last executing test programs:

3m35.012047165s ago: executing program 3 (id=104):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
writev(0xffffffffffffffff, 0x0, 0x0)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, r6, 0x607, 0x270bd09, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8480)

3m29.821469255s ago: executing program 3 (id=112):
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)

3m25.184225086s ago: executing program 3 (id=119):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
getdents64(r0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="7684f222bdac5555d8f51a8fb1fe230b889c89ce4f"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

3m15.299302767s ago: executing program 3 (id=133):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x24e, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x400c00, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r4 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xb1b1, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r7, 0x0, 0x0, 0x0, 0x12001, 0x1})
io_uring_enter(r4, 0x5d62, 0x0, 0x0, 0x0, 0x0)

3m12.538917903s ago: executing program 3 (id=139):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
accept4$netrom(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @default}, [@netrom, @remote, @default, @netrom, @default, @rose, @netrom, @default]}, &(0x7f0000000440)=0x48, 0x80000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r4}, 0x18)
socket$tipc(0x1e, 0x5, 0x0)
ioprio_get$uid(0x3, 0xee01)
io_setup(0x8, &(0x7f0000004200))
r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}})
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)

3m10.039394247s ago: executing program 3 (id=143):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20)
fadvise64(r4, 0x54056, 0x0, 0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10003, 0x0)
connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)

2m54.154484934s ago: executing program 32 (id=143):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20)
fadvise64(r4, 0x54056, 0x0, 0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10003, 0x0)
connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)

24.156518403s ago: executing program 2 (id=395):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00', <r1=>0x0})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000000540)=@can={0x1d, r0}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)="b35faeb48f9281", 0x7}], 0x1, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}}, {{&(0x7f0000000880)=@can={0x1d, r1}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}, {{&(0x7f0000001280)=@phonet={0x23, 0x10, 0x6, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001300)="3801c7055bc004e54776290ebd37be2f2121f4d587369d4e31e3348c4b42bc45c95aa8ad9f5817874dd3f5aa2f7799ad5cc6fe82a49c5de87f37837f59f3a06b6bc880", 0x43}, {&(0x7f0000001380)="39872f10a2509fa452cdecc681e060e165cbdc5e24b69e57", 0x18}, {&(0x7f00000013c0)="023f29f33a159921a0d7c7f518a2bb138b424b0e12bf00e839c7e6e1435bfa993efe2f63d2a53e428cea85898ccd85d21d67aaa8ad161a719891ff1ad7e95b589cd3fc7c34d615093011d6d1ca070441d49c1a39e83d0c1369dff96135f882544194068d5a97265ff9a5a6d857570038416a36a9e2767305f363d41f87a7f18a281e7cb72b231cd66d18db78b525d5a71afaa68c1637fe18a0a85865078ac313976f4c03a09d8679cc1332d9a891236977a9", 0xb2}, {&(0x7f0000001480)="2c5c17a19480e6ceedb52dc7ae31bf69ef51c575d2598e08c61513acdd0f760cefcd7b46ec24797420d861101675fd1e62a18dcb575f184f010da5f8eff01bbd8085ec607099811f796e4a2067b5bd4d992c74f5dd490c39913d4da7b3f9ea000a2b54dc1723c862abac44c420be39507f95433c167e7af2aabd50a65e06d0452ed67bb9f3a98a3adc04f34b9299088a80fd0e27d3bb12c3fe1d1653247b5284e2834bd9576cf39281b3741ea75047983af27073cc482ae9780bc5b72c35dbc67c4be3840bb0f9ffa6146e32476cd631a7022d7cd3a802d216d9cde101a09e950836253427738b6b8d8d03", 0xeb}], 0x4}}, {{&(0x7f0000001640)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0xe, 0x9, "335d9fe48f6347e961aa133b50a0042b4939cd3d6fa2b06c5f18c6cdc92f72797cffc323878cb47db5bf1be8fa207da40736384f815b8802d4ab54b0f40004", 0x24}, 0x80, &(0x7f0000001800)=[{&(0x7f00000016c0)="a79e520b7e7c6000411f055203ece6fa", 0x10}, {0x0}, {&(0x7f0000003840)="02c3bc85809949b73a0fe1e0a4c500acec3b759c215d1b98437a047645666e6211516708425d44f23359cf28cc681698c30abd18003fc9240c228503dd4f2082c03c66db7dc35e827022ae5920f3036b2d43e533c0dd619fe965dab875c671c3ed8969c19801dbd3fe0ed3658b79c4a80f3a315f9b17fa5f733697d2ba5bead1167d650b90ddc4b0d0d4cf024fe2d25d68fceb4409f084c3291299d25b82c50e0db2e47f03edb06767e9aa6e907b4106d145b0ba5938eb13a068f985fc422180d26fc51f6f92132ec0175d3fe016bd83c50f39f836e027346dbffb4b87b29513a1b4c2c0da421c841ab07ff8", 0xec}, {&(0x7f0000003940)="51097f00d468a39ca66b983deff0d24d0f05fd376c56dd1ce54343ec6e384e731cc42431a13c3c0272abc3adcf8094d64359a9075fb004907937280a68be2ec819754da1080c6da67dbf71c972d938c72e5e90d4ed8a7abbc9e730a911b75a05e09ea936865822cb94babfa40ae223c8aebfdd38e638b68b5bbd91bd8bf91029926b8bdc75401561db151e132668775fbff01b4ca3ad7938f96b02f30e912d06b13bd3", 0xa3}], 0x4}}], 0x4, 0x4000)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000ec2800000034000000040000000000000014000000000000002900000034000000fdffffff00000000d0000000000000002900000004000000041600000000000007100000000102099f000800000000000000fe53f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b005008d3894180b6aa7527a0730000000010a7a018005000000000000000400000000000000060000000000000004000000000000000b0000000000000005020a7e05020bf4c910fc0200000000000000000000000000009300000000140000000000000029000000340000000000000000000000f80000000000000029000000360000005e1b000000000000ff2350d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b00010000010001000738000000030c00ff0f020000000000000066090000000000000700000000000000f7ffffffffffffff010000000000000001000000000000000854c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab071800000003040307000000000000000000008000000000000001000000000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x280}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

22.540094834s ago: executing program 0 (id=396):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
fcntl$setown(r3, 0x8, r0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18)

22.539228563s ago: executing program 5 (id=406):
socketpair(0x10, 0x1, 0x2, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
setsockopt$inet6_buf(r0, 0x29, 0xf, &(0x7f00000082c0)="919112cddef2af85a5b0560fa2f3030f82c4944f5df2983bb8eb506358d26875188a3c59c30b744e5415c5335d63596fe962b5fdea93ee92b5ff5659d598a2af7554a6dbf05d973a64f55984b0b8a667ab0f1b413b274319704185038efdc27981376ffa20775d64982f3823e4de210f638f6a8bfcd3edbb67b4a0", 0x7b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000003c0)={0x80000001, 0x145927ac, 0x8, 0x2, 0x10000})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000400)="8a", 0x1}], 0x1)
r7 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004})
readv(r7, &(0x7f0000000040)=[{&(0x7f0000000100)=""/150, 0x96}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r5}, 0x50)
socket$inet6_sctp(0xa, 0x5, 0x84)

20.40149362s ago: executing program 4 (id=397):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x300)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$getenv(0x4201, r1, 0x8, 0x0)
read$msr(r4, &(0x7f0000000780)=""/102400, 0x19000)
r5 = fanotify_init(0x8, 0x80000)
write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[], 0x18)
r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r8 = socket(0x18, 0x800, 0x0)
connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e)
sendfile(r8, r7, 0x0, 0x8)

20.400598336s ago: executing program 0 (id=408):
socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x6, &(0x7f0000001380))
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$keyring(&(0x7f0000000400), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000040)={0x8, @capture={0x0, 0x0, {0x7, 0x4}}})
syz_clone(0x8c229300, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04"], 0x20)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000440)='s\x01\b\x00\x00e\xa36 G,\xb4\x8c\x15\x98yW\xbb^\xf1\f>\x93\xa4\x10\x83M\r(\x82R&\x85\x02\x99\x9a.61;\x7fLKp~\b\fT;\xd1\x03q\xee\x82\xf1F\xf2\xdcAu\xb0&)G\x02K\x14\ff{\x96n$', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000180)='\x00V', 0x2, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)

20.399665787s ago: executing program 2 (id=399):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x4bf, &(0x7f0000000540)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt(r2, 0x200000000114, 0x2721, 0x0, 0x0)
fchown(r1, 0x0, 0xee01)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x8c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=""/192, &(0x7f0000000140)=0xc0)

20.399488101s ago: executing program 5 (id=400):
syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), 0xffffffffffffffff)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_pidfd_open(r1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4}, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x80000000}, 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0})

19.200201971s ago: executing program 5 (id=401):
futex(0x0, 0x9, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x1)
syz_create_resource$binfmt(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x80011f, 0xffffffff, 0x22, 0x0, 0x1101, 0xff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r7 = dup2(r6, r6)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r6, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0)
fcntl$dupfd(r5, 0x406, r4)

17.09246623s ago: executing program 0 (id=403):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000)
setreuid(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000140)={0x10000, 0x5, 0x0, 0x7, 0x200000000000000, 0x6})
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x8})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94)
r4 = syz_pidfd_open(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
setns(r4, 0x34020000)

17.092196965s ago: executing program 4 (id=404):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00'})
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000940)={0x1, 0x0, &(0x7f0000000900)=[0x0]})
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

16.894585086s ago: executing program 2 (id=405):
r0 = socket(0x80000000000000a, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000540)={0x7fffffff, r0, 0x2})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027dabfc54c2c0e1f532d95a1a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00"/397], 0x18c)
r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x10000, 0x87)
unlinkat(r5, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unshare(0x1e028180)
semctl$SETALL(0x0, 0x0, 0x14, 0x0)
ioctl$TCSETS(r1, 0x5402, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
semctl$SETVAL(0x0, 0x2, 0x10, 0x0)
fsopen(&(0x7f0000000240)='nfsd\x00', 0x1)

15.377758667s ago: executing program 0 (id=409):
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
timer_delete(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
listen(r4, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80)
getdents64(r5, &(0x7f0000000000)=""/39, 0x27)

