653][    T7] Bluetooth: hci6: command 0x0419 tx timeout
[  123.081302][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.134750][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.366518][ T4694] 9pnet_virtio: no channels available for device syz
[  123.689473][ T4547] 8021q: adding VLAN 0 to HW filter on device team0
[  123.775180][ T4617] device hsr_slave_0 entered promiscuous mode
[  123.798586][ T4617] device hsr_slave_1 entered promiscuous mode
[  123.821339][ T4617] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.849557][ T4617] Cannot create hsr debugfs directory
[  124.143163][ T4707] xt_TCPMSS: Only works on TCP SYN packets
[  124.152069][ T4707] CIFS mount error: No usable UNC path provided in device string!
[  124.152069][ T4707] 
[  124.162551][ T4707] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  124.962051][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  124.989533][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.003452][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.010688][ T4362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.038349][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  126.116375][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  126.217258][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.238137][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  126.262116][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.269302][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.324942][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  126.378106][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  126.386387][    T7] usb 3-1: Using ep0 maxpacket: 16
[  126.392985][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  126.427318][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  126.468662][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  126.504257][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  126.516464][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  126.534681][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  126.557282][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  126.585002][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  126.691838][    T7] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  126.754055][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.793526][    T7] usb 3-1: Product: syz
[  126.810889][    T7] usb 3-1: Manufacturer: syz
[  126.823749][    T7] usb 3-1: SerialNumber: syz
[  127.035958][    T7] usb 3-1: config 0 descriptor??
[  127.074646][    T7] hub 3-1:0.0: bad descriptor, ignoring hub
[  127.080612][    T7] hub: probe of 3-1:0.0 failed with error -5
[  127.413965][ T4710] udc-core: couldn't find an available UDC or it's busy
[  127.604091][ T4710] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  127.822980][    T7] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5
[  127.928915][    T7] usb 3-1: USB disconnect, device number 4
[  128.027438][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.036400][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.045874][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  128.685481][ T4617] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  128.755164][ T4617] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  128.827380][ T4617] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  128.918969][ T4760] 9pnet_virtio: no channels available for device syz
[  128.953773][ T4617] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  129.837247][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.866448][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.915236][ T4770] sp0: Synchronizing with TNC
[  130.027829][ T4547] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.166893][ T4617] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.265676][ T4617] 8021q: adding VLAN 0 to HW filter on device team0
[  130.285939][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  130.309342][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  130.357430][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  130.382177][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  130.411800][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.418952][ T4362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.032274][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  131.286083][ T4414] device hsr_slave_0 left promiscuous mode
[  131.304243][ T4414] device hsr_slave_1 left promiscuous mode
[  131.333565][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.352150][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.387116][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.406317][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.440448][ T4414] device bridge_slave_1 left promiscuous mode
[  131.454304][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.491427][ T4414] device bridge_slave_0 left promiscuous mode
[  131.508259][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.579979][ T4414] device veth1_macvtap left promiscuous mode
[  131.605401][ T4414] device veth0_macvtap left promiscuous mode
[  131.611513][ T4414] device veth1_vlan left promiscuous mode
[  131.643835][ T4414] device veth0_vlan left promiscuous mode
[  132.553088][ T4414] team0 (unregistering): Port device team_slave_1 removed
[  132.673363][ T4414] team0 (unregistering): Port device team_slave_0 removed
[  132.729215][ T4414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.775974][ T4414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.829758][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.836926][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.092222][ T4414] bond0 (unregistering): Released all slaves
[  133.922770][ T4617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  133.944048][ T4617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.059971][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  134.077148][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  134.089022][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.096180][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.107545][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  134.117540][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  134.127019][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  134.139123][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  134.168681][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  134.199103][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  134.239582][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  134.269479][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  134.278861][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  134.287602][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.103864][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  135.276406][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  135.494577][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  135.525663][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  135.636287][ T4827] 9pnet_virtio: no channels available for device syz
[  136.032809][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  136.123167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  136.425308][ T4547] device veth0_vlan entered promiscuous mode
[  136.435424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  136.444226][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.495898][ T4617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.983521][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.992522][ T4831] sp0: Synchronizing with TNC
[  137.092600][ T4844] befs: (nbd0): No write support. Marking filesystem read-only
[  137.160382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  137.603652][    C1] sched: RT throttling activated
[  137.603721][   T22] block nbd0: Attempted send on invalid socket
[  137.615053][   T22] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.689948][ T4547] device veth1_vlan entered promiscuous mode
[  137.747014][ T4844] befs: (nbd0): unable to read superblock
[  139.109835][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.139684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.196804][ T4547] device veth0_macvtap entered promiscuous mode
[  139.238937][ T4547] device veth1_macvtap entered promiscuous mode
[  139.391256][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.594488][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.608311][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.911321][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.928839][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.208518][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.218631][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.229312][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.412816][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.481730][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.564798][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.616355][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.658150][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.691200][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.730853][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.744802][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.755658][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.766926][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.779681][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  140.806689][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  140.840501][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.863254][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.893080][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.960660][ T4879] 9pnet_virtio: no channels available for device syz
[  141.788766][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.836177][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.926719][ T4547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.936321][ T4547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.959662][ T4547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.087679][ T4547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.825048][ T4892] befs: (nbd1): No write support. Marking filesystem read-only
[  144.086109][   T22] block nbd1: Attempted send on invalid socket
[  144.092329][   T22] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.104212][ T4892] befs: (nbd1): unable to read superblock
[  144.246488][ T4617] device veth0_vlan entered promiscuous mode
[  144.424376][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  144.432812][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  144.694788][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  144.831066][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.475524][ T4617] device veth1_vlan entered promiscuous mode
[  147.742985][ T4911] netlink: 156 bytes leftover after parsing attributes in process `syz.0.150'.
[  149.548490][ T4924] 9pnet_virtio: no channels available for device syz
[  149.687098][ T4617] device veth0_macvtap entered promiscuous mode
[  149.722472][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  149.776012][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.824088][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.835829][ T4617] device veth1_macvtap entered promiscuous mode
[  149.851638][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.861747][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  149.974873][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.015975][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.026112][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.038153][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.048178][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.074680][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.529094][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.721604][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.849393][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.873806][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.939581][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.012856][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  152.024606][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.092700][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  153.116444][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.117145][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.173763][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.214690][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.234468][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.281003][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.317741][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.328320][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.338200][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.350192][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.360180][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.371273][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.405331][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.651779][ T4617] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.767305][ T4617] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.889850][ T4617] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.280308][ T4617] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.307390][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  154.344630][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  154.384543][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  154.685619][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.935770][ T4975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.78'.
[  154.955639][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.052076][ T4979] affs: No valid root block on device loop2
[  156.573443][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  157.667261][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.676458][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.708400][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  158.764746][ T4998] befs: (nbd1): No write support. Marking filesystem read-only
[  158.792600][   T22] block nbd1: Attempted send on invalid socket
[  158.798846][   T22] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.809886][ T4998] befs: (nbd1): unable to read superblock
[  159.254632][ T5007] device macsec0 entered promiscuous mode
[  159.295153][ T5007] device veth1_macvtap left promiscuous mode
[  159.681608][ T5007] device macsec0 left promiscuous mode
[  161.426480][ T5046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.188'.
[  161.630786][ T4414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.487790][ T4414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.702344][ T4414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.262310][ T4414] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.825432][ T5113] netlink: 28 bytes leftover after parsing attributes in process `syz.6.203'.
[  168.883996][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'.
[  172.758912][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.216'.
[  174.841639][ T5183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.220'.
[  175.211879][ T5186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.223'.
[  175.266833][ T4414] device hsr_slave_0 left promiscuous mode
[  175.281200][ T4414] device hsr_slave_1 left promiscuous mode
[  175.301302][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.323154][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.344817][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.352266][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.453606][ T4414] device bridge_slave_1 left promiscuous mode
[  175.459101][ T5198] 9pnet_virtio: no channels available for device syz
[  175.470260][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.604281][ T4414] device bridge_slave_0 left promiscuous mode
[  176.726579][ T5204] befs: (nbd2): No write support. Marking filesystem read-only
[  177.024432][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.129954][ T4414] device veth1_macvtap left promiscuous mode
[  177.153778][ T4414] device veth0_macvtap left promiscuous mode
[  177.157718][  T264] block nbd2: Attempted send on invalid socket
[  177.166131][  T264] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  177.173879][ T4414] device veth1_vlan left promiscuous mode
[  177.177084][ T5204] befs: (nbd2): unable to read superblock
[  177.224199][ T4414] device veth0_vlan left promiscuous mode
[  178.493172][ T4414] team0 (unregistering): Port device team_slave_1 removed
[  178.528831][ T4414] team0 (unregistering): Port device team_slave_0 removed
[  178.547541][ T4414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.562972][ T4414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.499707][ T4414] bond0 (unregistering): Released all slaves
[  179.619614][ T4218] bond0: (slave bond_slave_0): interface is now down
[  179.627960][ T5193] netlink: 'syz.1.224': attribute type 10 has an invalid length.