13.293351971s ago: executing program 0 (id=411):
write$dsp(0xffffffffffffffff, &(0x7f00000000c0)="0046cb17", 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
r4 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, 0x0, 0x6)
mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000400)={0x0, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, 0x0)
r7 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, 0x0, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

13.092383009s ago: executing program 1 (id=412):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x7, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000080)='./file3\x00', 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1, 0x9e, &(0x7f0000000140)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=")
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f00005ac000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000000)="0f013e36400f797f460f01f843d25b0a0f015e000f38092e66450f169200000100b9050900000f323e650f78790ec4e17bf000", 0x33}], 0x1, 0x5, &(0x7f0000000640)=[@cr4={0x1, 0x10004}, @efer={0x2, 0x101}], 0x2)
fcntl$setlease(r5, 0x400, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10)
syz_init_net_socket$ax25(0x3, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000003040)='./file1\x00', 0x1200001, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="1a6c0af07c3d", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp1250,codepage=cp1251,\x00'], 0x2, 0x342, &(0x7f0000000100)="$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")

12.160214385s ago: executing program 1 (id=413):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x400001, 0x6)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = socket$inet(0x2, 0x3, 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]})
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc)
bind$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe)
listen(r4, 0xa1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000c80)='syzkaller\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

11.198728461s ago: executing program 4 (id=414):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0)
mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0xdffaa000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x14})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0)
readv(r4, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1)

9.991975935s ago: executing program 1 (id=415):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r0 = getpgid(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$udambuf(0xffffff9c, 0x0, 0x2)
process_vm_readv(r0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/237, 0xed}, {&(0x7f00000007c0)=""/234, 0xea}, {0x0}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f00000008c0)=""/245, 0xf5}], 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffa, 0x4400f527, &(0x7f0000000040))
ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDGKBTYPE(r3, 0x4b48, &(0x7f0000000040))
fcntl$setown(r3, 0x8, r0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x10183, 0x0)
socket$alg(0x26, 0x5, 0x0)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet(0x2, 0x80001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.925394529s ago: executing program 5 (id=416):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_submit(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window], 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

8.635248968s ago: executing program 4 (id=417):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003c00010325bd7000fcffffff05000000040003"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f0000000580)="b21e974f7491b93db16fe8d3814b2823ac6c9a03dabd1dc402f6b124643efa0852217ec84088f9baf06b7fe9f2636753af7ec77d4c754817d6b7b9d5586847ed270c", 0x42}, {&(0x7f00000000c0)="8535417d7f026837642d1e1e8533aa8f4c45ebd33fe5b2a846b4e10204495a635725491d1ba12916d75d58a474c8ed98e6539c704c77863f525b8b8a354c63148034968be98ea12d560e1f23a141273ed37edb82b09a9f4508ce707dfbaab6af4d0fa9a9ff359f34f54b2e08c4075d", 0x6f}], 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12)
io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0)
exit(0x0)
r6 = epoll_create(0x20000000)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0x10000000})
timer_create(0x3, 0x0, &(0x7f0000044000))

6.665673754s ago: executing program 5 (id=418):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})

6.620561059s ago: executing program 2 (id=419):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$eJzs3U9sHFcdB/DvbJx1NqDEbdM0IKRajVRBIxI7q5IgITUghHKIUFQuvVqJ01hx0spxkVshsgEKEidOqAcORcgcekIIIZUTopyRkLhw8j0SNw45AItmdna9tjeO3cRZt/18pPF7s2/ee7/5Zf7srh1NgM+si6/lYCdFLp66tFKur622F9dW2zf79SSTSRrJRK9I0UqKj5IL6S35QvliPVzxoHlevvdhMfHeB+3e2kS9VNs3tuu3xcgtO8mhwcqBJNO96n92POyW8aqlGufK+ng7MDnitWIQd5mwk/3Ewbh1t+isNzYe2n3n5y2wb93p3Te3mEoOp3d3re5s9dXh4VeG8Tg6VN/22tTZ+1gAAABgr438LD/s6P3cz0qOPJlwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NOh6D0zsFU/N7/RK1/NdIr+8/+bQ8/Ub4453Ef07rWqePXouAMBAAAAAAAAgEfy/P3cz0qO9Ne7RfU7/xeqlWPVz8/lrdzOfJZyOiuZy3KWs5TZJFNDAzVX5paXl2a39vxlyp7dbvdO3fPsoGf/rwfKnmc3xtXZHOiovzTYshEAAAAAAAAAfGb9KBfXf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7QZEc6BXVcqxfn0pjIsmhJM1ierB5c6zBPgZ/HncAAAAAsPdadXmk+F+v0i2qz/zHq8/9h/JWbmU5C1nOYuZztfouoPepv/H3TntxbbV9s1y2DvzNf+0qjmrE9L57GD3zTLXFs4MeF/OdfC+nMp3LWcpCvp+5LGc+0/l2VZtLkan624uptdVW+rFujffChrXLm2N7fqhexneiiqSVa1moYjudK81+6I16uxNDs/2xmWya8W6ZneKV2g5zdLUuyz36RV3uD1PVnh8cZGSmzn2ZjaeG874197s8TjbPNJvG4DuoY2ur7SLp1KubZ/pYOT9cl2Wuf7q3Od/lV2kbM9H5ebnWP/qOb5/z5Cv/+Mvl641bN65fu31q/xxGH9PmY6I9lInndpSJxTITnUfIxKFHif/xadbZ6F1Fd3e1fKHqeyQL+W7eyNXM51xmMpvzmcnXczbtnB3K67Pb57U61xq7O9dOfrmulPeknw3dm56YyQc1lHl9aiivw1e6qapt+JX1LD29gywVzYzO0j9HhjLxxbpSzvHjoTvO+G3IxGSqa3M/ume2z8Sv/9tNcnvx1o2l63Nv7nC+F+uyPG3f3Xht/s1j2aHdq3e3PF6eLv+x0rttDB8dZdsz/bYNR85s1XZs0LbxPtdspjqfe20PO1PLkY7fHTVSr+25kbO0q7YTQ20b3uXkjSwO3oUAsI8dfulws3Wv9bfW+62ftK63Lh361uT5yS81c/CvE3868LvGbxvfKF7K+/lhjow7UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4/fY7N+YWF+eX9mEljcc84N2RTf1U9F5p7o99/6RWJrc7on6fZJvuzXHE3EqyL1KXiScw12RGNF0avNJKGoN4ktzYJw+4A/bCmeWbb565/fY7X124Off6/Ovzt86eP/fKufbXZu+cubawOD/T+znuKIG9sP42YNyRAAAAAAAAAAAAADv1JP57w4hpi84Y9hUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ZLr4Wg52UmR25vRMub622l4sl359fcuJJI0kxQ+S4qPkQnpLpoaGK4bHLrrr9ZfvffirF9/7oL0+1kR/+8amfn/4d7e7y73o1Eumkxyoy6RZN7ce0G1yR+NdKcvPrzfsXjHYwzJhJ/uJg3H7fwAAAP//VngE7g==")
syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x161300)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xa000032a)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000100)='./file4\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x6)
link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000180)='./file3\x00', 0x200)
rename(&(0x7f0000000b40)='./file3\x00', &(0x7f0000000b00)='./file1\x00')

6.614500553s ago: executing program 1 (id=420):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x16d}], 0x1}}], 0x1, 0x400c0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

5.041774904s ago: executing program 5 (id=421):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2)
r1 = syz_io_uring_setup(0x10f, 0x0, &(0x7f00000003c0)=<r2=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(r1, 0x47f5, 0x2000000, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0)
creat(0x0, 0xecf86c37d53049cc)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x400c0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

3.77729015s ago: executing program 4 (id=422):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prlimit64(r2, 0xa, &(0x7f00000000c0)={0xd35, 0x6}, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfff7, 0xe, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x995, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x101, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0xfc74, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0xff, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xd064, 0x10000005, 0x4, 0x10000, 0xd, 0x0, 0x9, 0x10, 0x4000e, 0x9, 0x87, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7b, 0xa, 0x0, 0xffd, 0xf1, 0x5a56, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x6, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7e2, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x7, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0002, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/\xd15)\xeatn\xa3\x88\x13i\xb6\x7ft\x95\xd7\x01o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x94\x00\x00\x00\x00\x00\x00\x00g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xef\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xba\xec\x99@\xd2\t\n\xb1o', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
socket$netlink(0x10, 0x3, 0x4)

3.710139264s ago: executing program 1 (id=423):
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000a80)=0xf)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x38, 0x7d41d458b8e68aa9, 0x70bd2b, 0x25dfdbfc, {0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)
ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000a40)=0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d8, 0x308, 0x220, 0x0, 0x308, 0x4d8, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x140, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x20}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x838)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x1]}})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x5)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x20000000, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}]}, 0x3c}}, 0x42880)
r6 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, 0x0)
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182)
ioctl$CEC_RECEIVE(r8, 0xc0386106, &(0x7f0000000000)={0x4, 0x7, 0x80005, 0x0, 0x0, 0x101, '&\x00', 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe})

2.846910997s ago: executing program 2 (id=424):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000480)=0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)={0x1, 0x0, @b}, 0x48, r6)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x13)
ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000080)=0x1)
r8 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x2)
r9 = getpgid(0x0)
fcntl$setown(r8, 0x8, r9)

1.858639871s ago: executing program 4 (id=425):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)

629.778306ms ago: executing program 2 (id=426):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0x2000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e1d, @broadcast}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a01010000000000000000"], 0x6c}}, 0x880)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYBLOB, @ANYRES32=r3, @ANYRESDEC=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x1)

452.873586ms ago: executing program 0 (id=427):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(0xffffffffffffffff, 0x0, 0x78)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007)
io_uring_setup(0x4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0xa7ff)