[  179.636961][ T4218] bond0: (slave bond_slave_1): interface is now down
[  179.656873][ T5193] device syz_tun entered promiscuous mode
[  179.674526][    T9] bond0: (slave bond_slave_0): interface is now down
[  179.682625][    T9] bond0: (slave bond_slave_1): interface is now down
[  179.701391][ T5193] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  179.714879][ T4364] bond0: (slave bond_slave_0): interface is now down
[  179.724112][ T4364] bond0: (slave bond_slave_1): interface is now down
[  179.730816][ T4364] bond0: (slave syz_tun): interface is now down
[  179.737567][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[  179.790363][ T4364] bond0: (slave bond_slave_0): interface is now down
[  179.800316][ T4364] bond0: (slave bond_slave_1): interface is now down
[  179.840206][ T4364] bond0: (slave syz_tun): interface is now down
[  179.874991][ T4277] bond0: (slave bond_slave_0): interface is now down
[  179.889600][ T4277] bond0: (slave bond_slave_1): interface is now down
[  179.904499][ T4277] bond0: (slave syz_tun): interface is now down
[  179.933957][ T4364] bond0: (slave bond_slave_0): interface is now down
[  179.953757][ T4364] bond0: (slave bond_slave_1): interface is now down
[  179.964583][ T4364] bond0: (slave syz_tun): interface is now down
[  180.507598][ T4364] bond0: now running without any active interface!
[  181.203383][ T5249] befs: (nbd5): No write support. Marking filesystem read-only
[  181.593714][  T264] block nbd5: Attempted send on invalid socket
[  181.599943][  T264] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  181.617320][ T5249] befs: (nbd5): unable to read superblock
[  182.403869][   T26] audit: type=1804 audit(1732353088.347:2): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.242" name="/newroot/18/file1" dev="fuse" ino=1 res=1 errno=0
[  182.541772][ T5265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'.
[  183.940612][ T5272] ALSA: seq fatal error: cannot create timer (-22)
[  183.942286][   T26] audit: type=1800 audit(1732353089.867:3): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.242" name="/" dev="fuse" ino=1 res=0 errno=0
[  184.352118][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  184.891140][ T5301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'.
[  186.596753][ T4170] Bluetooth: hci2: command 0x0406 tx timeout
[  186.602885][ T4170] Bluetooth: hci0: command 0x0406 tx timeout
[  194.272058][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.288794][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  195.710761][ T5405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.268'.
[  196.929031][ T5411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'.
[  201.406460][ T5510] 9pnet_virtio: no channels available for device syz
[  202.019167][ T5522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.283'.
[  207.578409][ T5558] befs: (nbd1): No write support. Marking filesystem read-only
[  208.277696][   T22] block nbd1: Attempted send on invalid socket
[  208.284007][   T22] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.294907][ T5558] befs: (nbd1): unable to read superblock
[  208.571394][ T5563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.295'.
[  210.594659][ T5577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'.
[  214.951397][ T5621] befs: (nbd0): No write support. Marking filesystem read-only
[  214.987624][  T264] block nbd0: Attempted send on invalid socket
[  214.995892][  T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  215.008047][ T5621] befs: (nbd0): unable to read superblock
[  217.214163][ T4243] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  220.194324][ T4243] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[  220.428160][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.605129][ T4243] usb 2-1: config 0 descriptor??
[  220.633964][ T4243] usb 2-1: can't set config #0, error -71
[  220.656388][ T4243] usb 2-1: USB disconnect, device number 3
[  220.837257][ T5668] befs: (nbd5): No write support. Marking filesystem read-only
[  220.845673][  T264] block nbd5: Attempted send on invalid socket
[  220.851859][  T264] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  220.862807][ T5668] befs: (nbd5): unable to read superblock
[  226.480417][ T5712] befs: (nbd5): No write support. Marking filesystem read-only
[  226.489190][  T264] block nbd5: Attempted send on invalid socket
[  226.495772][  T264] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.506835][ T5712] befs: (nbd5): unable to read superblock
[  227.248062][ T5730] affs: No valid root block on device loop0
[  228.114147][   T23] Bluetooth: hci5: command 0x0406 tx timeout
[  228.244000][ T4243] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  228.503948][ T4243] usb 6-1: Using ep0 maxpacket: 8
[  228.657797][ T4243] usb 6-1: config 2 has an invalid interface number: 31 but max is 0
[  228.703031][ T4243] usb 6-1: config 2 has no interface number 0
[  228.762624][ T4243] usb 6-1: config 2 interface 31 has no altsetting 0
[  229.811705][ T4243] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  231.116916][ T5764] ieee802154 phy0 wpan0: encryption failed: -22
[  231.543930][ T4243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.552098][ T4243] usb 6-1: Product: syz
[  231.556533][ T4243] usb 6-1: Manufacturer: syz
[  231.565213][ T4243] usb 6-1: SerialNumber: syz
[  231.595043][ T4243] usb 6-1: can't set config #2, error -71
[  231.608085][ T4243] usb 6-1: USB disconnect, device number 2
[  231.943328][ T5776] netlink: 156 bytes leftover after parsing attributes in process `syz.5.343'.
[  232.892084][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.346'.
[  236.603870][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.353'.
[  236.612999][ T5822] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  237.308986][ T5842] netlink: 156 bytes leftover after parsing attributes in process `syz.6.356'.
[  238.051195][ T5837] loop2: detected capacity change from 0 to 8192
[  241.034154][ T5892] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  242.565060][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'.
[  242.931657][ T5916] xt_TCPMSS: Only works on TCP SYN packets
[  242.938478][ T5916] CIFS mount error: No usable UNC path provided in device string!
[  242.938478][ T5916] 
[  242.949078][ T5916] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  245.647543][   T26] audit: type=1326 audit(1732353151.627:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0720b7c819 code=0x7ffc0000
[  245.771549][   T26] audit: type=1326 audit(1732353151.677:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0720b7c819 code=0x7ffc0000
[  245.932455][   T26] audit: type=1326 audit(1732353151.677:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0720b7c819 code=0x7ffc0000
[  246.058760][   T26] audit: type=1326 audit(1732353151.677:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0720b7c819 code=0x7ffc0000
[  246.274252][ T5952] x_tables: ip6_tables: mh match: only valid for protocol 135
[  246.857450][   T26] audit: type=1326 audit(1732353151.677:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0720b7b25c code=0x7ffc0000
[  247.062986][   T26] audit: type=1326 audit(1732353151.697:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0720b7c819 code=0x7ffc0000
[  247.530948][   T26] audit: type=1326 audit(1732353151.697:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0720b7c819 code=0x7ffc0000
[  247.554446][   T26] audit: type=1326 audit(1732353151.697:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f0720b7c819 code=0x7ffc0000
[  247.577035][   T26] audit: type=1326 audit(1732353151.697:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0720b7c819 code=0x7ffc0000
[  247.599742][   T26] audit: type=1326 audit(1732353151.697:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0720b7c819 code=0x7ffc0000
[  248.153045][ T5983] xt_TCPMSS: Only works on TCP SYN packets
[  248.159799][ T5983] CIFS mount error: No usable UNC path provided in device string!
[  248.159799][ T5983] 
[  248.169969][ T5983] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  252.280831][ T6014] affs: No valid root block on device loop5
[  253.574896][ T6020] openvswitch: netlink: Message has 15 unknown bytes.
[  253.655772][ T6024] process 'syz.6.395' launched './file0' with NULL argv: empty string added
[  255.436088][ T6046] befs: (nbd0): No write support. Marking filesystem read-only
[  255.528842][  T264] block nbd0: Attempted send on invalid socket
[  255.535557][  T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.547417][ T6046] befs: (nbd0): unable to read superblock
[  255.814983][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.824605][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  258.700525][ T6077] affs: No valid root block on device loop5
[  261.253522][ T6099] netlink: 'syz.5.415': attribute type 1 has an invalid length.
[  262.149161][ T1334] libceph: connect (1)[c::]:6789 error -101
[  262.157506][ T1334] libceph: mon0 (1)[c::]:6789 connect error
[  262.172188][ T1334] libceph: connect (1)[c::]:6789 error -101
[  262.183752][ T1334] libceph: mon0 (1)[c::]:6789 connect error
[  262.609455][ T6125] befs: (nbd5): No write support. Marking filesystem read-only
[  262.946678][   T22] block nbd5: Attempted send on invalid socket
[  262.956260][   T22] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.967609][ T6125] befs: (nbd5): unable to read superblock
[  262.976510][ T1334] libceph: connect (1)[c::]:6789 error -101
[  262.982673][ T1334] libceph: mon0 (1)[c::]:6789 connect error
[  263.058854][ T6112] ceph: No mds server is up or the cluster is laggy
[  263.139759][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'.
[  263.793865][ T4243] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  264.338628][ T4243] usb 6-1: Using ep0 maxpacket: 16
[  264.743988][ T4243] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.764271][    T7] libceph: connect (1)[c::]:6789 error -101
[  264.770731][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  264.788908][ T6141] ceph: No mds server is up or the cluster is laggy
[  264.797420][ T6160] netlink: 'syz.1.428': attribute type 1 has an invalid length.
[  264.811138][ T4243] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  264.837288][ T4243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.878896][ T4243] usb 6-1: config 0 descriptor??