0s ago: executing program 1 (id=428):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_submit(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x3, 0x401}, @window], 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts.
[   65.293753][ T5809] cgroup: Unknown subsys name 'net'
[   65.436373][ T5809] cgroup: Unknown subsys name 'cpuset'
[   65.444541][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.752975][ T5809] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.523436][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.543582][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.551664][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.559624][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.567369][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.628999][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.636903][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.644499][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.652602][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.660200][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.679888][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.688032][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.695497][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.703682][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.711302][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.750924][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.774798][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.783070][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.791572][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.799191][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.807462][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.814930][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   70.824598][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   70.831800][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.839950][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.261781][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[   71.268470][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[   71.317302][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   71.496442][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   71.522392][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   71.659991][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.667754][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.675822][ T5819] bridge_slave_0: entered allmulticast mode
[   71.682813][ T5819] bridge_slave_0: entered promiscuous mode
[   71.725031][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.732149][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.739541][ T5819] bridge_slave_1: entered allmulticast mode
[   71.746589][ T5819] bridge_slave_1: entered promiscuous mode
[   71.754051][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   71.770113][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   71.876719][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.884256][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.891370][ T5828] bridge_slave_0: entered allmulticast mode
[   71.898758][ T5828] bridge_slave_0: entered promiscuous mode
[   71.909232][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.929272][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.936566][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.943884][ T5826] bridge_slave_0: entered allmulticast mode
[   71.950833][ T5826] bridge_slave_0: entered promiscuous mode
[   71.975282][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.982386][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.989926][ T5828] bridge_slave_1: entered allmulticast mode
[   71.997260][ T5828] bridge_slave_1: entered promiscuous mode
[   72.005892][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.019204][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.026400][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.033662][ T5826] bridge_slave_1: entered allmulticast mode
[   72.040706][ T5826] bridge_slave_1: entered promiscuous mode
[   72.142490][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.154462][ T5819] team0: Port device team_slave_0 added
[   72.173311][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.195384][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.206169][ T5819] team0: Port device team_slave_1 added
[   72.224140][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.233510][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.240670][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.248058][ T5824] bridge_slave_0: entered allmulticast mode
[   72.255195][ T5824] bridge_slave_0: entered promiscuous mode
[   72.285137][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.292278][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.299759][ T5829] bridge_slave_0: entered allmulticast mode
[   72.307010][ T5829] bridge_slave_0: entered promiscuous mode
[   72.325810][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.332982][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.340451][ T5824] bridge_slave_1: entered allmulticast mode
[   72.347601][ T5824] bridge_slave_1: entered promiscuous mode
[   72.377917][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.385236][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.392469][ T5829] bridge_slave_1: entered allmulticast mode
[   72.399984][ T5829] bridge_slave_1: entered promiscuous mode
[   72.431211][ T5828] team0: Port device team_slave_0 added
[   72.438270][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.445250][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.471149][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.493914][ T5826] team0: Port device team_slave_0 added
[   72.512239][ T5828] team0: Port device team_slave_1 added
[   72.518774][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.525787][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.552219][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.574347][ T5826] team0: Port device team_slave_1 added
[   72.582296][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.609721][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.619814][   T51] Bluetooth: hci0: command tx timeout
[   72.634109][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.654031][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.660978][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.687695][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.698714][   T51] Bluetooth: hci1: command tx timeout
[   72.701828][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.749820][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.756877][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.782865][   T51] Bluetooth: hci2: command tx timeout
[   72.789030][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.800815][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.807902][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.833893][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.853846][   T51] Bluetooth: hci3: command tx timeout
[   72.888156][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.895174][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.921634][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.933713][   T51] Bluetooth: hci4: command tx timeout
[   72.935143][ T5824] team0: Port device team_slave_0 added
[   72.957748][ T5829] team0: Port device team_slave_0 added
[   72.968951][ T5819] hsr_slave_0: entered promiscuous mode
[   72.975466][ T5819] hsr_slave_1: entered promiscuous mode
[   72.993838][ T5824] team0: Port device team_slave_1 added
[   73.001051][ T5829] team0: Port device team_slave_1 added
[   73.106531][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.113696][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.140064][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.161192][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.168156][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.194402][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.222627][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.229652][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.256275][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.273059][ T5828] hsr_slave_0: entered promiscuous mode
[   73.279350][ T5828] hsr_slave_1: entered promiscuous mode
[   73.285529][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   73.291306][ T5828] Cannot create hsr debugfs directory
[   73.297766][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.304801][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.331656][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.353831][ T5826] hsr_slave_0: entered promiscuous mode
[   73.360117][ T5826] hsr_slave_1: entered promiscuous mode
[   73.366600][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   73.372321][ T5826] Cannot create hsr debugfs directory
[   73.558755][ T5829] hsr_slave_0: entered promiscuous mode
[   73.565460][ T5829] hsr_slave_1: entered promiscuous mode
[   73.571509][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   73.577318][ T5829] Cannot create hsr debugfs directory
[   73.592241][ T5824] hsr_slave_0: entered promiscuous mode
[   73.598549][ T5824] hsr_slave_1: entered promiscuous mode
[   73.605078][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   73.610804][ T5824] Cannot create hsr debugfs directory
[   73.977029][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.002203][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.036959][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.059338][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.131415][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.152289][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.179055][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.191609][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.269258][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   74.280415][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.292104][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.317527][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.432912][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.448571][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.458716][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.469600][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.558842][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.636357][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.649237][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.660605][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.680770][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.694322][   T51] Bluetooth: hci0: command tx timeout
[   74.718331][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   74.740881][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.753760][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.761034][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.774092][   T51] Bluetooth: hci1: command tx timeout
[   74.800588][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.807766][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.841274][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   74.853632][   T51] Bluetooth: hci2: command tx timeout
[   74.881329][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.888468][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.930059][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.937189][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.946052][   T51] Bluetooth: hci3: command tx timeout
[   74.964340][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.989783][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.013886][   T51] Bluetooth: hci4: command tx timeout
[   75.059777][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   75.078848][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   75.100899][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.108088][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.131451][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.138666][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.174570][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.181726][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.216837][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.229725][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.236913][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.368441][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   75.429216][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.436431][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.507267][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.514414][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.537365][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.566823][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.730639][ T5819] veth0_vlan: entered promiscuous mode
[   75.844749][ T5819] veth1_vlan: entered promiscuous mode
[   75.859713][ T5828] veth0_vlan: entered promiscuous mode
[   75.911852][ T5828] veth1_vlan: entered promiscuous mode
[   75.947700][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.972726][ T5819] veth0_macvtap: entered promiscuous mode
[   76.017932][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.042362][ T5819] veth1_macvtap: entered promiscuous mode
[   76.082387][ T5828] veth0_macvtap: entered promiscuous mode
[   76.116926][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.135549][ T5828] veth1_macvtap: entered promiscuous mode
[   76.177470][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.217645][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.252254][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.269208][ T1317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.279324][ T1317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.299008][ T1317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.314467][ T1317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.327734][ T5829] veth0_vlan: entered promiscuous mode
[   76.338480][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.379119][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.405419][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.417251][ T5829] veth1_vlan: entered promiscuous mode
[   76.426122][ T5824] veth0_vlan: entered promiscuous mode
[   76.432001][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.456611][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.536087][ T5824] veth1_vlan: entered promiscuous mode
[   76.545947][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.554122][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.635189][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.644566][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.665742][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.676586][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.679101][ T5829] veth0_macvtap: entered promiscuous mode
[   76.730594][ T5826] veth0_vlan: entered promiscuous mode
[   76.741569][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.746059][ T5829] veth1_macvtap: entered promiscuous mode
[   76.755226][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.773837][   T51] Bluetooth: hci0: command tx timeout
[   76.785954][ T5824] veth0_macvtap: entered promiscuous mode
[   76.799040][ T5826] veth1_vlan: entered promiscuous mode
[   76.800967][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.829050][ T5824] veth1_macvtap: entered promiscuous mode
[   76.850401][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.858752][   T51] Bluetooth: hci1: command tx timeout
[   76.934715][   T51] Bluetooth: hci2: command tx timeout
[   76.936419][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.998556][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.012540][   T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.023732][   T51] Bluetooth: hci3: command tx timeout
[   77.026164][ T5934] process 'syz.1.2' launched '/dev/fd/6' with NULL argv: empty string added
[   77.050929][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.123922][   T51] Bluetooth: hci4: command tx timeout
[   77.193303][   T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.272939][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   77.477712][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   77.682746][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   77.785051][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   77.793769][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   78.003056][ T5939] overlayfs: statfs failed on './file0'
[   78.272538][ T5941] loop1: detected capacity change from 0 to 4096
[   79.001379][ T5833] Bluetooth: hci1: command tx timeout
[   79.006846][   T51] Bluetooth: hci0: command tx timeout
[   79.014326][ T5833] Bluetooth: hci2: command tx timeout
[   79.062955][ T5941] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   79.096492][ T5833] Bluetooth: hci3: command tx timeout
[   79.175139][ T5833] Bluetooth: hci4: command tx timeout
[   79.320566][ T5941] ntfs3(loop1): ino=18, mi_enum_attr
[   79.327073][ T5941] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   79.492405][ T5102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.065181][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.201035][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.263275][ T5826] veth0_macvtap: entered promiscuous mode
[   81.573790][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   82.143795][ T5826] veth1_macvtap: entered promiscuous mode
[   82.495336][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   82.597790][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   82.700196][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   83.147894][ T5102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.399638][ T5102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.484520][ T5102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.752718][ T5102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.949136][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.368754][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.400893][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.425434][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.557757][ T5966] Illegal XDP return value 3911817258 on prog  (id 8) dev N/A, expect packet loss!
[   87.159560][  T931] cfg80211: failed to load regulatory.db
[   87.187559][ T5102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.292046][ T5102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.520036][ T5102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.586752][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.623289][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.655207][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.696278][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.730652][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.851413][ T4559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.893556][ T4559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.960384][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.984181][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.992603][ T5102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.012987][ T5102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.638563][ T5991] use of bytesused == 0 is deprecated and will be removed in the future,
[   89.647271][ T5991] use the actual size instead.
[   92.051386][ T6002] loop2: detected capacity change from 0 to 1024
[   92.734393][ T6008] loop1: detected capacity change from 0 to 40427
[   92.857628][ T6013] loop3: detected capacity change from 0 to 256
[   92.864732][ T6013] vfat: Unknown parameter 'showexecwer'
[   92.878568][ T6013] loop3: detected capacity change from 0 to 64
[   93.263174][ T6008] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   93.271101][ T6008] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   93.282643][ T6008] F2FS-fs (loop1): invalid crc value
[   93.292496][ T6013] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[   93.303429][ T6013] hfs: filesystem is marked locked, mounting read-only.
[   93.372736][   T37] hfsplus: b-tree write err: -5, ino 4
[   94.697880][ T6008] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   94.727192][ T6008] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   94.734638][ T6008] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   95.306171][ T6026] loop3: detected capacity change from 0 to 1024
[   96.780525][ T6028] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[   97.720300][   T30] audit: type=1804 audit(1768379324.138:2): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.21" name="/newroot/2/file0/bus" dev="loop3" ino=26 res=1 errno=0
[   97.831580][ T6034] hfsplus: found bad thread record in catalog
[   97.867757][ T6035] Invalid ELF header magic: != ELF
[   97.885301][   T30] audit: type=1800 audit(1768379324.148:3): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21" name="bus" dev="loop3" ino=26 res=0 errno=0
[   98.114168][ T4921] hfsplus: b-tree write err: -5, ino 4
[  100.179104][ T6045] kernel profiling enabled (shift: 63)
[  100.184967][ T6045] profiling shift: 63 too large
[  101.014427][ T6050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.028749][ T6050] xt_TCPMSS: Only works on TCP SYN packets
[  101.038011][ T6050] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  102.812547][ T6059] mmap: syz.4.17 (6059) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  102.999069][ T6060] loop4: detected capacity change from 0 to 1024
[  103.366922][ T6064] loop0: detected capacity change from 0 to 16
[  103.786900][ T6064] erofs (device loop0): mounted with root inode @ nid 36.
[  104.890847][ T6072] loop4: detected capacity change from 0 to 64
[  109.142836][ T6101] loop2: detected capacity change from 0 to 256
[  110.356421][ T6104] NILFS (nullb0): couldn't find nilfs on the device
[  113.462016][ T6121] loop2: detected capacity change from 0 to 8
[  113.478365][ T5835] udevd[5835]: incorrect cramfs checksum on /dev/loop2
[  113.486318][ T6121] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  113.865418][ T5833] Bluetooth: hci2: unexpected subevent 0x01 length: 37 > 18
[  114.030344][ T6126] Zero length message leads to an empty skb
[  114.040961][ T6126] cramfs: bad data blocksize 3221485570
[  114.047358][ T6126] cramfs: bad data blocksize 3221485570
[  114.389785][ T5833] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  114.399555][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  114.399581][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  114.399593][ T5833] Workqueue: hci2 hci_rx_work
[  114.399624][ T5833] Call Trace:
[  114.399632][ T5833]  <TASK>
[  114.399641][ T5833]  dump_stack_lvl+0xe8/0x150
[  114.399668][ T5833]  sysfs_create_dir_ns+0x259/0x280
[  114.399697][ T5833]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  114.399732][ T5833]  ? do_raw_spin_unlock+0x122/0x240
[  114.399756][ T5833]  kobject_add_internal+0x6ab/0xcc0
[  114.399788][ T5833]  kobject_add+0x155/0x220
[  114.399816][ T5833]  ? __pfx_kobject_add+0x10/0x10
[  114.399839][ T5833]  ? _raw_spin_unlock+0x28/0x50
[  114.399860][ T5833]  ? get_device_parent+0x366/0x3a0
[  114.399884][ T5833]  device_add+0x408/0xb80
[  114.399907][ T5833]  hci_conn_add_sysfs+0xd5/0x210
[  114.399939][ T5833]  le_conn_complete_evt+0xf1d/0x1420
[  114.399972][ T5833]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  114.399993][ T5833]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  114.400021][ T5833]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  114.400041][ T5833]  ? skb_pull_data+0xfb/0x200
[  114.400069][ T5833]  hci_le_conn_complete_evt+0x187/0x480
[  114.400101][ T5833]  hci_event_packet+0x78f/0x1260
[  114.400119][ T5833]  ? rcu_is_watching+0x15/0xb0
[  114.400146][ T5833]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  114.400170][ T5833]  ? __pfx_hci_event_packet+0x10/0x10
[  114.400201][ T5833]  ? hci_send_to_monitor+0xe2/0x590
[  114.400229][ T5833]  hci_rx_work+0x3ee/0x1060
[  114.400250][ T5833]  ? preempt_schedule_thunk+0x16/0x30
[  114.400275][ T5833]  ? process_one_work+0x868/0x15a0
[  114.400295][ T5833]  process_one_work+0x93a/0x15a0
[  114.400338][ T5833]  ? __pfx_process_one_work+0x10/0x10
[  114.400357][ T5833]  ? do_raw_spin_lock+0x121/0x290
[  114.400385][ T5833]  ? assign_work+0x3c7/0x5b0
[  114.400411][ T5833]  worker_thread+0x9b0/0xee0
[  114.400459][ T5833]  kthread+0x389/0x480
[  114.400483][ T5833]  ? __pfx_worker_thread+0x10/0x10
[  114.400504][ T5833]  ? __pfx_kthread+0x10/0x10
[  114.400530][ T5833]  ret_from_fork+0x510/0xa50
[  114.400555][ T5833]  ? __pfx_ret_from_fork+0x10/0x10
[  114.400574][ T5833]  ? __switch_to+0xc9e/0x1480
[  114.400597][ T5833]  ? __pfx_kthread+0x10/0x10
[  114.400623][ T5833]  ret_from_fork_asm+0x1a/0x30
[  114.400665][ T5833]  </TASK>
[  114.400693][ T5833] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  114.451623][ T5835] udevd[5835]: incorrect cramfs checksum on /dev/loop2
[  114.455173][ T5833] Bluetooth: hci2: failed to register connection device
[  114.498773][   T30] audit: type=1800 audit(1768379340.498:4): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.38" name="file2" dev="loop2" ino=348 res=0 errno=0
[  114.786042][ T6129] loop4: detected capacity change from 0 to 64
[  114.853840][ T6130] syz.2.41 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  115.196627][ T6133] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.016186][ T6140] Bluetooth: MGMT ver 1.23
[  116.055480][ T6137] loop4: detected capacity change from 0 to 4096
[  116.176187][ T6137] EXT4-fs: Ignoring removed mblk_io_submit option
[  116.285518][ T6137] EXT4-fs (loop4): Test dummy encryption mode enabled