[  264.905425][ T1334] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  265.087245][    T7] libceph: connect (1)[c::]:6789 error -101
[  265.093384][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  265.312015][ T1334] usb 1-1: Using ep0 maxpacket: 8
[  266.013781][ T1334] usb 1-1: unable to get BOS descriptor set
[  266.054687][ T4243] logitech 0003:046D:C626.0001: item fetching failed at offset 8/9
[  266.077921][ T4243] logitech 0003:046D:C626.0001: parse failed
[  266.093720][ T4243] logitech: probe of 0003:046D:C626.0001 failed with error -22
[  266.123944][ T1334] usb 1-1: config 1 interface 0 has no altsetting 0
[  266.256038][ T4244] usb 6-1: USB disconnect, device number 3
[  266.294520][ T1334] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40
[  266.343807][ T1334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.404162][ T1334] usb 1-1: Product: syz
[  266.408800][ T1334] usb 1-1: Manufacturer: syz
[  266.413503][ T1334] usb 1-1: SerialNumber: syz
[  266.984126][ T1334] usbhid 1-1:1.0: can't add hid device: -71
[  266.992117][ T1334] usbhid: probe of 1-1:1.0 failed with error -71
[  267.038832][ T1334] usb 1-1: USB disconnect, device number 2
[  268.046644][ T6210] netlink: 'syz.0.439': attribute type 1 has an invalid length.
[  270.249782][ T6240] crypto_alloc_aead failed rc=-4
[  273.587947][ T4244] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  273.903768][ T4244] usb 2-1: Using ep0 maxpacket: 8
[  274.365039][ T4244] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  274.380827][ T4244] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  274.394697][ T4244] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  274.409479][ T4244] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  274.423311][ T4244] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  274.449324][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.625793][ T6312] 9pnet_virtio: no channels available for device syz
[  275.733885][ T4244] usb 2-1: usb_control_msg returned -32
[  275.739946][ T4244] usbtmc 2-1:16.0: can't read capabilities
[  276.132208][ T6310] loop2: detected capacity change from 0 to 7
[  277.258848][ T6310] Dev loop2: unable to read RDB block 7
[  277.265219][ T6310]  loop2: unable to read partition table
[  277.271124][ T6310] loop2: partition table beyond EOD, truncated
[  277.277463][ T6310] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5)
[  277.308520][ T3545] Dev loop2: unable to read RDB block 7
[  277.327987][ T4157] usb 2-1: USB disconnect, device number 4
[  277.338558][ T3545]  loop2: unable to read partition table
[  277.357338][ T6310] netlink: 68 bytes leftover after parsing attributes in process `syz.6.458'.
[  277.396357][ T3545] loop2: partition table beyond EOD, truncated
[  278.529008][ T6350] befs: (nbd5): No write support. Marking filesystem read-only
[  278.537854][   T22] block nbd5: Attempted send on invalid socket
[  278.544208][   T22] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.556153][ T6350] befs: (nbd5): unable to read superblock
[  283.583370][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.482'.
[  288.347229][ T6488] loop6: detected capacity change from 0 to 512
[  289.646449][ T6488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002]
[  289.720387][ T6488] System zones: 0-2, 18-18, 34-35
[  289.738910][ T6488] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback.
[  289.752914][ T6488] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.764911][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.5.496'.
[  291.415423][ T6527] loop0: detected capacity change from 0 to 128
[  295.878581][ T6565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.508'.
[  299.281311][ T6603] x_tables: ip6_tables: mh match: only valid for protocol 135
[  300.373791][ T4210] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  302.254091][ T4210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.309832][ T4210] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  302.532193][ T4210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.175805][ T4210] usb 7-1: config 0 descriptor??
[  303.204256][ T4210] usb 7-1: can't set config #0, error -71
[  303.227865][ T4210] usb 7-1: USB disconnect, device number 2
[  306.573720][ T4243] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  306.996182][ T4243] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  307.098020][ T6700] netlink: 'syz.0.534': attribute type 10 has an invalid length.
[  307.130285][ T4243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  307.235511][ T6700] netlink: 55 bytes leftover after parsing attributes in process `syz.0.534'.
[  307.359158][ T4243] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  307.402688][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.514827][ T4243] usb 2-1: config 0 descriptor??
[  307.544404][ T6681] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  307.566311][ T4243] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  308.216147][ T6716] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  308.222920][ T6716] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  308.230901][ T6716] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  308.237415][ T6716] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  308.244385][ T6716] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  308.250926][ T6716] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  308.257658][ T6716] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  308.264237][ T6716] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  308.274875][ T6716] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  308.281287][ T6716] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  309.673905][ T4243] usb 2-1: USB disconnect, device number 5
[  311.318120][ T6742] loop6: detected capacity change from 0 to 128
[  311.452216][ T6742] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  311.493687][ T4157] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  311.514020][ T6742] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.611413][ T6750] loop2: detected capacity change from 0 to 16
[  311.737010][ T4157] usb 2-1: Using ep0 maxpacket: 8
[  311.802202][ T6759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.546'.
[  311.830412][ T6750] erofs: (device loop2): mounted with root inode @ nid 36.
[  311.853866][ T4157] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  311.883749][ T4157] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  311.916110][ T4157] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  311.936863][ T4157] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.972635][ T4157] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  312.004507][ T4157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.296093][ T4157] usb 2-1: GET_CAPABILITIES returned 0
[  312.301767][ T4157] usbtmc 2-1:16.0: can't read capabilities
[  313.219908][ T1334] usb 2-1: USB disconnect, device number 6
[  313.269431][ T6777] loop5: detected capacity change from 0 to 128
[  315.142867][ T6800] affs: No valid root block on device loop2
[  317.077591][ T6809] xt_TCPMSS: Only works on TCP SYN packets
[  317.084867][ T6809] CIFS mount error: No usable UNC path provided in device string!
[  317.084867][ T6809] 
[  317.094954][ T6809] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  317.199977][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.206362][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  321.695988][ T6862] xt_TCPMSS: Only works on TCP SYN packets
[  321.702654][ T6862] CIFS mount error: No usable UNC path provided in device string!
[  321.702654][ T6862] 
[  321.713095][ T6862] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  323.045414][ T6879] loop2: detected capacity change from 0 to 8
[  323.231488][ T6879] unable to read inode lookup table
[  323.246440][ T6883] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[  323.387744][ T6883] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  323.401558][ T6883] 8021q: adding VLAN 0 to HW filter on device bond2
[  323.403973][ T5016] net_ratelimit: 66 callbacks suppressed
[  323.403993][ T5016] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  323.425233][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  323.624318][ T5016] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  324.361807][   T21] Bluetooth: hci6: command 0x0406 tx timeout
[  324.370839][ T6906] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  324.377293][ T6906] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  324.574826][ T6906] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  324.581381][ T6906] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  324.977687][ T6906] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  324.984237][ T6906] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  325.112432][ T6906] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  325.119008][ T6906] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  325.765151][ T6923] loop0: detected capacity change from 0 to 2048
[  325.970018][ T6923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  326.071121][ T6934] loop6: detected capacity change from 0 to 512
[  326.153353][ T6934] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  326.209660][ T6934] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  326.445386][ T6934] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  326.559916][ T6952] loop5: detected capacity change from 0 to 16
[  326.573926][ T6934] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  326.652838][ T6952] erofs: (device loop5): mounted with root inode @ nid 36.
[  326.700488][ T6952] erofs: (device loop5): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36
[  327.267734][ T6934] EXT4-fs (loop6): 1 truncate cleaned up
[  327.274265][ T6934] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,barrier,quota,quota,,errors=continue. Quota mode: writeback.
[  327.954413][ T6961] netlink: 24 bytes leftover after parsing attributes in process `syz.5.591'.
[  330.291898][ T6988] loop1: detected capacity change from 0 to 1024
[  331.221530][ T7005] net_ratelimit: 144 callbacks suppressed
[  331.221551][ T7005] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  331.233864][ T7005] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  331.286099][ T6997] loop2: detected capacity change from 0 to 2048
[  331.438421][ T7005] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  331.444914][ T7005] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  331.487594][ T6997] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  331.591150][ T7005] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  331.597667][ T7005] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  331.656016][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'.
[  331.731495][ T7005] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  331.738060][ T7005] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  331.980283][ T7005] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  331.986913][ T7005] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  332.823968][ T6997] loop_set_status: loop2 () has still dirty pages (nrpages=2)
[  333.145366][ T4166] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  333.834911][ T7028] befs: (nbd5): No write support. Marking filesystem read-only
[  333.883798][   T22] block nbd5: Attempted send on invalid socket
[  333.890021][   T22] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  333.901184][ T7028] befs: (nbd5): unable to read superblock
[  334.435236][ T6317] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  336.754342][ T7044] loop6: detected capacity change from 0 to 32768
[  336.854061][ T6317] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  336.883121][ T6317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  336.929133][ T6317] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  336.951621][ T6317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.934108][ T6317] usb 2-1: config 0 descriptor??
[  338.133999][ T6317] usb 2-1: can't set config #0, error -71
[  338.592016][ T6317] usb 2-1: USB disconnect, device number 7
[  338.887024][ T4157] Bluetooth: hci2: command 0x0409 tx timeout
[  340.769968][ T7103] netlink: 32 bytes leftover after parsing attributes in process `syz.6.629'.
[  341.808915][ T7108] loop6: detected capacity change from 0 to 2048
[  342.463394][ T7114] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  342.781931][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  342.781946][   T26] audit: type=1804 audit(1732353248.757:16): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.635" name="/newroot/75/file0/bus" dev="loop6" ino=18 res=1 errno=0
[  342.823884][ T4157] Bluetooth: hci2: command 0x0406 tx timeout
[  342.874268][   T26] audit: type=1804 audit(1732353248.817:17): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.635" name="/newroot/75/file0/bus" dev="loop6" ino=18 res=1 errno=0
[  343.942216][ T7121] loop2: detected capacity change from 0 to 2048
[  344.146712][ T7121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.172403][ T7123] loop0: detected capacity change from 0 to 40427
[  345.292694][ T7123] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  345.313986][ T7123] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  345.395989][   T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  345.814611][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.848059][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.969619][   T23] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  345.979173][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.015087][ T7123] F2FS-fs (loop0): invalid crc value
[  346.075666][   T23] usb 6-1: config 0 descriptor??
[  346.878972][ T7123] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4)
[  347.143300][   T23] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  348.686114][ T4157] usb 6-1: USB disconnect, device number 4
[  348.755439][ T7162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  353.997832][ T7205] loop2: detected capacity change from 0 to 1764
[  354.199742][ T7211] netlink: 'syz.0.663': attribute type 39 has an invalid length.
[  354.441363][ T7216] net_ratelimit: 66 callbacks suppressed
[  354.441384][ T7216] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  354.453499][ T7216] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  354.460866][ T7216] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  354.467406][ T7216] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  354.474189][ T7216] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  354.480569][ T7216] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  354.487229][ T7216] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  354.493653][ T7216] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  354.500137][ T7216] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  354.506549][ T7216] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  355.883140][ T7229] netlink: 32 bytes leftover after parsing attributes in process `syz.6.667'.
[  357.939162][ T7238] loop6: detected capacity change from 0 to 4096
[  358.224407][ T7238] =======================================================
[  358.224407][ T7238] WARNING: The mand mount option has been deprecated and
[  358.224407][ T7238]          and is ignored by this kernel. Remove the mand
[  358.224407][ T7238]          option from the mount to silence this warning.
[  358.224407][ T7238] =======================================================
[  358.259312][    C1] vkms_vblank_simulate: vblank timer overrun
[  358.889801][ T7246] loop2: detected capacity change from 0 to 256
[  358.951151][ T7247] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  359.074342][ T7246] exfat: Deprecated parameter 'utf8'
[  359.079715][ T7246] exfat: Deprecated parameter 'namecase'
[  359.117349][   T26] audit: type=1800 audit(1732353265.097:18): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.671" name="file1" dev="loop6" ino=15 res=0 errno=0
[  359.138447][ T7246] exfat: Deprecated parameter 'namecase'
[  359.152785][ T7246] exfat: Deprecated parameter 'utf8'
[  359.278339][ T7246] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  359.662617][ T7255] loop1: detected capacity change from 0 to 764
[  360.409612][ T7255] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  360.982698][ T7259] loop1: detected capacity change from 0 to 1024
[  361.933985][ T7259] EXT4-fs (loop1): Ignoring removed orlov option
[  361.975856][ T7273] net_ratelimit: 66 callbacks suppressed
[  361.975875][ T7273] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  361.988024][ T7273] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  361.995111][ T7273] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  362.001507][ T7273] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  362.008245][ T7273] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  362.014720][ T7273] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  362.021310][ T7273] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  362.027830][ T7273] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  362.035191][ T7273] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  362.041588][ T7273] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  362.129024][ T7259] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,nobarrier,orlov,bsdgroups,max_batch_time=0x0000000000000004,user_xattr,quota,,errors=continue. Quota mode: writeback.
[  362.620429][ T7286] capability: warning: `syz.1.678' uses deprecated v2 capabilities in a way that may be insecure
[  364.449778][ T7302] loop1: detected capacity change from 0 to 8
[  371.519324][ T7363] loop1: detected capacity change from 0 to 1024
[  372.690905][ T7420] hfsplus: b-tree write err: -5, ino 4
[  372.805070][ T7414] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  372.842839][ T7427] loop5: detected capacity change from 0 to 512
[  372.923153][ T4167] hfsplus: bad catalog entry type
[  372.936391][ T7427] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  372.979904][ T4167] hfsplus: bad catalog entry type
[  373.154444][ T7427] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  373.850039][ T7427] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  374.014672][ T4167] bond0: (slave syz_tun): Releasing backup interface
[  374.039179][ T7427] System zones: 0-2, 18-18, 34-34
[  374.099544][ T7427] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  374.169741][ T7427] EXT4-fs (loop5): 1 truncate cleaned up
[  374.201629][ T4273] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.396588][ T7427] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  375.246132][ T7446] net_ratelimit: 66 callbacks suppressed
[  375.246152][ T7446] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  375.258267][ T7446] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  375.264994][ T7446] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  375.271376][ T7446] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  375.278081][ T7446] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  375.284490][ T7446] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  375.291132][ T7446] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  375.297587][ T7446] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  375.304287][ T7446] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  375.310674][ T7446] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  375.791837][ T4273] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.776380][ T4273] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.842315][ T7460] team0: Port device virt_wifi0 added
[  376.881972][ T4273] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.313213][ T7462] befs: (nbd2): No write support. Marking filesystem read-only
[  377.321997][  T264] block nbd2: Attempted send on invalid socket
[  377.328483][  T264] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  377.339614][ T7462] befs: (nbd2): unable to read superblock
[  377.421431][ T7473] loop6: detected capacity change from 0 to 164
[  377.745348][ T7477] 9pnet_virtio: no channels available for device syz
[  378.588636][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.595888][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  378.836432][ T7483] iso9660: Corrupted directory entry in block 4 of inode 1792
[  380.024045][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[  381.405826][ T4273] bond2: (slave ip6gretap1): Removing an active aggregator
[  381.416426][ T4362] net_ratelimit: 66 callbacks suppressed
[  381.416441][ T4362] bond2: Warning: Found an uninitialized port
[  381.616425][ T4273] bond2: (slave ip6gretap1): Releasing backup interface
[  382.104053][    T7] Bluetooth: hci1: command 0x041b tx timeout
[  383.438964][ T7470] chnl_net:caif_netlink_parms(): no params data found
[  384.739212][ T1334] Bluetooth: hci1: command 0x040f tx timeout
[  385.263896][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.362860][ T7571] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  385.369380][ T7571] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  385.376057][ T7571] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  385.382708][ T7571] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  385.389897][ T7571] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  385.396355][ T7571] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  385.403557][ T7571] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  385.409978][ T7571] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  385.418891][ T7571] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  386.051901][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.120886][ T7470] device bridge_slave_0 entered promiscuous mode
[  386.202690][ T7573] loop6: detected capacity change from 0 to 512
[  386.257771][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.267328][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.306844][ T7470] device bridge_slave_1 entered promiscuous mode
[  386.353867][ T7573] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  386.453223][ T7573] EXT4-fs (loop6): 1 orphan inode deleted
[  386.633995][ T7573] EXT4-fs (loop6): 1 truncate cleaned up
[  386.653662][ T7573] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none.
[  386.873142][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.155578][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.205843][ T1334] Bluetooth: hci1: command 0x0419 tx timeout
[  387.412744][ T4273] device hsr_slave_0 left promiscuous mode
[  388.742632][ T4273] device hsr_slave_1 left promiscuous mode
[  389.045174][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  389.052737][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.215215][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.380039][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.724851][ T4273] device bridge_slave_1 left promiscuous mode
[  389.731121][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.604449][ T4273] device bridge_slave_0 left promiscuous mode
[  390.616203][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.463777][ T4273] device veth0_macvtap left promiscuous mode
[  391.470055][ T4273] device veth1_vlan left promiscuous mode
[  391.495381][ T4273] device veth0_vlan left promiscuous mode
[  393.205204][ T4243] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  393.213994][ T4243] Bluetooth: hci0: Injecting HCI hardware error event
[  393.221227][ T4179] Bluetooth: hci0: hardware error 0x00
[  394.155369][ T4273] bond2 (unregistering): Released all slaves
[  394.225672][ T4273] bond1 (unregistering): Released all slaves
[  395.724034][ T6317] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  397.191563][ T7746] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.757' sets config #0
[  397.436150][ T4273] team0 (unregistering): Port device team_slave_1 removed
[  397.512874][ T4273] team0 (unregistering): Port device team_slave_0 removed
[  397.585374][ T4273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.680979][ T4273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.790928][ T6317] usb 3-1: Using ep0 maxpacket: 32
[  397.830797][ T4273] bond0 (unregistering): Released all slaves
[  397.901462][ T7470] team0: Port device team_slave_0 added
[  397.922502][ T7670] netlink: 32 bytes leftover after parsing attributes in process `syz.5.749'.
[  397.936091][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  397.945639][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  397.953104][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  398.030186][ T6317] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  398.056795][ T7470] team0: Port device team_slave_1 added
[  398.384616][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.133016][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.159137][    C1] vkms_vblank_simulate: vblank timer overrun
[  399.287447][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.307667][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.318185][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.354677][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.404151][ T6317] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[  399.422114][ T6317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.474693][ T6317] usb 3-1: can't set config #1, error -71
[  399.495097][ T6317] usb 3-1: USB disconnect, device number 5
[  399.518108][ T7470] device hsr_slave_0 entered promiscuous mode
[  399.615467][ T7470] device hsr_slave_1 entered promiscuous mode
[  400.911169][ T7782] befs: (nbd2): No write support. Marking filesystem read-only
[  400.919347][   T22] block nbd2: Attempted send on invalid socket
[  400.925647][   T22] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  400.936568][ T7782] befs: (nbd2): unable to read superblock
[  402.887595][ T7470] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  402.899670][ T7847] loop6: detected capacity change from 0 to 256
[  403.005289][ T7470] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  403.038090][ T7847] exfat: Deprecated parameter 'utf8'
[  403.043474][ T7847] exfat: Deprecated parameter 'namecase'
[  403.106462][ T7470] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  403.151313][ T7847] exfat: Deprecated parameter 'namecase'
[  403.197641][ T7847] exfat: Deprecated parameter 'utf8'
[  403.206501][ T7470] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  403.472737][ T7847] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  403.726330][ T7853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.768'.