[  116.731708][   T51] Bluetooth: hci2: command 0x2016 tx timeout
[  116.756520][ T6137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.934524][ T6137] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  117.299522][ T6150] loop2: detected capacity change from 0 to 2048
[  117.393547][ T5886] libceph: connect (1)[c::]:6789 error -101
[  117.401331][ T5886] libceph: mon0 (1)[c::]:6789 connect error
[  117.441768][ T6150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.606176][ T6137] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  117.652676][ T6148] ceph: No mds server is up or the cluster is laggy
[  117.987690][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.287176][ T6160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.307357][ T6157] netlink: ct family unspecified
[  118.312600][ T6157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.722767][ T6163] =======================================================
[  118.722767][ T6163] WARNING: The mand mount option has been deprecated and
[  118.722767][ T6163]          and is ignored by this kernel. Remove the mand
[  118.722767][ T6163]          option from the mount to silence this warning.
[  118.722767][ T6163] =======================================================
[  118.759407][ T6163] tmpfs: Bad value for 'mpol'
[  118.773531][   T51] Bluetooth: hci2: command 0x2016 tx timeout
[  120.706642][ T6181] loop3: detected capacity change from 0 to 64
[  121.872972][ T6190] loop2: detected capacity change from 0 to 256
[  122.481076][ T6193] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  122.878475][ T6180] [U] 
[  123.224057][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'.
[  126.651014][ T6210] loop1: detected capacity change from 0 to 2048
[  126.775244][ T6210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.896869][ T6020] libceph: connect (1)[c::]:6789 error -101
[  127.193662][ T6209] ceph: No mds server is up or the cluster is laggy
[  127.218692][ T6020] libceph: mon0 (1)[c::]:6789 connect error
[  128.484461][ T6020] libceph: connect (1)[c::]:6789 error -101
[  128.492368][ T6020] libceph: mon0 (1)[c::]:6789 connect error
[  131.403280][ T6247] loop3: detected capacity change from 0 to 8
[  131.424340][ T6247] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  131.462758][ T5835] udevd[5835]: incorrect cramfs checksum on /dev/loop3
[  131.689442][ T5835] udevd[5835]: incorrect cramfs checksum on /dev/loop3
[  131.805469][ T6253] cramfs: bad data blocksize 3221485570
[  132.217828][   T30] audit: type=1800 audit(1768379358.538:5): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.65" name="file2" dev="loop3" ino=348 res=0 errno=0
[  132.828605][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  132.836239][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.327984][ T6259] loop3: detected capacity change from 0 to 2048
[  133.738945][ T6259] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  135.054371][ T6269] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.458935][ T6273] loop4: detected capacity change from 0 to 2048
[  135.783666][ T5979] libceph: connect (1)[c::]:6789 error -101
[  135.789659][ T5979] libceph: mon0 (1)[c::]:6789 connect error
[  135.871598][ T6273] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.034891][ T6272] ceph: No mds server is up or the cluster is laggy
[  136.585957][ T6259] NILFS (loop3): unable to set label with more than 80 bytes
[  137.595578][ T6284] loop2: detected capacity change from 0 to 64
[  137.602721][ T6284] hfs: Unknown parameter 'crZ�'
[  137.694735][ T6283] loop2: detected capacity change from 0 to 64
[  140.839085][ T6299] loop3: detected capacity change from 0 to 8
[  140.883682][ T6299] SQUASHFS error: lzo decompression failed, data probably corrupt
[  140.891790][ T6299] SQUASHFS error: Failed to read block 0x82: -5
[  140.898151][ T6299] SQUASHFS error: Unable to read metadata cache entry [80]
[  140.905453][ T6299] SQUASHFS error: Unable to read inode 0x11f
[  141.799447][ T6308] capability: warning: `syz.1.73' uses deprecated v2 capabilities in a way that may be insecure
[  141.819309][ T6308] 9pnet_virtio: no channels available for device 127.0.0.1
[  143.299715][ T6315] netlink: 'syz.3.79': attribute type 10 has an invalid length.
[  143.726742][ T6315] team0: Device veth1_macvtap failed to register rx_handler
[  145.857915][ T6315] syz.3.79 (6315) used greatest stack depth: 17664 bytes left
[  146.415138][ T6333] loop0: detected capacity change from 0 to 4096
[  146.422598][ T6333] /dev/loop0: Can't open blockdev
[  147.378776][ T6340] loop4: detected capacity change from 0 to 512
[  147.926213][ T6340] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent
[  149.857477][ T6355] loop1: detected capacity change from 0 to 256
[  150.062416][ T6359] loop2: detected capacity change from 0 to 512
[  150.084312][ T6359] EXT4-fs: Ignoring removed bh option
[  150.093840][ T6355] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  150.241994][ T6359] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  150.579557][ T6365] NILFS (nullb0): couldn't find nilfs on the device
[  150.594718][ T6364] loop0: detected capacity change from 0 to 8
[  151.048791][ T6362] SQUASHFS error: Failed to read block 0x1ec: -5
[  151.055203][ T6362] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  151.406929][ T6359] EXT4-fs (loop2): 1 truncate cleaned up
[  151.508566][ T6359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.765651][ T6372] loop0: detected capacity change from 0 to 8
[  152.417023][ T6378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.93'.
[  152.426439][ T6378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.93'.
[  152.444030][   T30] audit: type=1800 audit(1768379378.818:6): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.93" name="file1" dev="loop2" ino=15 res=0 errno=0
[  152.488247][ T6379] EXT4-fs (loop2): shut down requested (1)
[  154.424387][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.330674][ T6400] loop0: detected capacity change from 0 to 4096
[  157.389382][ T6400] EXT4-fs: Ignoring removed mblk_io_submit option
[  157.481133][ T6400] EXT4-fs (loop0): Test dummy encryption mode enabled
[  157.636143][ T6418] loop4: detected capacity change from 0 to 128
[  158.267097][ T6418] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  158.639810][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'.
[  158.748326][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.457164][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.224595][ T6429] loop2: detected capacity change from 0 to 256
[  160.233834][ T6429] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.318382][ T6033] udevd[6033]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  162.219500][ T6446] loop0: detected capacity change from 0 to 64
[  162.237682][ T6446] hfs: Unknown parameter 'fÐ8[®umask'
[  167.100468][ T6475] loop4: detected capacity change from 0 to 4096
[  167.119898][ T6475] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  168.267639][ T6480] syz.2.117 (6480) used greatest stack depth: 16576 bytes left
[  168.870966][ T6475] ntfs3(loop4): ino=1a, mi_enum_attr
[  168.876459][ T6475] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  169.288375][ T6488] loop3: detected capacity change from 0 to 256
[  169.354216][ T6488] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  171.191839][ T6488] netlink: 'syz.3.119': attribute type 1 has an invalid length.
[  171.552046][ T6501] loop0: detected capacity change from 0 to 512
[  171.570315][ T6506] loop4: detected capacity change from 0 to 1024
[  172.450210][ T6501] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  173.089387][ T6501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[  173.223541][ T6501] System zones: 1-12
[  173.257854][ T6501] EXT4-fs error (device loop0): ext4_iget_extra_inode:5072: inode #15: comm syz.0.124: corrupted in-inode xattr: e_value size too large
[  173.307103][ T6488] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.346098][ T6501] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.124: couldn't read orphan inode 15 (err -117)
[  173.999873][ T6501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.533054][ T6489] bond1: (slave veth3): Enslaving as an active interface with a down link
[  174.606194][ T6508] vlan2: entered allmulticast mode
[  175.107196][ T6538] binder: 6536:6538 ioctl c0306201 0 returned -14
[  175.713550][ T6508] veth1: entered allmulticast mode
[  176.067461][ T6507] tipc: Started in network mode
[  176.072550][ T6507] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  176.085573][ T6507] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  176.099709][ T6507] tipc: Enabled bearer <udp:syz0>, priority 10
[  176.835055][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.269027][ T6553] loop1: detected capacity change from 0 to 1024
[  177.280671][ T6553] EXT4-fs: Ignoring removed oldalloc option
[  177.286758][ T6553] EXT4-fs: Ignoring removed bh option
[  177.419207][ T6553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.597190][  T793] tipc: Node number set to 1
[  177.666600][ T6558] loop3: detected capacity change from 0 to 128
[  178.578955][ T6558] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  178.611432][ T6558] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  178.747768][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.608746][ T5824] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.648191][ T6593] vivid-002: disconnect
[  181.396922][ T6584] vivid-002: reconnect
[  181.594601][ T6591] loop0: detected capacity change from 0 to 1024
[  182.161799][ T6601] loop3: detected capacity change from 0 to 16
[  182.355231][ T6601] erofs (device loop3): mounted with root inode @ nid 36.
[  183.313464][ T6605] erofs (device loop3): readahead error at folio 87 @ nid 36
[  183.321030][ T6605] erofs (device loop3): readahead error at folio 86 @ nid 36
[  183.330723][ T6605] syz.3.143: attempt to access beyond end of device
[  183.330723][ T6605] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16
[  183.344695][ T6605] syz.3.143: attempt to access beyond end of device
[  183.344695][ T6605] loop3: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  183.610022][ T6605] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  183.620965][ T6605] erofs (device loop3): read error -117 @ 43 of nid 36
[  184.455245][ T6617] loop4: detected capacity change from 0 to 64
[  185.107194][   T37] hfsplus: b-tree write err: -5, ino 4
[  185.126911][ T6619] loop1: detected capacity change from 0 to 256
[  185.141279][ T6619] exfat: Deprecated parameter 'namecase'
[  185.169356][ T6619] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011fc0, chksum : 0xea22d69b, utbl_chksum : 0xe619d30d)
[  185.252600][ T6621] loop0: detected capacity change from 0 to 256
[  187.925601][ T6640] loop1: detected capacity change from 0 to 64
[  188.806935][ T6633] loop0: detected capacity change from 0 to 4096
[  189.768678][ T6647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.155'.
[  189.877967][ T6633] ntfs3(loop0): Failed to read $UpCase (-4).
[  191.487056][ T6658] loop0: detected capacity change from 0 to 1024
[  191.556232][ T6658] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294967295)!
[  191.623551][ T6658] EXT4-fs (loop0): group descriptors corrupted!
[  192.078031][ T6669] infiniband: Added to hash: ib_dev=ffff8880331ec000 (0)() ndev=ffff88807ec3e000 (29)(lo)
[  192.092685][ T6669] lo speed is unknown, defaulting to 1000
[  192.099186][ T6669] lo speed is unknown, defaulting to 1000
[  192.123596][ T6669] lo speed is unknown, defaulting to 1000
[  192.151914][ T6669] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  192.193807][ T6669] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  192.529265][ T6669] lo speed is unknown, defaulting to 1000
[  192.537863][ T6669] lo speed is unknown, defaulting to 1000
[  192.545612][ T6669] lo speed is unknown, defaulting to 1000
[  192.553268][ T6669] lo speed is unknown, defaulting to 1000
[  192.561910][ T6669] lo speed is unknown, defaulting to 1000
[  194.154223][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.161256][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.929719][ T6033] udevd[6033]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  196.705223][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  196.713197][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  196.719310][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  196.725343][ T5834] Bluetooth: hci2: command 0x2016 tx timeout
[  196.731329][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  198.202899][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'.
[  201.024909][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  201.041454][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  201.655280][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  201.663250][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  201.693696][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  201.733160][ T6728] lo speed is unknown, defaulting to 1000
[  202.223456][ T6740] loop1: detected capacity change from 0 to 128
[  202.536516][ T6739] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[  202.545289][ T6739] FAT-fs (loop1): Filesystem has been set read-only
[  202.554934][ T6739] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  203.734477][   T51] Bluetooth: hci5: command tx timeout
[  203.759674][ T6728] chnl_net:caif_netlink_parms(): no params data found
[  203.903272][ T6755] loop4: detected capacity change from 0 to 512
[  203.953711][ T6755] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  204.078797][ T6755] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  205.036117][   T30] audit: type=1326 audit(1768379430.928:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  205.144971][   T30] audit: type=1326 audit(1768379430.928:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  205.215717][ T6765] loop0: detected capacity change from 0 to 32768
[  205.258753][   T30] audit: type=1326 audit(1768379430.928:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbed7b8df90 code=0x7ffc0000
[  205.286410][   T30] audit: type=1326 audit(1768379430.928:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbed7b8df90 code=0x7ffc0000
[  205.314662][   T30] audit: type=1326 audit(1768379430.928:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  205.345196][ T6755] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  205.363780][   T30] audit: type=1326 audit(1768379430.928:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  205.364788][ T6755] System zones: 
[  205.389303][   T30] audit: type=1326 audit(1768379430.928:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  205.417144][   T30] audit: type=1326 audit(1768379430.928:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  205.441746][   T30] audit: type=1326 audit(1768379430.928:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  205.484597][ T6765] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  205.515614][ T6755] 0-2, 18-18, 34-34
[  205.548454][ T6755] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.179: inode #15: comm syz.4.179: iget: illegal inode #
[  205.553433][ T6765] XFS (loop0): Fixing up incorrect CRC due to padding.
[  205.568135][ T6765] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50.
[  205.584138][ T6765] XFS (loop0): failed to locate log tail
[  205.589824][ T6765] XFS (loop0): log mount/recovery failed: error -74
[  205.603959][ T6765] XFS (loop0): log mount failed
[  205.633801][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.640887][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.709154][ T6755] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.179: couldn't read orphan inode 15 (err -117)
[  205.765800][ T6728] bridge_slave_0: entered allmulticast mode
[  205.779261][ T6755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.818754][   T51] Bluetooth: hci5: command tx timeout
[  205.835425][ T6728] bridge_slave_0: entered promiscuous mode
[  205.932083][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.981494][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.026503][ T6728] bridge_slave_1: entered allmulticast mode
[  206.205148][ T6728] bridge_slave_1: entered promiscuous mode
[  207.618087][ T6728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.637019][ T6788] loop0: detected capacity change from 0 to 256
[  207.783005][ T6755] EXT4-fs error (device loop4): ext4_lookup:1785: comm syz.4.179: inode #15: comm syz.4.179: iget: illegal inode #
[  207.800487][ T6728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.893510][   T51] Bluetooth: hci5: command tx timeout
[  207.895164][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.678606][ T6793] loop4: detected capacity change from 0 to 32768
[  208.928800][ T6728] team0: Port device team_slave_0 added
[  209.831962][ T6728] team0: Port device team_slave_1 added
[  210.203948][ T6801] trusted_key: encrypted_key: key user:syz not found
[  210.244450][   T51] Bluetooth: hci5: command tx timeout
[  211.449401][ T6194] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.792329][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.421761][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.448434][ T6728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.469372][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.476591][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.515808][ T6728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.556430][ T6194] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.040605][ T6833] loop2: detected capacity change from 0 to 512
[  213.716659][ T6833] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  213.729773][ T6833] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  213.791570][ T6833] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  213.875299][ T6833] EXT4-fs (loop2): 1 truncate cleaned up
[  213.884608][ T6833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.955092][ T6194] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.269014][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.638451][ T6843] loop2: detected capacity change from 0 to 2048
[  214.652888][ T6843] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  214.710040][ T6728] hsr_slave_0: entered promiscuous mode
[  214.733321][ T6728] hsr_slave_1: entered promiscuous mode
[  214.741030][ T5835] udevd[5835]: incorrect nilfs2 checksum on /dev/loop2
[  214.759659][ T6845] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.785781][ T6728] debugfs: 'hsr0' already exists in 'hsr'
[  214.791540][ T6728] Cannot create hsr debugfs directory
[  215.845341][ T6194] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.158630][ T6856] cgroup: Invalid name
[  216.253651][ T6858] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  217.797241][ T6194] bridge_slave_1: left allmulticast mode
[  217.803072][ T6194] bridge_slave_1: left promiscuous mode
[  217.811646][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.818728][ T6857] Cannot find set identified by id 65534 to match
[  218.445261][ T6857] loop4: detected capacity change from 0 to 8
[  218.499450][ T6857] squashfs: Unknown parameter 'raw'
[  218.654582][ T6194] bridge_slave_0: left allmulticast mode
[  218.660263][ T6194] bridge_slave_0: left promiscuous mode
[  218.685423][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.868122][ T6888] loop4: detected capacity change from 0 to 32768
[  219.926236][ T6888] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.056390][ T6888] XFS (loop4): Ending clean mount
[  221.436951][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'.
[  222.199806][ T5826] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.594251][ T6909] x_tables: ip_tables: tcp match: only valid for protocol 6
[  223.636860][ T6913] Invalid ELF header magic: != ELF
[  226.743957][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.781459][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.965051][ T6194] bond0 (unregistering): Released all slaves
[  227.134880][ T6941] loop0: detected capacity change from 0 to 64
[  228.112833][ T6194] bond1 (unregistering): (slave veth3): Releasing active interface
[  228.129453][ T6194] bond1 (unregistering): Released all slaves
[  228.177505][ T6916] warning: `syz.4.209' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  229.595063][ T6948] kvm: pic: non byte write
[  229.765464][ T6962] loop0: detected capacity change from 0 to 1024
[  230.679431][ T6969] program syz.4.220 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.538169][ T6728] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  232.565311][ T6728] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  233.738736][ T6988] loop0: detected capacity change from 0 to 164
[  235.231879][ T6728] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  236.071925][ T6728] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  236.407100][ T6194] hsr_slave_0: left promiscuous mode
[  236.459826][ T6194] hsr_slave_1: left promiscuous mode
[  236.474953][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.482430][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.578245][ T7015] loop1: detected capacity change from 0 to 64
[  237.441674][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.489350][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.686726][ T6194] veth0_macvtap: left promiscuous mode
[  237.692550][ T6194] veth1_vlan: left promiscuous mode
[  237.705094][ T6194] veth0_vlan: left promiscuous mode
[  238.308892][ T7025] loop1: detected capacity change from 0 to 8
[  240.188254][ T6194] team0 (unregistering): Port device team_slave_1 removed
[  240.226484][ T6194] team0 (unregistering): Port device team_slave_0 removed
[  241.976535][ T6728] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.518924][ T7065] loop0: detected capacity change from 0 to 2048
[  243.008725][ T7058] loop1: detected capacity change from 0 to 65536
[  243.026513][ T6728] 8021q: adding VLAN 0 to HW filter on device team0
[  243.060056][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.067307][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.077387][ T7065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.114772][  T931] libceph: connect (1)[c::]:6789 error -101
[  243.120890][  T931] libceph: mon0 (1)[c::]:6789 connect error
[  243.164771][ T7058] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  243.199032][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.206204][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.231988][ T7058] XFS (loop1): Ending clean mount
[  243.244346][ T7058] XFS (loop1): Quotacheck needed: Please wait.
[  243.267350][ T7064] ceph: No mds server is up or the cluster is laggy
[  243.407859][ T7058] XFS (loop1): Quotacheck: Done.
[  243.576512][ T5819] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  243.650587][ T6728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  243.671133][ T6728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  243.804345][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[  244.063643][ T7080] loop4: detected capacity change from 0 to 4096
[  244.357908][ T7080] ntfs3(loop4): ino=0, mi_enum_attr
[  244.750910][ T7080] ntfs3(loop4): ino=0, mi_enum_attr
[  245.918530][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'.
[  246.260544][ T7105] batadv0: entered promiscuous mode
[  246.933624][ T7105] macvtap1: entered promiscuous mode
[  246.939159][ T7105] macvtap1: entered allmulticast mode
[  247.038460][ T7105] batadv0: entered allmulticast mode
[  247.108550][ T7105] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  247.537256][ T7131] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  248.031516][ T6728] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.788100][ T7146] Bluetooth: MGMT ver 1.23
[  249.959415][ T6109] IPVS: starting estimator thread 0...
[  250.182058][ T6728] veth0_vlan: entered promiscuous mode
[  250.215748][ T6728] veth1_vlan: entered promiscuous mode
[  250.318296][ T7165] IPVS: using max 53 ests per chain, 127200 per kthread
[  250.339282][ T7168] loop0: detected capacity change from 0 to 1024
[  250.374741][ T7168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.107140][   T51] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  251.129148][ T5822] Bluetooth: hci2: command 0x2016 tx timeout
[  252.291889][ T6728] veth0_macvtap: entered promiscuous mode
[  252.328995][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.368877][ T6728] veth1_macvtap: entered promiscuous mode
[  252.407587][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.419944][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.560393][ T5102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.413309][ T5102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.464380][ T5102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.473119][ T5102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.110185][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.361188][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.582406][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.593915][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  257.023577][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.033680][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.467599][  T793] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  259.688644][  T793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.713421][  T793] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  259.760815][  T793] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  259.789179][  T793] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  259.989036][  T793] usb 6-1: Manufacturer: syz
[  260.009581][  T793] usb 6-1: config 0 descriptor??
[  260.029886][  T793] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  261.617573][ T5832] usb 6-1: USB disconnect, device number 2