[  404.552827][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.668246][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  404.684407][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  404.693933][ T7847] loop_set_status: loop6 () has still dirty pages (nrpages=4)
[  405.037648][ T7470] 8021q: adding VLAN 0 to HW filter on device team0
[  405.201755][ T7470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  405.259783][ T7470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  405.305989][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  405.339103][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  405.401248][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.401363][ T5016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.401966][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  405.402612][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  405.403050][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.403087][ T5016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.405400][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  405.406327][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  405.407255][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  405.417528][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  405.418348][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  405.419136][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  405.419861][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  405.420612][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  405.421384][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  405.421964][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  405.422642][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  405.435989][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  405.436769][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  405.798647][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  405.798843][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  405.829982][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.197618][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  407.225261][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  407.667897][ T7470] device veth0_vlan entered promiscuous mode
[  407.864229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  407.979353][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  408.048649][ T7470] device veth1_vlan entered promiscuous mode
[  408.084560][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  408.094418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  408.122870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  408.153690][   T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  408.187708][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  408.217212][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  408.257465][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  408.307021][ T7470] device veth0_macvtap entered promiscuous mode
[  408.341710][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  408.371156][ T7470] device veth1_macvtap entered promiscuous mode
[  408.548845][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.603671][   T23] usb 6-1: Using ep0 maxpacket: 16
[  408.623631][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.669844][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.700623][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.737393][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.754107][   T23] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  408.766731][   T23] usb 6-1: config 0 has no interface number 0
[  408.770097][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.787801][   T23] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.809841][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.823303][   T23] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.842616][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.856173][   T23] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  408.860790][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.894293][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  408.920007][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.930663][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  408.941380][   T23] usb 6-1: config 0 descriptor??
[  408.957626][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.021973][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.043645][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.079260][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.119265][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.139979][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.173670][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.198470][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.253389][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.654729][   T23] uclogic 0003:28BD:0071.0003: failed retrieving string descriptor #100: -71
[  409.749398][   T23] uclogic 0003:28BD:0071.0003: failed retrieving pen parameters: -71
[  409.910984][   T23] uclogic 0003:28BD:0071.0003: pen probing failed: -71
[  410.037312][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  410.045518][   T23] uclogic 0003:28BD:0071.0003: failed probing parameters: -71
[  410.047467][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  410.069741][ T7470] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.083938][   T23] uclogic: probe of 0003:28BD:0071.0003 failed with error -71
[  410.093025][ T7470] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.122264][   T23] usb 6-1: USB disconnect, device number 5
[  410.130948][ T7470] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.153926][ T7470] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.426618][ T6317] Bluetooth: hci3: command 0x0409 tx timeout
[  410.438528][ T7736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.476247][ T7736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.172451][ T7416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  411.523101][ T7736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.716170][ T7736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.961727][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  412.023281][ T7956] chnl_net:caif_netlink_parms(): no params data found
[  412.217312][ T7995] netlink: 'syz.2.788': attribute type 29 has an invalid length.
[  412.785742][ T7995] netlink: 'syz.2.788': attribute type 29 has an invalid length.
[  413.479259][ T1334] Bluetooth: hci3: command 0x041b tx timeout
[  413.562157][ T8008] loop0: detected capacity change from 0 to 2048
[  413.581447][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.607732][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.630701][ T7956] device bridge_slave_0 entered promiscuous mode
[  413.660700][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.678480][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.697410][ T7956] device bridge_slave_1 entered promiscuous mode
[  413.732374][ T8008] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  414.340408][ T8025] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  414.358658][ T8025] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  414.371547][ T8025] EXT4-fs (loop0): This should not happen!! Data will be lost
[  414.371547][ T8025] 
[  414.381594][ T8025] EXT4-fs (loop0): Total free blocks count 0
[  414.388455][ T8025] EXT4-fs (loop0): Free/Dirty block details
[  414.394621][ T8025] EXT4-fs (loop0): free_blocks=2415919104
[  414.400579][ T8025] EXT4-fs (loop0): dirty_blocks=64
[  414.405896][ T8025] EXT4-fs (loop0): Block reservation details
[  414.412052][ T8025] EXT4-fs (loop0): i_reserved_data_blocks=4
[  415.544505][ T4157] Bluetooth: hci3: command 0x040f tx timeout
[  415.885958][ T7956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.936654][ T4362] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  416.250768][ T4362] EXT4-fs (loop0): This should not happen!! Data will be lost
[  416.250768][ T4362] 
[  416.318668][ T7956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.572921][ T7956] team0: Port device team_slave_0 added
[  416.835741][ T7956] team0: Port device team_slave_1 added
[  416.953782][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_0
[  416.991464][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.079258][ T7956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.596380][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.604089][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.709537][ T8092] loop5: detected capacity change from 0 to 4096
[  417.730726][ T7956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.897559][ T8096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.792'.
[  418.144491][ T7956] device hsr_slave_0 entered promiscuous mode
[  418.581419][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[  418.591461][ T7956] device hsr_slave_1 entered promiscuous mode
[  418.598255][ T7956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  418.637984][ T7956] Cannot create hsr debugfs directory
[  419.075211][ T8111] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  419.250193][ T7956] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  419.266849][ T7956] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  419.286944][ T7956] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  419.325399][ T7956] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  419.409306][ T8123] befs: (nbd2): No write support. Marking filesystem read-only
[  419.435588][  T264] block nbd2: Attempted send on invalid socket
[  419.441852][  T264] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  419.453257][ T8123] befs: (nbd2): unable to read superblock
[  419.558954][ T7956] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.605288][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.801'.
[  419.897025][ T8126] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  420.136796][ T8135] loop0: detected capacity change from 0 to 512
[  420.527431][ T8135] EXT4-fs (loop0): inline encryption not supported
[  420.554499][ T7956] 8021q: adding VLAN 0 to HW filter on device team0
[  420.585794][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  420.604645][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  420.625473][ T8135] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,data_err=abort,inlinecrypt,norecovery,grpid,,errors=continue. Quota mode: writeback.
[  420.754591][ T8135] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  420.854658][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  420.864626][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  420.883774][ T4759] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.890981][ T4759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.201818][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  421.742222][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  421.758049][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  421.835653][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.842757][ T4362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.956667][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  421.965838][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  422.000428][ T7956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  423.303938][ T7956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  423.528083][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  423.564693][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  423.581013][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  423.591252][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  423.617996][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  423.629834][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  423.652127][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  423.675975][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  423.693360][ T8154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.805'.
[  423.790772][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  423.911165][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  425.736165][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  425.747671][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  426.026286][ T7956] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.068667][ T8157] loop7: detected capacity change from 0 to 32768
[  426.256327][ T8157] (syz.7.807,8157,1):ocfs2_read_blocks:239 ERROR: status = -12
[  426.311165][ T8157] (syz.7.807,8157,0):ocfs2_read_virt_blocks:1013 ERROR: status = -12
[  426.321505][ T8157] (syz.7.807,8157,0):ocfs2_read_dir_block:511 ERROR: status = -12
[  426.330197][ T8157] (syz.7.807,8157,0):ocfs2_read_blocks:239 ERROR: status = -12
[  426.373740][ T8157] (syz.7.807,8157,1):ocfs2_read_virt_blocks:1013 ERROR: status = -12
[  426.401108][ T8196] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  426.436820][ T8157] (syz.7.807,8157,1):ocfs2_read_dir_block:511 ERROR: status = -12
[  426.605561][ T8157] (syz.7.807,8157,0):ocfs2_read_blocks:239 ERROR: status = -12
[  426.655413][ T8157] (syz.7.807,8157,0):ocfs2_read_virt_blocks:1013 ERROR: status = -12
[  426.744938][ T8157] (syz.7.807,8157,1):ocfs2_read_dir_block:511 ERROR: status = -12
[  427.065633][ T8157] (syz.7.807,8157,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22
[  427.385697][ T8157] (syz.7.807,8157,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  427.385741][ T8157] (syz.7.807,8157,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22
[  427.543897][ T8157] (syz.7.807,8157,0):ocfs2_initialize_super:2278 ERROR: status = -22
[  427.582860][ T8157] (syz.7.807,8157,0):ocfs2_fill_super:1177 ERROR: status = -22
[  427.610369][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  427.633436][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  428.725106][ T7956] device veth0_vlan entered promiscuous mode
[  429.743664][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  429.752707][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  429.772970][ T7956] device veth1_vlan entered promiscuous mode
[  429.802398][ T7956] device veth0_macvtap entered promiscuous mode
[  429.813216][ T7956] device veth1_macvtap entered promiscuous mode
[  429.840235][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  429.868952][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  429.895678][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  429.912216][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  429.963982][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  429.980389][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.001101][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.034007][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.088203][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.139377][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.265547][ T8239] loop7: detected capacity change from 0 to 40427
[  430.278984][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.289196][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.299803][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.322554][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.350534][ T8245] loop2: detected capacity change from 0 to 164
[  430.354242][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.369255][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.380251][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  430.391743][ T8239] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  430.392657][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  430.399641][ T8239] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  430.568619][ T8239] F2FS-fs (loop7): invalid crc value
[  430.709593][ T8239] F2FS-fs (loop7): Found nat_bits in checkpoint
[  431.206357][ T8239] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  431.214781][ T8239] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  431.217687][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  431.241474][ T8245] iso9660: Corrupted directory entry in block 4 of inode 1792
[  431.288574][ T8256] loop0: detected capacity change from 0 to 64
[  431.305056][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.353558][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.420207][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.441123][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.453929][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.471958][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.483582][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.511786][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.532356][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.569672][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.610401][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.660077][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  431.702390][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  432.457834][ T7956] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.603366][ T7956] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.657350][ T7956] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.673378][ T7956] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.736411][ T4414] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  432.792317][ T4414] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  432.921930][ T8253] loop5: detected capacity change from 0 to 32768
[  432.932365][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.957032][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.014563][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  433.038128][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.149418][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.212644][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  433.629299][ T8253] XFS (loop5): Mounting V5 Filesystem
[  434.225661][ T8253] XFS (loop5): AIL initialisation failed: error -12
[  434.241061][ T8288] loop8: detected capacity change from 0 to 512
[  434.333989][ T8253] XFS (loop5): log mount failed
[  434.746968][ T8288] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002]
[  434.963263][ T8288] System zones: 0-2, 18-18, 34-35
[  435.168715][ T8288] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback.