[  262.141667][ T7266] netlink: 'syz.2.269': attribute type 1 has an invalid length.
[  262.149527][ T7266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.269'.
[  262.550147][ T7267] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[  262.578557][ T7269] loop0: detected capacity change from 0 to 1024
[  262.608337][ T7269] hfsplus: invalid file type 0120411 for inode 2
[  262.633569][ T7269] hfsplus: failed to load root directory
[  266.509262][ T7294] loop0: detected capacity change from 0 to 32768
[  267.683080][ T7294] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.276 (7294)
[  267.712047][ T7294] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  267.722342][ T7294] BTRFS info (device loop0): using sha256 checksum algorithm
[  267.748921][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  267.750460][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  267.759841][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  267.769082][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  267.778798][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  267.787796][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  267.797952][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  267.806936][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  267.816368][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  267.825241][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  267.834726][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  267.845673][ T7294] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  267.856303][ T7294] BTRFS error (device loop0): open_ctree failed: -12
[  271.414559][ T7347] infiniband: Added to hash: ib_dev=ffff88807be3c000 (0)() ndev=ffff888033050000 (69)(bond0)
[  271.426491][ T7347] infiniband: Removed from hash: ib_dev=ffff88807be3c000 (0)() ndev=ffff888033050000 (69)(bond0)
[  271.437679][ T7347] rdma_rxe: rxe_newlink: failed to add bond0
[  271.533057][ T7344] bond_slave_0: entered promiscuous mode
[  271.538992][ T7344] bond_slave_1: entered promiscuous mode
[  271.545348][ T7344] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  271.554293][ T7344] bond1: (slave macvlan2): making interface the new active one
[  271.562780][ T7344] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  272.879985][ T7356] loop4: detected capacity change from 0 to 4096
[  273.355930][ T7364] loop5: detected capacity change from 0 to 4096
[  273.366644][ T7364] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  273.384566][ T7364] ntfs3(loop5): ino=0, mi_enum_attr
[  273.389872][ T7364] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  273.403702][ T7364] ntfs3(loop5): failed to replay log file. Can't mount rw!
[  274.543462][   T30] audit: type=1804 audit(1768379500.988:16): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.288" name=2F6E6577726F6F742F37322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6532 dev="loop4" ino=33 res=1 errno=0
[  274.686132][ T7380] loop5: detected capacity change from 0 to 512
[  274.719254][ T7380] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  274.884798][ T7380] EXT4-fs (loop5): 1 orphan inode deleted
[  274.890612][ T7380] EXT4-fs (loop5): 1 truncate cleaned up
[  274.940221][   T30] audit: type=1804 audit(1768379501.268:17): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.288" name=2F6E6577726F6F742F37322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop4" ino=33 res=1 errno=0
[  274.997144][ T7380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.941577][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.172836][ T7397] loop2: detected capacity change from 0 to 128
[  276.191966][ T7397] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  276.324235][ T7397] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  276.334880][ T7397] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  276.345211][ T7397] UDF-fs: Scanning with blocksize 512 failed
[  276.354385][ T7397] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  276.367512][ T7397] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  276.377156][ T7397] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  276.384872][ T7397] UDF-fs: Scanning with blocksize 1024 failed
[  276.393531][ T7397] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  276.597041][ T7397] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  276.606680][ T7397] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  276.614324][ T7397] UDF-fs: Scanning with blocksize 2048 failed
[  276.621941][ T7397] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  276.635151][ T7397] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  276.644740][ T7397] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  276.652623][ T7397] UDF-fs: Scanning with blocksize 4096 failed
[  276.658832][ T7397] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  282.015757][ T7433] netlink: 'syz.0.301': attribute type 10 has an invalid length.
[  282.023575][ T7433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.301'.
[  282.100408][ T7433] team0: Port device geneve0 added
[  282.553232][ T7435] loop1: detected capacity change from 0 to 4096
[  283.611659][ T7440] ntfs3(loop1): MFT: r=1b, expect seq=1 instead of 0!
[  284.389800][ T7447] loop2: detected capacity change from 0 to 8192
[  284.411611][   T30] audit: type=1326 audit(1768379510.548:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  285.811973][   T30] audit: type=1326 audit(1768379510.558:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  286.532508][   T30] audit: type=1326 audit(1768379510.558:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  286.594426][   T30] audit: type=1326 audit(1768379510.558:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  286.736866][   T30] audit: type=1326 audit(1768379510.558:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbed7b8f749 code=0x7ffc0000
[  286.863473][   T30] audit: type=1326 audit(1768379510.558:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbed7b8f783 code=0x7ffc0000
[  287.433479][   T30] audit: type=1326 audit(1768379510.658:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbed7b8e1ff code=0x7ffc0000
[  287.527594][   T30] audit: type=1326 audit(1768379510.818:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbed7b8f7d7 code=0x7ffc0000
[  287.612112][   T30] audit: type=1326 audit(1768379510.838:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbed7b8df90 code=0x7ffc0000
[  287.819269][   T30] audit: type=1326 audit(1768379510.838:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbed7b8f34b code=0x7ffc0000
[  288.312716][ T7469] loop1: detected capacity change from 0 to 4096
[  289.503279][ T7476] syzkaller0: entered promiscuous mode
[  289.524118][ T7476] syzkaller0: entered allmulticast mode
[  290.458519][ T7486] loop0: detected capacity change from 0 to 256
[  293.266565][ T7508] bridge1: entered promiscuous mode
[  293.271899][ T7508] bridge1: entered allmulticast mode
[  295.072706][ T7518] loop0: detected capacity change from 0 to 32768
[  295.098746][ T7518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.318 (7518)
[  295.159819][ T7518] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.170095][ T7518] BTRFS info (device loop0): using sha256 checksum algorithm
[  295.532755][ T7518] BTRFS info (device loop0): enabling ssd optimizations
[  295.539885][ T7518] BTRFS info (device loop0): turning on async discard
[  295.546731][ T7518] BTRFS info (device loop0): enabling free space tree
[  295.859142][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  295.859179][   T30] audit: type=1800 audit(1768379522.288:86): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.318" name="file2" dev="loop0" ino=261 res=0 errno=0
[  298.256202][ T5828] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  300.844329][ T7587] sd 0:0:1:0: device reset
[  302.641086][ T7602] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  302.649335][ T7602] vlan2: entered promiscuous mode
[  305.777107][ T7619] loop2: detected capacity change from 0 to 512
[  306.355644][ T7619] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent
[  306.446334][ T7604] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  308.714911][   T30] audit: type=1800 audit(1768379534.258:87): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.335" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  311.530208][ T7691] loop4: detected capacity change from 0 to 1024
[  311.537506][ T7691] EXT4-fs: Ignoring removed oldalloc option
[  311.543496][ T7691] EXT4-fs: Ignoring removed bh option
[  311.863412][ T7691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.261799][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.127003][ T7706] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  314.742499][ T7718] netlink: 'syz.0.332': attribute type 21 has an invalid length.
[  314.751303][ T7718] netlink: 'syz.0.332': attribute type 1 has an invalid length.
[  314.759034][ T7718] netlink: 144 bytes leftover after parsing attributes in process `syz.0.332'.
[  317.302413][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.319319][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  321.932511][ T7768] loop0: detected capacity change from 0 to 4096
[  321.940617][ T7768] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  322.063413][ T7772] input: syz0 as /devices/virtual/input/input7
[  322.730509][ T7777] loop5: detected capacity change from 0 to 2048
[  322.749189][ T7777] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  322.774300][  T980] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  322.936467][  T980] usb 5-1: config 0 has an invalid interface number: 235 but max is 0
[  322.972687][  T980] usb 5-1: config 0 has no interface number 0
[  323.103819][  T980] usb 5-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0
[  323.124158][  T980] usb 5-1: config 0 interface 235 has no altsetting 0
[  323.145657][  T980] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[  323.158999][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.211432][  T980] usb 5-1: Product: syz
[  323.766347][  T980] usb 5-1: Manufacturer: syz
[  323.925770][  T980] usb 5-1: SerialNumber: syz
[  323.944606][  T980] usb 5-1: config 0 descriptor??
[  323.969833][  T980] keyspan 5-1:0.235: Keyspan 1 port adapter converter detected
[  323.988030][  T980] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 87
[  323.996508][  T980] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 7
[  324.141006][  T980] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 81
[  324.150520][  T980] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 1
[  324.428223][  T980] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 85
[  324.446444][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.357'.
[  324.579084][  T980] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  325.164649][ T7805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.586492][ T7793] infiniband: Added to hash: ib_dev=ffff888075910000 (0)() ndev=ffff88807eee0000 (36)(lo)
[  325.598740][ T7793] lo speed is unknown, defaulting to 1000
[  325.604716][ T7793] lo speed is unknown, defaulting to 1000
[  325.611392][ T7793] lo speed is unknown, defaulting to 1000
[  325.630342][ T7793] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  325.693619][ T7793] lo speed is unknown, defaulting to 1000
[  325.702986][ T7793] lo speed is unknown, defaulting to 1000
[  325.710723][ T7793] lo speed is unknown, defaulting to 1000
[  325.718429][ T7793] lo speed is unknown, defaulting to 1000
[  325.726176][ T7793] lo speed is unknown, defaulting to 1000
[  325.775587][   T10] usb 5-1: USB disconnect, device number 2
[  325.811153][   T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  326.042159][   T10] keyspan 5-1:0.235: device disconnected
[  330.164854][ T7827] loop5: detected capacity change from 0 to 65536
[  332.323662][ T7827] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop5": -EINTR
[  334.492869][ T7852] veth2: entered promiscuous mode
[  334.508953][ T7852] veth2: entered allmulticast mode
[  334.955373][ T7855] evm: overlay not supported
[  335.194492][ T7857] loop2: detected capacity change from 0 to 1024
[  335.649731][ T7857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  335.697185][ T7857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.639407][ T7864] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  336.967165][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.942329][ T7869] 9p: Bad value for 'rfdno'
[  338.642359][ T7879] loop2: detected capacity change from 0 to 32768
[  338.679145][ T7879] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  338.687489][ T7879] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  338.718494][ T7879] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  338.734148][ T5979] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  338.756180][ T5979] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  339.660859][ T5979] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 904ms