[  436.244633][ T8288] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  436.517800][ T4414] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.933408][ T4414] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.254818][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.276683][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.734034][ T4414] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.898443][ T4414] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.969102][ T8416] loop8: detected capacity change from 0 to 512
[  443.073925][ T8416] EXT4-fs (loop8): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  443.123861][ T8416] EXT4-fs (loop8): can't mount with both data=journal and dax
[  443.471387][ T8439] syz.5.853 uses obsolete (PF_INET,SOCK_PACKET)
[  444.465508][ T8502] befs: (nbd5): No write support. Marking filesystem read-only
[  444.474835][   T22] block nbd5: Attempted send on invalid socket
[  444.481260][   T22] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  444.492300][ T8502] befs: (nbd5): unable to read superblock
[  447.420112][ T8533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.860'.
[  448.255706][ T8539] 9pnet_virtio: no channels available for device syz
[  449.580112][ T8551] loop5: detected capacity change from 0 to 512
[  449.905843][ T8551] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  450.006253][ T8551] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.335129][ T8572] befs: (nbd0): No write support. Marking filesystem read-only
[  451.603666][  T264] block nbd0: Attempted send on invalid socket
[  451.609992][  T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  452.000028][ T8572] befs: (nbd0): unable to read superblock
[  453.608758][ T4414] device hsr_slave_0 left promiscuous mode
[  454.734730][ T8597] 9pnet_virtio: no channels available for device syz
[  455.168444][ T8598] net_ratelimit: 67 callbacks suppressed
[  455.168464][ T8598] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  455.180587][ T8598] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  455.187241][ T8598] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  455.193645][ T8598] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  455.200185][ T8598] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  455.206602][ T8598] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  455.213120][ T8598] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  455.219644][ T8598] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  455.226825][ T8598] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  455.233211][ T8598] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  455.353826][ T4414] device hsr_slave_1 left promiscuous mode
[  455.602959][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.653486][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.914410][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.013930][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.171942][ T4414] device bridge_slave_1 left promiscuous mode
[  456.234372][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.542590][ T4414] device bridge_slave_0 left promiscuous mode
[  456.566217][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.943894][ T4414] device veth1_macvtap left promiscuous mode
[  456.950055][ T4414] device veth0_macvtap left promiscuous mode
[  456.990677][ T4414] device veth1_vlan left promiscuous mode
[  457.025094][ T4414] device veth0_vlan left promiscuous mode
[  457.521891][ T8622] loop7: detected capacity change from 0 to 512
[  458.346838][ T8622] EXT4-fs (loop7): Invalid want_extra_isize 188
[  461.162400][ T8640] 9pnet_virtio: no channels available for device syz
[  461.723711][ T4414] team0 (unregistering): Port device team_slave_1 removed
[  461.874269][ T4414] team0 (unregistering): Port device team_slave_0 removed
[  462.423996][ T4414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.542245][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.7.888'.
[  462.573114][ T8647] Process accounting resumed
[  462.666542][ T4414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  463.798544][ T4414] bond0 (unregistering): Released all slaves
[  465.533573][ T8678] net_ratelimit: 66 callbacks suppressed
[  465.533594][ T8678] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  465.545727][ T8678] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  465.552380][ T8678] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  465.558802][ T8678] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  465.565475][ T8678] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  465.571894][ T8678] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  465.578528][ T8678] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  465.584991][ T8678] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  465.592367][ T8678] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  465.598822][ T8678] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  466.559873][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.7.888'.
[  468.065228][ T8704] affs: No valid root block on device loop2
[  472.332012][   T26] audit: type=1326 audit(1732353378.307:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.7.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa607727819 code=0x7ffc0000
[  472.499673][   T26] audit: type=1326 audit(1732353378.357:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.7.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fa607727819 code=0x7ffc0000
[  472.752311][   T26] audit: type=1326 audit(1732353378.357:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.7.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa607727819 code=0x7ffc0000
[  473.418416][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.8.916'.
[  476.306965][ T8827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.923'.
[  476.773764][ T4280] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  477.964145][ T4280] usb 9-1: Using ep0 maxpacket: 8
[  477.994539][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'.
[  478.084251][ T4280] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  478.108484][ T4280] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  478.135961][ T4280] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  478.169787][ T4280] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  478.206136][ T4280] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  478.278829][ T4280] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  478.319392][ T4280] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.263962][ T4280] usb 9-1: usb_control_msg returned -32
[  479.270146][ T4280] usbtmc 9-1:16.0: can't read capabilities
[  481.034904][ T4210] usb 9-1: USB disconnect, device number 2
[  481.416989][ T8907] netlink: 32 bytes leftover after parsing attributes in process `syz.7.937'.
[  483.144103][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'.
[  485.368263][ T8951] affs: No valid root block on device loop2
[  489.742012][ T8980] loop2: detected capacity change from 0 to 1024
[  490.266485][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.956'.
[  490.794955][ T8980] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  492.358720][ T8979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  495.166087][ T9041] affs: No valid root block on device loop2
[  495.459116][ T9050] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  495.477067][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.967'.
[  497.780314][ T9069] loop0: detected capacity change from 0 to 1024
[  497.934909][ T9069] hfsplus: unable to parse mount options
[  503.269416][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  503.281600][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  505.370213][ T4157] Bluetooth: hci1: command 0x0406 tx timeout
[  505.580703][ T9189] loop5: detected capacity change from 0 to 512
[  505.663342][ T9189] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  505.689200][ T9189] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  505.728620][ T9189] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  505.748650][ T9189] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  505.773679][ T9189] EXT4-fs (loop5): 1 truncate cleaned up
[  505.787528][ T9189] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  505.986264][ T9189] EXT4-fs (loop5): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpquota,noquota,quota,noload,noload,. Quota mode: writeback.
[  512.558916][   T26] audit: type=1326 audit(1732353418.537:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec171819 code=0x7ffc0000
[  512.587436][ T9250] affs: No valid root block on device loop7
[  512.683577][   T26] audit: type=1326 audit(1732353418.577:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f71ec171819 code=0x7ffc0000
[  512.763540][   T26] audit: type=1326 audit(1732353418.577:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec171819 code=0x7ffc0000
[  512.891867][   T26] audit: type=1326 audit(1732353418.597:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f71ec171819 code=0x7ffc0000
[  513.023077][   T26] audit: type=1326 audit(1732353418.597:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec171819 code=0x7ffc0000
[  518.444931][ T9301] loop0: detected capacity change from 0 to 1024
[  518.612683][ T9301] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  518.814423][ T9309] xt_TCPMSS: Only works on TCP SYN packets
[  518.821376][ T9309] CIFS mount error: No usable UNC path provided in device string!
[  518.821376][ T9309] 
[  518.831459][ T9309] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  519.150936][ T9301] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback.
[  520.006596][   T26] audit: type=1800 audit(1732353425.967:27): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1011" name="bus" dev="loop0" ino=18 res=0 errno=0
[  520.850962][ T9324] affs: No valid root block on device loop5
[  526.275832][ T9377] xt_TCPMSS: Only works on TCP SYN packets
[  526.283013][ T9377] CIFS mount error: No usable UNC path provided in device string!
[  526.283013][ T9377] 
[  526.293225][ T9377] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  528.658339][ T9400] affs: No valid root block on device loop7
[  529.508855][ T9407] loop8: detected capacity change from 0 to 24
[  533.104135][ T9439] device vlan2 entered promiscuous mode
[  533.111131][ T9439] device nlmon0 entered promiscuous mode
[  533.126401][ T9439] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  534.180319][ T9471] xt_TCPMSS: Only works on TCP SYN packets
[  534.205965][ T9471] CIFS mount error: No usable UNC path provided in device string!
[  534.205965][ T9471] 
[  534.843613][ T9471] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  535.074478][ T2317] Bluetooth: hci3: command 0x0406 tx timeout
[  535.941324][ T9487] affs: No valid root block on device loop7
[  536.335893][ T9489] befs: (nbd5): No write support. Marking filesystem read-only
[  536.346902][  T264] block nbd5: Attempted send on invalid socket
[  536.353200][  T264] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  536.364433][ T9489] befs: (nbd5): unable to read superblock
[  539.064797][ T9509] loop7: detected capacity change from 0 to 32768
[  539.143988][ T9509] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.1052 (9509)
[  539.398644][ T9509] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  539.408652][ T9509] BTRFS error (device loop7): superblock checksum mismatch
[  541.014475][ T9535] loop2: detected capacity change from 0 to 1024
[  541.693874][ T9509] BTRFS error (device loop7): open_ctree failed
[  542.081811][ T9554] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  542.955928][ T9554] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  543.154069][  T154] hfsplus: b-tree write err: -5, ino 4
[  543.223612][ T2317] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  543.231962][ T2317] Bluetooth: hci2: Injecting HCI hardware error event
[  543.254011][ T4178] Bluetooth: hci2: hardware error 0x00
[  544.619955][ T9566] loop2: detected capacity change from 0 to 32768
[  544.767465][ T9566] XFS (loop2): Mounting V5 Filesystem
[  545.158815][ T9581] xt_TCPMSS: Only works on TCP SYN packets
[  545.544555][ T9566] XFS (loop2): Ending clean mount
[  545.629718][ T9565] 9pnet: Insufficient options for proto=fd
[  545.938593][ T4166] XFS (loop2): Unmounting Filesystem
[  548.416373][ T9604] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1070'.
[  550.281092][ T9624] loop8: detected capacity change from 0 to 128
[  553.463412][ T9662] befs: (nbd5): No write support. Marking filesystem read-only
[  553.471937][   T22] block nbd5: Attempted send on invalid socket
[  553.478215][   T22] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  553.489279][ T9662] befs: (nbd5): unable to read superblock
[  556.805544][ T9701] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1084'.
[  557.018029][ T9707] 9pnet: Insufficient options for proto=fd
[  557.605650][ T9729] loop2: detected capacity change from 0 to 64
[  557.761286][ T9729] hfs: get root inode failed
[  558.038877][ T9738] loop2: detected capacity change from 0 to 2048
[  558.070023][ T9738] NILFS (loop2): The specified checkpoint is not a snapshot (checkpoint number=2)
[  560.847910][ T9761] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1097'.
[  561.167135][ T9766] 9pnet: Insufficient options for proto=fd
[  562.371063][ T9795] loop2: detected capacity change from 0 to 64
[  562.590559][ T9795] hfs: get root inode failed
[  564.285812][ T9816] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1108'.
[  564.630731][ T9822] loop0: detected capacity change from 0 to 128
[  565.506719][ T9837] 9pnet: Insufficient options for proto=fd
[  566.242156][ T9824] loop2: detected capacity change from 0 to 32768
[  568.094401][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  568.100942][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  568.202104][ T9860] loop0: detected capacity change from 0 to 64
[  569.285550][ T9860] hfs: get root inode failed
[  569.755530][ T9868] loop0: detected capacity change from 0 to 2048
[  569.798665][ T9868] NILFS (loop0): The specified checkpoint is not a snapshot (checkpoint number=2)
[  569.818845][ T9869] loop8: detected capacity change from 0 to 128
[  571.063788][ T9887] device wg2 entered promiscuous mode
[  573.081302][ T9899] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1119'.
[  576.785208][ T9940] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1143'.
[  580.784208][ T9976] device wg2 entered promiscuous mode
[  582.674174][ T9996] loop5: detected capacity change from 0 to 256
[  583.249273][ T9996] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  583.309808][T10006] ubi0: attaching mtd0
[  583.324334][T10006] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71)
[  583.435687][T10006] loop8: detected capacity change from 0 to 4096
[  583.552546][T10006] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  583.628457][T10006] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  584.944687][T10017] loop2: detected capacity change from 0 to 32768
[  585.043936][T10017] 
[  585.043936][T10017]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  585.043936][T10017] 
[  585.550583][ T4166] 
[  585.550583][ T4166]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  585.550583][ T4166] 
[  585.601982][ T4166] 
[  585.601982][ T4166]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  585.601982][ T4166] 
[  585.791566][T10023] affs: No valid root block on device loop8
[  587.380288][T10038] 9pnet_virtio: no channels available for device syz
[  592.312814][T10067] affs: No valid root block on device loop7
[  593.531546][T10075] 9pnet_virtio: no channels available for device syz
[  594.766675][T10082] loop0: detected capacity change from 0 to 32768
[  594.878070][T10082] 
[  594.878070][T10082]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  594.878070][T10082] 
[  599.460323][T10108] affs: No valid root block on device loop8
[  600.156778][ T4168] 
[  600.156778][ T4168]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  600.156778][ T4168] 
[  600.173656][ T4168] 
[  600.173656][ T4168]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  600.173656][ T4168] 
[  600.601137][T10119] 9pnet_virtio: no channels available for device syz
[  602.121582][T10128] loop8: detected capacity change from 0 to 256
[  602.408653][T10128] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  603.710477][T10148] loop5: detected capacity change from 0 to 128
[  603.994592][T10156] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1207'.
[  604.179018][T10158] affs: No valid root block on device loop8
[  605.775525][T10166] 9pnet_virtio: no channels available for device syz
[  606.667085][T10176] befs: (nbd5): No write support. Marking filesystem read-only
[  606.994910][   T22] block nbd5: Attempted send on invalid socket
[  607.003493][   T22] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  607.003592][T10176] befs: (nbd5): unable to read superblock
[  607.570445][T10183] loop8: detected capacity change from 0 to 128
[  607.817298][T10187] loop5: detected capacity change from 0 to 256
[  607.969795][T10187] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  608.273755][T10196] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1218'.
[  608.396436][T10199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1221'.
[  608.646735][T10205] affs: No valid root block on device loop5
[  608.873609][T10207] befs: (nbd0): No write support. Marking filesystem read-only
[  608.881478][  T264] block nbd0: Attempted send on invalid socket
[  608.887818][  T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  608.899335][T10207] befs: (nbd0): unable to read superblock
[  609.395025][T10203] loop2: detected capacity change from 0 to 32768
[  610.163254][T10219] loop8: detected capacity change from 0 to 128
[  610.373314][T10227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1232'.
[  610.795455][T10235] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1233'.
[  611.188426][T10245] loop2: detected capacity change from 0 to 256
[  611.378093][T10246] affs: No valid root block on device loop5
[  611.428623][T10245] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  611.601146][T10251] xt_TCPMSS: Only works on TCP SYN packets
[  611.623108][T10253] loop7: detected capacity change from 0 to 128
[  611.632979][T10251] CIFS mount error: No usable UNC path provided in device string!
[  611.632979][T10251] 
[  611.656300][T10251] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  612.141679][T10258] befs: (nbd2): No write support. Marking filesystem read-only
[  612.149725][   T22] block nbd2: Attempted send on invalid socket
[  612.156309][   T22] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  612.167460][T10258] befs: (nbd2): unable to read superblock
[  612.356467][T10262] net_ratelimit: 66 callbacks suppressed
[  612.356486][T10262] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  612.368708][T10262] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  612.375411][T10262] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  612.381841][T10262] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  612.388646][T10262] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  612.395096][T10262] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  612.402181][T10262] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  612.408656][T10262] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  612.415238][T10262] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  612.421668][T10262] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  612.637929][T10269] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1243'.
[  614.216964][T10275] loop5: detected capacity change from 0 to 128
[  615.187218][T10290] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1249'.
[  615.256239][T10291] device wg2 left promiscuous mode
[  615.313701][T10291] device wg2 entered promiscuous mode
[  616.016411][T10278] loop7: detected capacity change from 0 to 32768
[  616.916967][T10318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1257'.
[  618.571110][T10328] device vlan2 entered promiscuous mode
[  618.592193][T10328] device dummy0 entered promiscuous mode
[  618.632398][T10328] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  618.767419][T10330] 9pnet_virtio: no channels available for device syz
[  619.414193][T10333] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1263'.
[  619.731541][T10340] befs: (nbd7): No write support. Marking filesystem read-only
[  619.743854][   T22] block nbd7: Attempted send on invalid socket
[  619.750182][   T22] blk_update_request: I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  619.771677][T10340] befs: (nbd7): unable to read superblock
[  620.400340][T10348] xt_TCPMSS: Only works on TCP SYN packets
[  620.485064][T10348] CIFS mount error: No usable UNC path provided in device string!
[  620.485064][T10348] 
[  620.571244][T10356] loop7: detected capacity change from 0 to 128
[  620.573259][T10348] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  620.578375][ T4157] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  621.404345][T10363] net_ratelimit: 142 callbacks suppressed
[  621.404365][T10363] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  621.416577][T10363] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  621.423884][T10363] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  621.430293][T10363] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  621.436809][T10363] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  621.443189][T10363] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  621.449693][T10363] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  621.456173][T10363] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  621.462823][T10363] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  621.469346][T10363] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  621.532722][ T4157] usb 3-1: Using ep0 maxpacket: 8
[  621.836147][ T4157] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64
[  621.856552][ T4157] usb 3-1: config 1 interface 0 has no altsetting 0
[  622.311272][T10373] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1273'.