[  339.684165][ T5979] gfs2: fsid=syz:syz.0: jid=0: Done
[  339.690907][ T7879] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  341.018529][ T7891] loop4: detected capacity change from 0 to 128
[  341.386352][ T7879] gfs2: fsid=syz:syz.0: found 1 quota changes
[  341.470550][ T7897] netlink: 60 bytes leftover after parsing attributes in process `syz.4.384'.
[  341.480702][ T7897] unsupported nlmsg_type 40
[  343.945248][ T7901] nvme_fabrics: unknown parameter or missing value '®™{$n' in ctrl creation request
[  344.938760][ T7409] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  345.060792][ T7917] loop2: detected capacity change from 0 to 164
[  345.109264][ T7409] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  345.119522][ T7409] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  345.295800][ T7409] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  345.305301][ T7409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  345.313310][ T7409] usb 6-1: SerialNumber: syz
[  345.551011][ T7919] Unsupported NM flag settings (8)
[  345.568482][ T7919] Unsupported NM flag settings (8)
[  345.909152][ T7409] usb 6-1: bad CDC descriptors
[  345.922504][ T7409] usb-storage 6-1:1.0: USB Mass Storage device detected
[  346.075941][ T7409] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  346.509392][ T7926] loop5: detected capacity change from 0 to 4096
[  346.625942][ T7927] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  346.645018][ T7926] NILFS (loop5): corrupt root inode
[  346.768434][ T7925] loop2: detected capacity change from 0 to 1024
[  346.954889][ T7925] hfsplus: invalid file type 0120411 for inode 2
[  346.964577][ T7925] hfsplus: failed to load root directory
[  347.283399][ T7929] trusted_key: encrypted_key: insufficient parameters specified
[  347.942260][   T24] usb 6-1: USB disconnect, device number 3
[  352.932938][ T7957] loop2: detected capacity change from 0 to 512
[  353.031126][ T5822] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  354.289741][ T7957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.359497][ T7976] loop1: detected capacity change from 0 to 512
[  354.376845][ T7957] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.414648][ T7976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  354.643177][ T7976] EXT4-fs error (device loop1): __ext4_fill_super:5560: inode #2: comm syz.1.402: inode has both inline data and extents flags
[  354.687215][ T7976] EXT4-fs (loop1): Remounting filesystem read-only
[  354.740137][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[  355.010272][ T7976] EXT4-fs (loop1): get root inode failed
[  355.016673][ T7976] EXT4-fs (loop1): mount failed
[  355.229729][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.380950][ T7985] Bluetooth: MGMT ver 1.23
[  359.286007][ T8010] loop1: detected capacity change from 0 to 64
[  359.754024][ T8010] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  361.312141][ T8023] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  363.164095][ T8030] Malformed UNC in devname
[  363.164095][ T8030] 
[  363.171060][ T8030] CIFS: VFS: Malformed UNC in devname
[  365.512554][ T8036] block device autoloading is deprecated and will be removed.
[  367.158432][ T8045] loop2: detected capacity change from 0 to 1024
[  369.153709][ T8051] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  369.160420][ T8051] hfsplus: xattr searching failed
[  369.170394][ T8052] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  369.177471][ T8052] hfsplus: xattr search failed
[  369.300913][ T5989] hfsplus: b-tree write err: -5, ino 4
[  369.345555][ T8055] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  369.514936][ T8055] Cannot find add_set index 0 as target
[  477.303379][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  477.310391][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5829/1:b..l
[  477.318687][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=21277, q=89 ncpus=2)
[  477.326306][    C1] task:syz-executor    state:R  running task     stack:19496 pid:5829  tgid:5829  ppid:5816   task_flags:0x400140 flags:0x00080000
[  477.340693][    C1] Call Trace:
[  477.343970][    C1]  <TASK>
[  477.346893][    C1]  __schedule+0x14db/0x5030
[  477.351410][    C1]  ? __pfx___schedule+0x10/0x10
[  477.356254][    C1]  ? __lock_acquire+0x6b6/0x2cf0
[  477.361180][    C1]  preempt_schedule_irq+0x4d/0xa0
[  477.366190][    C1]  irqentry_exit+0x5e3/0x670
[  477.370765][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  477.376728][    C1] RIP: 0010:unwind_next_frame+0x4db/0x23d0
[  477.382519][    C1] Code: 4c 8b 7c 24 50 48 bd 00 00 00 00 00 fc ff df 4c 8b 64 24 20 4c 8b 6c 24 48 0f 84 79 15 00 00 e9 03 02 00 00 49 89 d5 48 89 d5 <48> 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83
[  477.402105][    C1] RSP: 0018:ffffc9000498f258 EFLAGS: 00000246
[  477.408195][    C1] RAX: ffffffff90424300 RBX: ffffffff8fc245e0 RCX: 0000000080000000
[  477.416154][    C1] RDX: ffffffff8fc245e0 RSI: ffffffff904242fa RDI: ffffffff8be09d00
[  477.424109][    C1] RBP: ffffffff8fc245e0 R08: 0000000000000001 R09: ffffffff8e144f60
[  477.432072][    C1] R10: ffffc9000498f378 R11: ffffffff81ad0f00 R12: ffffffff82055f0d
[  477.440025][    C1] R13: ffffffff8fc245e0 R14: ffffc9000498f328 R15: 000000000001055f
[  477.447993][    C1]  ? shmem_evict_inode+0x26d/0xa70
[  477.453102][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  477.459263][    C1]  ? unwind_next_frame+0xd4/0x23d0
[  477.464376][    C1]  ? unwind_next_frame+0xa5/0x23d0
[  477.469481][    C1]  ? shmem_evict_inode+0x26e/0xa70
[  477.474590][    C1]  ? shmem_evict_inode+0x26e/0xa70
[  477.479697][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  477.485837][    C1]  arch_stack_walk+0x11c/0x150
[  477.490595][    C1]  ? shmem_evict_inode+0x26e/0xa70
[  477.495695][    C1]  stack_trace_save+0x9c/0xe0
[  477.500372][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  477.505754][    C1]  ? stack_depot_save_flags+0x33/0x810
[  477.511204][    C1]  save_stack+0xf5/0x1f0
[  477.515446][    C1]  ? __pfx_save_stack+0x10/0x10
[  477.520278][    C1]  ? free_unref_folios+0xcc0/0x13e0
[  477.525474][    C1]  ? folios_put_refs+0x584/0x670
[  477.530391][    C1]  ? shmem_undo_range+0x49e/0x1490
[  477.535491][    C1]  ? shmem_evict_inode+0x26e/0xa70
[  477.540592][    C1]  ? page_ext_put+0x97/0xc0
[  477.545081][    C1]  __reset_page_owner+0x71/0x1f0
[  477.550004][    C1]  free_unref_folios+0xcc0/0x13e0
[  477.555022][    C1]  folios_put_refs+0x584/0x670
[  477.559781][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[  477.565068][    C1]  ? folio_batch_remove_exceptionals+0x18c/0x1f0
[  477.571383][    C1]  shmem_undo_range+0x49e/0x1490
[  477.576330][    C1]  ? __pfx_shmem_undo_range+0x10/0x10
[  477.581706][    C1]  ? arch_stack_walk+0xfc/0x150
[  477.586556][    C1]  ? __lock_acquire+0x6b6/0x2cf0
[  477.591485][    C1]  shmem_evict_inode+0x26e/0xa70
[  477.596415][    C1]  ? inode_wait_for_writeback+0x14d/0x370
[  477.602118][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  477.607559][    C1]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  477.613609][    C1]  ? do_raw_spin_lock+0x121/0x290
[  477.618621][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  477.623890][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  477.629341][    C1]  evict+0x5f4/0xae0
[  477.633234][    C1]  ? __pfx_evict+0x10/0x10
[  477.637638][    C1]  ? _raw_spin_unlock+0x28/0x50
[  477.642467][    C1]  ? iput+0xb25/0xe80
[  477.646450][    C1]  do_unlinkat+0x42d/0x6d0
[  477.651042][    C1]  ? __pfx_do_unlinkat+0x10/0x10
[  477.655982][    C1]  ? strncpy_from_user+0x150/0x2c0
[  477.661146][    C1]  ? do_getname+0x152/0x250
[  477.665665][    C1]  __x64_sys_unlink+0x49/0x60
[  477.670350][    C1]  do_syscall_64+0xec/0xf80
[  477.674845][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.680894][    C1]  ? trace_irq_disable+0x37/0x100
[  477.685905][    C1]  ? clear_bhb_loop+0x40/0x90
[  477.690583][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.696459][    C1] RIP: 0033:0x7fbed7b8ecf7
[  477.700868][    C1] RSP: 002b:00007ffdbb0eca98 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  477.709259][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbed7b8ecf7
[  477.717220][    C1] RDX: 00007ffdbb0ecac0 RSI: 00007ffdbb0ecb50 RDI: 00007ffdbb0ecb50
[  477.725178][    C1] RBP: 00007ffdbb0ecb50 R08: 0000000000000000 R09: 0000000000000000
[  477.733308][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdbb0edbe0
[  477.741284][    C1] R13: 00007fbed7c13d7d R14: 000000000005a668 R15: 00007ffdbb0edc20
[  477.749250][    C1]  </TASK>
[  477.752268][    C1] rcu: rcu_preempt kthread starved for 10540 jiffies! g21277 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  477.763452][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  477.773408][    C1] rcu: RCU grace-period kthread stack dump:
[  477.779279][    C1] task:rcu_preempt     state:R  running task     stack:27656 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  477.792824][    C1] Call Trace:
[  477.796108][    C1]  <TASK>
[  477.799025][    C1]  __schedule+0x14db/0x5030
[  477.803527][    C1]  ? do_raw_spin_lock+0x121/0x290
[  477.808558][    C1]  ? __pfx___schedule+0x10/0x10
[  477.813413][    C1]  ? schedule+0x91/0x360
[  477.817735][    C1]  schedule+0x165/0x360
[  477.821886][    C1]  schedule_timeout+0x12b/0x270
[  477.826719][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  477.832161][    C1]  ? __pfx_process_timeout+0x10/0x10
[  477.837491][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  477.843278][    C1]  ? prepare_to_swait_event+0x341/0x380
[  477.848811][    C1]  rcu_gp_fqs_loop+0x301/0x11b0
[  477.853646][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  477.858830][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  477.864622][    C1]  ? rcu_gp_init+0x144f/0x1700
[  477.869380][    C1]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  477.875259][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  477.880539][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  477.885807][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  477.891597][    C1]  rcu_gp_kthread+0x9b/0x2d0
[  477.896173][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  477.901357][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  477.907146][    C1]  ? __kthread_parkme+0x7b/0x200
[  477.912073][    C1]  ? __kthread_parkme+0x1a1/0x200
[  477.917080][    C1]  kthread+0x389/0x480
[  477.921148][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  477.926327][    C1]  ? __pfx_kthread+0x10/0x10
[  477.930904][    C1]  ret_from_fork+0x510/0xa50
[  477.935483][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  477.940573][    C1]  ? __switch_to+0xc9e/0x1480
[  477.945233][    C1]  ? __pfx_kthread+0x10/0x10
[  477.949808][    C1]  ret_from_fork_asm+0x1a/0x30
[  477.954571][    C1]  </TASK>
[  477.957571][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  477.963878][    C1] Sending NMI from CPU 1 to CPUs 0:
[  477.969163][    C0] NMI backtrace for cpu 0
[  477.969188][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  477.969222][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  477.969240][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  477.969271][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 8f 29 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  477.969284][    C0] RSP: 0018:ffffffff8de07dc0 EFLAGS: 000002c2
[  477.969298][    C0] RAX: 0000000000a96dab RBX: ffffffff8197762e RCX: 0000000080000001
[  477.969309][    C0] RDX: 0000000000000001 RSI: ffffffff8d9a7514 RDI: ffffffff8be09d60
[  477.969319][    C0] RBP: ffffffff8de07eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb
[  477.969330][    C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff8fa2daf0
[  477.969341][    C0] R13: 1ffffffff1bd29d0 R14: 0000000000000000 R15: 0000000000000000
[  477.969350][    C0] FS:  0000000000000000(0000) GS:ffff888125bf7000(0000) knlGS:0000000000000000
[  477.969363][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  477.969379][    C0] CR2: 0000001b30c03ff8 CR3: 0000000028f7e000 CR4: 00000000003526f0
[  477.969392][    C0] Call Trace:
[  477.969398][    C0]  <TASK>
[  477.969403][    C0]  default_idle+0x13/0x20
[  477.969421][    C0]  default_idle_call+0x73/0xb0
[  477.969438][    C0]  do_idle+0x1be/0x4d0
[  477.969456][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  477.969474][    C0]  ? __pfx_do_idle+0x10/0x10
[  477.969497][    C0]  cpu_startup_entry+0x44/0x60
[  477.969515][    C0]  rest_init+0x2de/0x300
[  477.969534][    C0]  start_kernel+0x386/0x3d0
[  477.969561][    C0]  x86_64_start_reservations+0x24/0x30
[  477.969578][    C0]  x86_64_start_kernel+0x143/0x1c0
[  477.969596][    C0]  common_startup_64+0x13e/0x147
[  477.969624][    C0]  </TASK>