[  622.755417][ T4157] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  622.765441][ T4157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.879722][ T4157] usb 3-1: Product: syz
[  622.884161][ T4157] usb 3-1: Manufacturer: syz
[  622.888902][ T4157] usb 3-1: SerialNumber: syz
[  623.053660][ T4157] usb 3-1: can't set config #1, error -71
[  623.076498][ T4157] usb 3-1: USB disconnect, device number 6
[  623.425575][T10386] loop0: detected capacity change from 0 to 128
[  623.438201][T10387] loop5: detected capacity change from 0 to 736
[  623.821427][T10394] befs: (nbd8): No write support. Marking filesystem read-only
[  623.873370][  T264] block nbd8: Attempted send on invalid socket
[  623.879861][  T264] blk_update_request: I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  623.891716][T10394] befs: (nbd8): unable to read superblock
[  624.084971][T10393] overlayfs: missing 'lowerdir'
[  624.402430][T10387] loop5: detected capacity change from 0 to 4096
[  624.452316][T10387] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  624.753595][T10387] ntfs3: loop5: failed to convert "c46c" to cp775
[  624.802556][T10402] device vlan2 entered promiscuous mode
[  624.822384][T10402] device dummy0 entered promiscuous mode
[  624.837737][T10402] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  625.702852][T10410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1286'.
[  625.787466][T10412] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1287'.
[  626.116706][T10423] loop7: detected capacity change from 0 to 128
[  626.327031][T10421] affs: No valid root block on device loop8
[  626.336436][T10420] xt_TCPMSS: Only works on TCP SYN packets
[  626.342951][T10420] CIFS mount error: No usable UNC path provided in device string!
[  626.342951][T10420] 
[  626.353049][T10420] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  626.562320][T10429] overlayfs: missing 'lowerdir'
[  628.405261][T10442] 9pnet_virtio: no channels available for device syz
[  629.306839][T10448] loop5: detected capacity change from 0 to 736
[  629.579075][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  629.613223][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  630.257606][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1301'.
[  630.277486][T10459] device vlan2 entered promiscuous mode
[  630.310840][T10459] device dummy0 entered promiscuous mode
[  630.443244][T10459] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  630.498850][T10448] loop5: detected capacity change from 0 to 4096
[  630.530263][T10466] overlayfs: missing 'lowerdir'
[  630.590350][T10463] xt_TCPMSS: Only works on TCP SYN packets
[  630.607618][T10448] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  630.631071][T10463] CIFS mount error: No usable UNC path provided in device string!
[  630.631071][T10463] 
[  630.707971][T10463] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  630.869487][T10448] ntfs3: loop5: failed to convert "c46c" to cp775
[  630.890324][T10474] loop7: detected capacity change from 0 to 128
[  632.440418][T10496] loop8: detected capacity change from 0 to 64
[  632.871779][T10502] affs: No valid root block on device loop2
[  632.978632][T10496] hfs: get root inode failed
[  633.763526][T10507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1314'.
[  634.000442][T10509] overlayfs: missing 'lowerdir'
[  634.104337][T10515] loop5: detected capacity change from 0 to 128
[  634.338177][T10517] xt_TCPMSS: Only works on TCP SYN packets
[  634.344952][T10517] CIFS mount error: No usable UNC path provided in device string!
[  634.344952][T10517] 
[  634.355062][T10517] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  634.393933][T10520] loop8: detected capacity change from 0 to 2048
[  634.665766][T10520] NILFS (loop8): The specified checkpoint is not a snapshot (checkpoint number=2)
[  635.129660][T10536] befs: (nbd7): No write support. Marking filesystem read-only
[  635.650502][   T22] block nbd7: Attempted send on invalid socket
[  635.656781][   T22] blk_update_request: I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  635.667684][T10536] befs: (nbd7): unable to read superblock
[  635.687291][T10538] loop0: detected capacity change from 0 to 736
[  636.175664][T10544] affs: No valid root block on device loop7
[  636.972248][T10550] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1327'.
[  636.988848][T10549] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  636.992425][T10538] loop0: detected capacity change from 0 to 4096
[  637.083154][T10538] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  637.537279][T10538] ntfs3: loop0: failed to convert "c46c" to cp775
[  637.842650][T10567] xt_TCPMSS: Only works on TCP SYN packets
[  637.849824][T10567] CIFS mount error: No usable UNC path provided in device string!
[  637.849824][T10567] 
[  637.859937][T10567] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  638.200282][T10573] loop8: detected capacity change from 0 to 128
[  638.512053][T10576] affs: No valid root block on device loop7
[  639.995311][T10587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1341'.
[  640.736552][T10591] net_ratelimit: 66 callbacks suppressed
[  640.736572][T10591] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  640.748716][T10591] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  640.755446][T10591] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  640.761863][T10591] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  640.769064][T10591] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  640.775506][T10591] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  640.782102][T10591] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  640.788529][T10591] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  640.795117][T10591] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  640.801576][T10591] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  641.283028][T10607] loop2: detected capacity change from 0 to 736
[  641.449835][T10609] xt_TCPMSS: Only works on TCP SYN packets
[  641.457756][T10609] CIFS mount error: No usable UNC path provided in device string!
[  641.457756][T10609] 
[  641.467889][T10609] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  641.910049][T10614] affs: No valid root block on device loop5
[  643.360357][T10621] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1352'.
[  643.861981][T10629] loop8: detected capacity change from 0 to 256
[  644.088389][T10629] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  645.071284][T10658] loop5: detected capacity change from 0 to 64
[  646.833155][T10670] loop5: detected capacity change from 0 to 128
[  648.582792][T10725] befs: (nbd5): No write support. Marking filesystem read-only
[  648.592104][   T22] block nbd5: Attempted send on invalid socket
[  648.599150][   T22] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  648.611761][T10725] befs: (nbd5): unable to read superblock
[  650.877616][T10738] affs: No valid root block on device loop5
[  652.118347][T10751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1376'.
[  653.733907][T10764] loop7: detected capacity change from 0 to 1024
[  654.057976][T10764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  654.495181][T10769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  656.782345][    C1] 
[  656.785352][    C1] =============================
[  656.790231][    C1] WARNING: suspicious RCU usage
[  656.795205][    C1] 5.15.173-syzkaller #0 Not tainted
[  656.800426][    C1] -----------------------------
[  656.805336][    C1] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage!
[  656.813707][    C1] 
[  656.813707][    C1] other info that might help us debug this:
[  656.813707][    C1] 
[  656.823985][    C1] 
[  656.823985][    C1] rcu_scheduler_active = 2, debug_locks = 1
[  656.832065][    C1] 4 locks held by ksoftirqd/1/20:
[  656.837133][    C1]  #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  656.846533][    C1]  #1: ffff88805f4a1948 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: net_tx_action+0x73a/0x8e0
[  656.858632][    C1]  #2: ffff88805f4a1908 (&sch->q.lock){+.-.}-{2:2}, at: sch_direct_xmit+0x370/0x5e0
[  656.868119][    C1]  #3: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  656.877547][    C1] 
[  656.877547][    C1] stack backtrace:
[  656.883478][    C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.173-syzkaller #0
[  656.891563][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  656.901671][    C1] Call Trace:
[  656.904981][    C1]  <TASK>
[  656.907951][    C1]  dump_stack_lvl+0x1e3/0x2d0
[  656.912674][    C1]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  656.918343][    C1]  ? lockdep_rcu_suspicious+0x158/0x1c0
[  656.923918][    C1]  qdisc_lookup+0xa8/0x630
[  656.928363][    C1]  qdisc_tree_reduce_backlog+0x212/0x4f0
[  656.934027][    C1]  codel_qdisc_dequeue+0x1546/0x21d0
[  656.939336][    C1]  ? __rwlock_init+0x140/0x140
[  656.944136][    C1]  qdisc_peek_dequeued+0x6f/0x220
[  656.949184][    C1]  tbf_dequeue+0x80/0xd60
[  656.953546][    C1]  __qdisc_run+0x253/0x1e90
[  656.958088][    C1]  qdisc_run+0x10d/0x320
[  656.962355][    C1]  net_tx_action+0x73a/0x8e0
[  656.966998][    C1]  ? detach_timer+0x2f0/0x2f0
[  656.971694][    C1]  ? process_backlog+0x7f0/0x7f0
[  656.976662][    C1]  handle_softirqs+0x3a7/0x930
[  656.981447][    C1]  ? run_ksoftirqd+0xc6/0x120
[  656.986155][    C1]  ? do_softirq+0x240/0x240
[  656.990671][    C1]  ? preempt_schedule_common+0xa6/0xd0
[  656.996160][    C1]  ? run_ksoftirqd+0xa3/0x120
[  657.000867][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  657.006190][    C1]  run_ksoftirqd+0xc6/0x120
[  657.010728][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  657.015957][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  657.021183][    C1]  smpboot_thread_fn+0x51b/0x9d0
[  657.026312][    C1]  kthread+0x3f6/0x4f0
[  657.030411][    C1]  ? cpu_report_death+0x180/0x180
[  657.035469][    C1]  ? kthread_blkcg+0xd0/0xd0
[  657.040092][    C1]  ret_from_fork+0x1f/0x30
[  657.044556][    C1]  </TASK>